Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa
File:                     62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa (raw, json)
Hash identifier:          SFVOhfv2WwQ8u7QWaK9H+7sxbW6PG7vln6Ji3kyAQog=
Subject key identifier:   08:76:D4:C9:63:24:1A:D1:84:41:53:E9:EB:E8:91:69:FE:8E:22:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       121F069301921489C95E76AABDAE9D54C4308FA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa
Signing time:             Sat 03 May 2025 00:21:07 +0000
ROA not before:           Sat 03 May 2025 00:21:07 +0000
ROA not after:            Sat 07 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1f:06:93:01:92:14:89:c9:5e:76:aa:bd:ae:9d:54:c4:30:8f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:21:07 2025 GMT
            Not After : Jun  7 23:59:59 2025 GMT
        Subject: serialNumber=77cb582f27227a8e182727c8b8694f2f4410498a67f9c30674dc26683018837f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d9:fb:5a:f9:bf:b4:6e:55:71:96:39:5b:c4:
                    ee:cf:f2:74:31:56:7f:30:f7:b9:64:83:e8:bc:ab:
                    9f:34:a4:b5:61:1f:f4:cf:52:9a:4f:b7:ed:cc:59:
                    f0:73:26:34:45:13:58:0c:10:16:92:16:3e:99:78:
                    b9:6c:62:ff:77:08:10:e7:69:7b:37:f9:3d:e3:a2:
                    ee:33:6f:3c:03:7e:67:b8:04:c7:0a:5a:96:12:e5:
                    b3:5f:35:92:79:0b:00:c3:05:70:b3:f5:58:f4:69:
                    ae:13:69:19:74:5c:a7:57:ab:4e:65:a8:87:2a:14:
                    0f:c1:a9:01:42:2b:cb:b9:3f:9a:67:1c:8d:1d:72:
                    03:1d:c4:a6:bd:cf:8e:4a:b9:c5:43:47:21:5e:f2:
                    c3:44:78:aa:87:15:90:e1:3d:c3:65:25:a3:cc:03:
                    15:7b:22:40:ea:81:e4:32:9d:26:da:d1:d2:2a:cf:
                    15:96:06:7d:64:d3:42:43:2b:ea:2f:81:48:12:3a:
                    ee:7b:e9:0a:d7:e2:4d:bb:58:ee:a6:16:64:89:c1:
                    e0:27:3e:a1:be:74:ee:76:dd:ba:5d:4f:ec:96:ef:
                    61:7c:9c:10:42:48:a5:fe:4d:a3:4b:ce:29:ad:90:
                    f9:fc:fc:f2:45:77:67:21:e0:82:6e:00:10:43:0e:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:76:D4:C9:63:24:1A:D1:84:41:53:E9:EB:E8:91:69:FE:8E:22:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00::/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:46:81:47:ab:68:82:05:ea:5b:13:80:b3:28:34:b9:1b:
         4b:d6:01:28:ee:82:73:ef:fa:f0:c5:f6:46:f7:e9:ea:a2:2c:
         5a:b9:93:f8:76:4e:58:74:96:e3:8c:1d:64:14:88:1b:60:79:
         2f:33:a9:d8:4d:4f:05:a9:65:c9:3b:4c:57:06:d7:52:52:27:
         44:ec:27:22:17:bd:33:9a:25:db:62:b2:9e:38:19:aa:b7:4f:
         6a:b0:29:2d:76:ca:8e:1d:53:9e:78:9d:e7:38:d2:c8:df:60:
         15:ea:ad:a6:72:fb:12:cb:a8:4e:cc:d8:90:91:9e:b8:13:34:
         ac:9e:e1:d9:bf:eb:24:e2:9b:f2:e2:cf:17:1a:d9:d8:7f:05:
         1e:62:0c:06:13:92:2a:1d:d5:19:3d:ef:56:5d:2c:d5:7f:37:
         9d:54:9b:10:ec:0b:dd:70:f7:3b:90:27:08:f7:cf:c3:3c:fe:
         4f:2a:49:6e:56:12:fb:4f:c5:71:41:01:30:e5:31:3b:ce:08:
         1e:e8:db:d1:aa:69:05:5b:4c:65:1d:5b:7f:0f:26:04:b3:9d:
         1d:77:e5:ec:21:76:b8:38:9a:22:25:d8:0e:e7:e9:27:6c:57:
         d2:96:a8:a4:00:6b:66:52:5b:b4:8d:61:9e:85:88:8c:5e:35:
         bf:36:13:4f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEh8GkwGSFInJXnaqva6dVMQwj6gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAyMTA3WhcNMjUwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3N2NiNTgyZjI3MjI3YThlMTgyNzI3YzhiODY5NGYyZjQ0
MTA0OThhNjdmOWMzMDY3NGRjMjY2ODMwMTg4MzdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD12fta+b+0blVxljlbxO7P8nQxVn8w97lkg+i8q580pLVh
H/TPUppPt+3MWfBzJjRFE1gMEBaSFj6ZeLlsYv93CBDnaXs3+T3jou4zbzwDfme4
BMcKWpYS5bNfNZJ5CwDDBXCz9Vj0aa4TaRl0XKdXq05lqIcqFA/BqQFCK8u5P5pn
HI0dcgMdxKa9z45KucVDRyFe8sNEeKqHFZDhPcNlJaPMAxV7IkDqgeQynSba0dIq
zxWWBn1k00JDK+ovgUgSOu576QrX4k27WO6mFmSJweAnPqG+dO523bpdT+yW72F8
nBBCSKX+TaNLzimtkPn8/PJFd2ch4IJuABBDDvYhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCHbUyWMkGtGEQVPp6+iRaf6OIiIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyZDczYjEyLWJkNzItNGZjNS04ZDBkLWIwZmQ2YjA1NTkyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC
MAYDBAAmAB8wDQYJKoZIhvcNAQELBQADggEBALyMRoFHq2iCBepbE4CzKDS5G0vW
ASjugnPv+vDF9kb36eqiLFq5k/h2Tlh0luOMHWQUiBtgeS8zqdhNTwWpZck7TFcG
11JSJ0TsJyIXvTOaJdtisp44Gaq3T2qwKS12yo4dU554nec40sjfYBXqraZy+xLL
qE7M2JCRnrgTNKye4dm/6yTim/Lizxca2dh/BR5iDAYTkiod1Rk971ZdLNV/N51U
mxDsC91w9zuQJwj3z8M8/k8qSW5WEvtPxXFBATDlMTvOCB7o29GqaQVbTGUdW38P
JgSznR135ewhdrg4miIl2A7n6SdsV9KWqKQAa2ZSW7SNYZ6FiIxeNb82E08=
-----END CERTIFICATE-----
Generated at Mon May 5 15:45:34 2025 by rpki-client