Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c6e5-c9d7-4fd4-8114-c67f21e9b3ae.roa
File:                     1044c6e5-c9d7-4fd4-8114-c67f21e9b3ae.roa (raw, json)
Hash identifier:          P6BoubDSRECcBrTkBA1bPDhakZ5qUu0997XoFRFshPg=
Subject key identifier:   B9:B3:5C:F1:C5:4D:DE:EC:FA:C6:D4:3E:A3:E7:77:4E:E9:85:BB:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2545CCBE347B2825627C9875F60E19A0C79074B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c6e5-c9d7-4fd4-8114-c67f21e9b3ae.roa
Signing time:             Mon 18 Aug 2025 15:31:31 +0000
ROA not before:           Mon 18 Aug 2025 15:31:31 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:81b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:cc:be:34:7b:28:25:62:7c:98:75:f6:0e:19:a0:c7:90:74:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:31:31 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=16ee9ec13b113ba83bc2a251aaa846a76277ac54e8844b53bc63f86d172412d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:64:c8:2b:00:fb:7e:b9:65:4b:8d:09:d6:
                    bd:2b:3e:ff:f2:3f:a9:65:38:b1:89:b6:c7:a8:cd:
                    72:e6:40:85:6b:0a:20:24:10:57:b1:8e:11:fd:5f:
                    8d:ff:51:82:25:59:62:67:3e:4b:2f:66:8a:b3:6b:
                    fe:92:9f:8a:ab:b4:e7:74:b1:5b:55:57:ec:28:98:
                    95:6d:67:8e:3f:38:ca:3e:b1:ab:80:82:3b:2d:ee:
                    c1:74:5c:eb:6f:8a:49:52:6b:aa:b7:e5:6e:f6:88:
                    39:16:18:11:7d:f6:5a:84:c7:65:6a:b2:ed:51:98:
                    cf:91:da:e7:0e:0f:77:97:d1:ff:fe:1b:19:52:bd:
                    d6:97:a3:4e:14:cd:3f:00:0c:d9:96:6a:99:5f:32:
                    f5:59:1e:7a:a5:84:1a:6f:40:3f:16:ad:c4:39:09:
                    79:57:f4:9e:9b:f9:65:36:6e:7c:09:a4:92:98:c3:
                    11:c0:09:b5:f7:74:ba:3e:cc:6a:c5:e4:20:25:31:
                    e9:39:da:dd:d1:96:33:b9:05:45:61:f4:0e:96:6f:
                    8d:6e:19:b2:05:10:e1:27:e9:95:75:11:46:ca:cd:
                    68:89:d6:2e:1f:37:66:a8:be:fc:0a:5b:33:5a:77:
                    fe:d9:a5:c5:b4:53:58:80:01:03:6b:00:de:d7:a6:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:5C:F1:C5:4D:DE:EC:FA:C6:D4:3E:A3:E7:77:4E:E9:85:BB:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c6e5-c9d7-4fd4-8114-c67f21e9b3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:53:5c:09:be:9f:e3:ec:e8:b4:b9:59:03:bf:d2:e3:47:
         24:44:ca:7c:83:3a:d0:25:8c:3c:4d:7e:a7:18:e3:6b:99:3d:
         8e:5e:6f:00:c7:53:b4:2a:0e:1e:74:a5:aa:b5:96:f0:f8:13:
         3d:f8:29:1c:ee:36:82:a9:ce:f3:ea:ee:a6:22:89:11:6a:d1:
         2c:be:58:4a:ea:fc:ed:ac:a3:15:a7:00:34:12:12:ae:37:c2:
         18:77:69:38:43:d8:d9:8f:85:cc:18:65:d1:0e:30:4c:a3:36:
         c0:99:40:a6:69:b8:a3:8e:a8:f6:34:a6:bd:aa:cb:4b:29:1c:
         cb:8c:79:d6:50:9d:42:6b:2f:5a:a3:01:d0:fd:10:37:02:2e:
         89:8f:e9:ea:bf:54:34:71:49:41:a7:7d:5f:2e:5a:12:79:c6:
         ce:6b:93:03:8b:07:6c:92:43:58:7f:5d:0c:a6:15:67:26:cd:
         29:4b:2f:a7:88:f4:79:f0:ee:21:da:71:8c:9b:bf:24:b9:61:
         cf:43:67:d1:c0:a5:4f:a6:c5:36:a5:95:9d:0d:79:80:3a:6a:
         01:01:4e:8b:3e:6f:38:d2:39:99:62:7f:55:08:fb:7b:97:da:
         86:02:de:db:a5:c0:a6:6e:15:01:69:8b:3b:b7:17:41:16:a1:
         99:5c:5c:ea
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJUXMvjR7KCVifJh19g4ZoMeQdLgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMTMxWhcNMjUwOTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmVlOWVjMTNiMTEzYmE4M2JjMmEyNTFhYWE4NDZhNzYy
NzdhYzU0ZTg4NDRiNTNiYzYzZjg2ZDE3MjQxMmQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoYGTIKwD7frllS40J1r0rPv/yP6llOLGJtseozXLmQIVr
CiAkEFexjhH9X43/UYIlWWJnPksvZoqza/6Sn4qrtOd0sVtVV+womJVtZ44/OMo+
sauAgjst7sF0XOtviklSa6q35W72iDkWGBF99lqEx2Vqsu1RmM+R2ucOD3eX0f/+
GxlSvdaXo04UzT8ADNmWaplfMvVZHnqlhBpvQD8WrcQ5CXlX9J6b+WU2bnwJpJKY
wxHACbX3dLo+zGrF5CAlMek52t3RljO5BUVh9A6Wb41uGbIFEOEn6ZV1EUbKzWiJ
1i4fN2aovvwKWzNad/7ZpcW0U1iAAQNrAN7Xpg6pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUubNc8cVN3uz6xtQ+o+d3TumFuw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEwNDRjNmU1LWM5ZDctNGZkNC04MTE0LWM2N2YyMWU5YjNhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//gbAwDQYJKoZIhvcNAQELBQADggEBAI+RU1wJvp/j7Oi0uVkDv9Lj
RyREynyDOtAljDxNfqcY42uZPY5ebwDHU7QqDh50paq1lvD4Ez34KRzuNoKpzvPq
7qYiiRFq0Sy+WErq/O2soxWnADQSEq43whh3aThD2NmPhcwYZdEOMEyjNsCZQKZp
uKOOqPY0pr2qy0spHMuMedZQnUJrL1qjAdD9EDcCLomP6eq/VDRxSUGnfV8uWhJ5
xs5rkwOLB2ySQ1h/XQymFWcmzSlLL6eI9Hnw7iHacYybvyS5Yc9DZ9HApU+mxTal
lZ0NeYA6agEBTos+bzjSOZlif1UI+3uX2oYC3tulwKZuFQFpizu3F0EWoZlcXOo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:31 2025 by rpki-client