Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
File:                     46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa (raw, json)
Hash identifier:          ldOQK3aplLN7sAMLpKxIVcrTL9AfWkrHqXtLRrlfhxU=
Subject key identifier:   05:13:D3:8C:CF:2E:F5:69:71:CE:93:8D:3B:1F:25:6D:CB:DB:47:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41D1DD649182C0AA4A6AF30775FB5F88FA77B067
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
Signing time:             Tue 12 Aug 2025 00:11:12 +0000
ROA not before:           Tue 12 Aug 2025 00:11:12 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:a400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:dd:64:91:82:c0:aa:4a:6a:f3:07:75:fb:5f:88:fa:77:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 00:11:12 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=5c35e6f55ff6cb9fafcf4df6f4dfef1d9d00f624282e46783f4c41afc9103ee2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:48:d1:96:cb:a1:5c:b9:d4:38:d9:ac:ed:
                    14:27:5b:65:8c:13:31:c6:ef:14:92:dd:93:13:52:
                    88:f9:97:04:6d:14:3e:83:1b:5d:96:19:8c:0d:0c:
                    9e:c4:29:ef:de:dc:1f:33:6e:03:b0:27:de:72:2e:
                    b5:a5:82:1b:ad:d9:14:31:27:9e:80:e6:6b:f4:5e:
                    86:e3:d4:b1:e0:97:dd:24:34:f7:98:ac:95:e9:af:
                    69:42:a6:ab:5a:5d:b7:0d:fa:61:f5:92:21:69:0a:
                    c5:c3:46:3c:0c:3b:e4:6e:d8:2f:17:61:be:9e:37:
                    9c:8d:36:ff:ed:31:99:82:4c:19:b4:04:ef:11:25:
                    cc:25:1a:04:6c:34:73:fa:23:52:63:54:1e:df:6b:
                    81:e4:84:7c:e3:60:8a:5c:9c:ef:ee:68:b9:ad:3e:
                    1c:c9:03:0f:70:94:4b:cb:e9:a2:03:e1:ba:f1:98:
                    db:89:0f:64:f8:7a:bf:ad:b6:6c:8d:88:34:52:78:
                    34:f9:eb:ab:64:8a:4b:06:7e:ea:14:51:3e:3e:2d:
                    2e:17:aa:44:62:d6:16:ab:23:02:a2:28:64:ad:3a:
                    e6:f1:ab:ad:16:cc:7f:6e:da:8f:60:85:f8:b5:4a:
                    eb:e1:d3:8c:e0:43:7c:d0:3b:83:30:f8:8e:f6:c1:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:D3:8C:CF:2E:F5:69:71:CE:93:8D:3B:1F:25:6D:CB:DB:47:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:06:b4:b4:01:cb:15:de:13:a7:ef:d5:e3:f0:72:95:32:
         ff:d2:b9:76:be:fc:24:54:c1:3d:0f:2d:ec:6c:61:77:69:00:
         26:30:c9:96:6c:1f:9a:1e:9f:86:91:4d:1e:7d:2b:90:85:00:
         98:13:ea:08:12:07:e4:98:2f:cd:18:76:c0:7c:bd:c7:d9:65:
         69:05:bd:c6:6c:83:12:5b:d1:49:a2:8c:92:b8:8a:22:8e:df:
         3e:48:43:51:d4:e9:1b:e6:07:b6:5d:3a:c5:2a:57:72:39:30:
         a6:76:93:59:2d:11:3b:93:0d:89:cc:58:b3:75:29:5b:6b:58:
         df:5d:30:42:56:85:a0:de:8d:42:c2:8f:fd:c0:d7:31:27:e8:
         1c:d8:0e:f7:17:95:09:b4:df:53:2d:98:9c:82:5d:27:66:ef:
         44:0a:28:50:69:bb:8a:e5:1a:b4:a4:76:aa:69:4a:f2:6b:c4:
         24:06:40:9a:9c:7c:b7:8d:4a:10:2f:99:a8:26:4f:8c:31:a7:
         60:93:10:43:0b:7d:7f:2d:9b:dd:e9:ab:89:b4:c3:56:ba:83:
         6b:a1:1d:8e:f6:8c:84:3b:2a:0a:76:2d:97:0a:c3:5a:2d:3e:
         f2:d8:d8:34:5d:dd:c4:71:2f:93:5b:d4:af:8a:b0:80:28:18:
         d2:f9:2b:23
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQdHdZJGCwKpKavMHdftfiPp3sGcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAxMTEyWhcNMjUwOTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzM1ZTZmNTVmZjZjYjlmYWZjZjRkZjZmNGRmZWYxZDlk
MDBmNjI0MjgyZTQ2NzgzZjRjNDFhZmM5MTAzZWUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDilkjRlsuhXLnUONms7RQnW2WMEzHG7xSS3ZMTUoj5lwRt
FD6DG12WGYwNDJ7EKe/e3B8zbgOwJ95yLrWlghut2RQxJ56A5mv0Xobj1LHgl90k
NPeYrJXpr2lCpqtaXbcN+mH1kiFpCsXDRjwMO+Ru2C8XYb6eN5yNNv/tMZmCTBm0
BO8RJcwlGgRsNHP6I1JjVB7fa4HkhHzjYIpcnO/uaLmtPhzJAw9wlEvL6aID4brx
mNuJD2T4er+ttmyNiDRSeDT566tkiksGfuoUUT4+LS4XqkRi1harIwKiKGStOubx
q60WzH9u2o9ghfi1Suvh04zgQ3zQO4Mw+I72wU01AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUBRPTjM8u9WlxzpONOx8lbcvbRzwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2ZWRkN2ZmLTk2YzAtNGRjYi1hNzJlLTJkZDQ4OWQ2OTVlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/xpDANBgkqhkiG9w0BAQsFAAOCAQEALdMGtLQByxXeE6fv1ePwcpUy
/9K5dr78JFTBPQ8t7Gxhd2kAJjDJlmwfmh6fhpFNHn0rkIUAmBPqCBIH5JgvzRh2
wHy9x9llaQW9xmyDElvRSaKMkriKIo7fPkhDUdTpG+YHtl06xSpXcjkwpnaTWS0R
O5MNicxYs3UpW2tY310wQlaFoN6NQsKP/cDXMSfoHNgO9xeVCbTfUy2YnIJdJ2bv
RAooUGm7iuUatKR2qmlK8mvEJAZAmpx8t41KEC+ZqCZPjDGnYJMQQwt9fy2b3emr
ibTDVrqDa6EdjvaMhDsqCnYtlwrDWi0+8tjYNF3dxHEvk1vUr4qwgCgY0vkrIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:21:59 2025 by rpki-client