Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
File:                     7c163596-3504-4d1c-ac66-c039ee66cb59.roa (raw, json)
Hash identifier:          /tBk1FqwT2mWUYzl9VdwbZsilSeUVfel55p39SLAxvc=
Subject key identifier:   43:C9:82:EC:59:FD:28:73:B5:F6:17:A4:69:FD:EE:79:0E:4D:A3:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       525CDEA8BC1C12A5644096803038346B418F47EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa
Signing time:             Tue 12 Aug 2025 00:20:13 +0000
ROA not before:           Tue 12 Aug 2025 00:20:13 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5c:de:a8:bc:1c:12:a5:64:40:96:80:30:38:34:6b:41:8f:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 00:20:13 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=d7a0c9017e270ad133f2f43296e690501730ffb6ff72e9c04c55706f71549cbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:36:cf:ac:a3:f1:72:f5:0e:0a:ba:35:be:
                    9d:e9:ee:67:bd:dc:99:58:9d:27:24:7c:9f:22:3b:
                    9f:bf:37:41:dc:2f:7e:03:1b:7f:d7:f8:72:01:f8:
                    ee:74:71:bf:d0:e8:0a:5f:ba:a7:f4:b3:2b:74:30:
                    3b:5e:c7:0b:1b:47:58:70:f1:3f:c9:c0:85:a6:d2:
                    08:dd:67:b5:15:b2:da:de:0f:9e:d3:3f:21:9b:a8:
                    ac:4a:ca:00:cb:fb:24:66:fe:a3:55:79:96:84:8c:
                    ee:66:af:a0:3e:cf:66:2b:13:2f:29:19:54:5c:7e:
                    b5:d5:29:ee:0d:7f:30:24:1b:b0:82:50:eb:7d:8d:
                    70:e3:a0:32:37:93:45:d1:5b:b1:d1:87:86:24:50:
                    26:7f:ae:55:24:c2:43:c8:21:7e:79:19:6e:0e:3e:
                    1a:f7:78:17:3b:4c:37:18:64:cd:43:43:79:e3:ff:
                    27:cd:06:32:db:6d:2d:3a:8d:68:ad:e1:d0:75:7d:
                    5c:16:a9:3a:35:47:89:2c:9b:43:40:0d:5d:90:1f:
                    3e:f4:8b:97:05:94:e3:b0:ab:81:80:df:01:9e:27:
                    65:68:2b:fd:26:eb:9f:89:d5:75:24:be:98:eb:df:
                    a1:64:f9:81:c2:17:9e:25:5d:ad:5a:02:53:61:ea:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C9:82:EC:59:FD:28:73:B5:F6:17:A4:69:FD:EE:79:0E:4D:A3:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:4b:42:29:df:df:3d:95:53:3a:97:2b:8b:d0:57:9e:58:74:
         78:30:b9:5a:e5:ee:7b:44:6c:b6:5d:b7:d3:6b:b8:25:50:44:
         64:5c:d9:fb:78:88:be:6c:a8:fd:02:0e:51:67:ae:8b:88:c9:
         a8:36:c5:a3:f6:c1:72:3c:3c:03:51:bd:a1:67:17:89:b9:e6:
         87:09:42:f0:2d:42:d4:b5:25:12:d0:39:48:9f:cb:70:c9:ea:
         a2:9c:a9:49:f1:eb:e4:e8:37:fc:48:31:fb:67:cc:20:71:36:
         87:dc:cb:69:87:91:db:c0:b8:e5:69:89:c3:bd:49:ee:98:44:
         6b:da:51:89:d2:40:49:9d:39:fd:3f:9f:76:b8:50:20:4b:64:
         b2:56:a3:db:9b:de:ba:a4:6b:35:03:1c:94:68:0b:96:d2:af:
         72:d6:a5:eb:2c:0a:ad:e3:70:5a:a5:70:10:e6:dc:cc:56:30:
         25:ac:14:70:b4:15:ca:30:9d:95:a2:fe:b9:7e:f8:05:dc:b4:
         64:ac:35:1c:6e:22:67:8b:e2:9f:76:a1:a0:d4:65:1f:5d:a6:
         91:15:a5:48:6c:c0:f9:02:51:50:af:45:c3:78:45:35:ea:25:
         57:ab:f4:78:10:49:15:eb:ee:76:d0:41:1c:d8:bd:11:75:a1:
         7d:80:fa:3f
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUlzeqLwcEqVkQJaAMDg0a0GPR+8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAyMDEzWhcNMjUwOTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkN2EwYzkwMTdlMjcwYWQxMzNmMmY0MzI5NmU2OTA1MDE3
MzBmZmI2ZmY3MmU5YzA0YzU1NzA2ZjcxNTQ5Y2JjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWZzbPrKPxcvUOCro1vp3p7me93JlYnSckfJ8iO5+/N0Hc
L34DG3/X+HIB+O50cb/Q6Apfuqf0syt0MDtexwsbR1hw8T/JwIWm0gjdZ7UVstre
D57TPyGbqKxKygDL+yRm/qNVeZaEjO5mr6A+z2YrEy8pGVRcfrXVKe4NfzAkG7CC
UOt9jXDjoDI3k0XRW7HRh4YkUCZ/rlUkwkPIIX55GW4OPhr3eBc7TDcYZM1DQ3nj
/yfNBjLbbS06jWit4dB1fVwWqTo1R4ksm0NADV2QHz70i5cFlOOwq4GA3wGeJ2Vo
K/0m65+J1XUkvpjr36Fk+YHCF54lXa1aAlNh6jONAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUQ8mC7Fn9KHO19hekaf3ueQ5NowUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjMTYzNTk2LTM1MDQtNGQxYy1hYzY2LWMwMzllZTY2Y2I1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8ugDANBgkqhkiG9w0BAQsFAAOCAQEAsUtCKd/fPZVTOpcri9BXnlh0
eDC5WuXue0Rstl2302u4JVBEZFzZ+3iIvmyo/QIOUWeui4jJqDbFo/bBcjw8A1G9
oWcXibnmhwlC8C1C1LUlEtA5SJ/LcMnqopypSfHr5Og3/Egx+2fMIHE2h9zLaYeR
28C45WmJw71J7phEa9pRidJASZ05/T+fdrhQIEtkslaj25veuqRrNQMclGgLltKv
ctal6ywKreNwWqVwEObczFYwJawUcLQVyjCdlaL+uX74Bdy0ZKw1HG4iZ4vin3ah
oNRlH12mkRWlSGzA+QJRUK9Fw3hFNeolV6v0eBBJFevudtBBHNi9EXWhfYD6Pw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:51:43 2025 by rpki-client