Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
File:                     82624c93-a718-4b6c-b8d0-1502172fc711.roa (raw, json)
Hash identifier:          wAkO7LahTGNU9mGZP4FKJWMgCXuKJJqxQYQL66so8g4=
Subject key identifier:   EF:95:96:CB:22:3C:CF:68:48:8E:B1:F8:63:68:9B:AB:7B:15:10:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       523AFA057280FEABFD61FC540B0905F1CF3808C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
Signing time:             Wed 11 Jun 2025 00:11:38 +0000
ROA not before:           Wed 11 Jun 2025 00:11:38 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3a:fa:05:72:80:fe:ab:fd:61:fc:54:0b:09:05:f1:cf:38:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:11:38 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=3ccc6ca4abfe9a586238ac202f9cc80e070e59f9ef08b86b926d576d986158d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:64:a9:3b:88:ba:a5:f4:9b:0e:e6:fb:a0:
                    6c:a0:f2:b5:9b:83:b7:c3:7e:49:d3:c1:89:56:f5:
                    cc:d1:bb:27:f2:fb:4d:57:9e:ae:8f:c0:af:67:97:
                    da:8b:d5:c9:2f:ba:e7:8c:48:27:6f:a0:55:1b:80:
                    e3:54:53:83:8d:e7:cd:83:11:ef:1f:35:d6:99:6f:
                    0f:5e:f5:4c:9b:95:0c:ea:17:f3:00:b5:ed:26:b3:
                    38:df:19:1b:bc:ac:02:fd:81:ce:f8:4d:0d:ae:a9:
                    4e:b3:7d:a0:02:1e:32:a3:b5:79:36:2e:66:e5:75:
                    c6:cd:49:45:61:94:45:41:e0:0c:49:42:6c:4f:42:
                    df:14:f7:27:2f:a2:d9:b9:56:58:e8:dc:c6:66:23:
                    42:ca:1d:73:79:54:9e:d3:b4:3c:7c:40:d6:4d:18:
                    08:fb:f5:82:67:a6:ac:2c:db:83:c2:1a:b0:9e:9e:
                    e0:b0:a2:b2:ad:28:20:76:ab:5b:3d:41:bb:82:18:
                    fd:ba:24:7d:e9:9f:66:78:7c:76:81:c1:58:50:b8:
                    08:c4:7f:4c:f6:25:73:af:96:5a:b9:26:09:50:c2:
                    63:4c:e4:d3:1a:c0:a5:9e:93:e0:65:6d:44:b9:dc:
                    b5:7a:ab:81:01:48:80:95:bf:eb:88:ca:6d:97:af:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:95:96:CB:22:3C:CF:68:48:8E:B1:F8:63:68:9B:AB:7B:15:10:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:ff:c3:5a:31:11:af:08:37:9b:bc:57:51:fc:67:a6:13:
         82:e3:fd:e9:bc:5d:fc:d2:84:da:75:99:ee:76:6c:ca:55:88:
         55:4d:81:86:05:c1:7a:69:7a:76:fe:d4:30:ba:3e:a0:9c:4a:
         49:01:bb:11:dc:be:68:5e:12:d5:ab:c0:29:29:74:ad:ad:c7:
         c9:66:fc:4f:a6:23:00:01:06:e0:20:fe:0f:3c:cc:f9:74:f2:
         e9:07:9e:68:6a:1f:d1:84:45:11:a8:cc:b0:6e:24:48:b2:5e:
         0f:96:04:ff:57:af:07:b9:d5:46:9b:32:ef:c6:d6:c0:8d:8c:
         7f:ce:c3:04:e2:48:13:c4:b2:33:42:43:04:ec:36:2a:5c:2f:
         60:18:95:70:cb:9c:77:43:16:49:9d:4e:d8:69:69:2e:21:a5:
         99:b3:70:07:96:ff:50:44:1b:1b:fa:f7:c9:bd:26:a5:13:ae:
         1f:37:b0:95:66:5d:52:dc:98:d3:d0:ab:14:d0:68:e6:81:cb:
         73:27:5a:18:8b:5f:1e:0f:38:92:db:7c:83:aa:e7:f6:d2:36:
         7b:38:dc:69:c6:36:79:3d:76:eb:7d:82:f0:98:4f:4e:b4:1a:
         ef:c7:0e:62:e3:10:cd:f4:b4:c2:b3:69:79:30:16:ea:bb:f7:
         56:37:6f:55
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUjr6BXKA/qv9YfxUCwkF8c84CMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAxMTM4WhcNMjUwNzE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AzY2NjNmNhNGFiZmU5YTU4NjIzOGFjMjAyZjljYzgwZTA3
MGU1OWY5ZWYwOGI4NmI5MjZkNTc2ZDk4NjE1OGQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT42SpO4i6pfSbDub7oGyg8rWbg7fDfknTwYlW9czRuyfy
+01Xnq6PwK9nl9qL1ckvuueMSCdvoFUbgONUU4ON582DEe8fNdaZbw9e9UyblQzq
F/MAte0mszjfGRu8rAL9gc74TQ2uqU6zfaACHjKjtXk2LmbldcbNSUVhlEVB4AxJ
QmxPQt8U9ycvotm5Vljo3MZmI0LKHXN5VJ7TtDx8QNZNGAj79YJnpqws24PCGrCe
nuCworKtKCB2q1s9QbuCGP26JH3pn2Z4fHaBwVhQuAjEf0z2JXOvllq5JglQwmNM
5NMawKWek+BlbUS53LV6q4EBSICVv+uIym2Xr1CfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU75WWyyI8z2hIjrH4Y2ibq3sVEP0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyNjI0YzkzLWE3MTgtNGI2Yy1iOGQwLTE1MDIxNzJmYzcxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB9hgGAwDQYJKoZIhvcNAQELBQADggEBAIN6/8NaMRGvCDebvFdR/Gem
E4Lj/em8XfzShNp1me52bMpViFVNgYYFwXppenb+1DC6PqCcSkkBuxHcvmheEtWr
wCkpdK2tx8lm/E+mIwABBuAg/g88zPl08ukHnmhqH9GERRGozLBuJEiyXg+WBP9X
rwe51UabMu/G1sCNjH/OwwTiSBPEsjNCQwTsNipcL2AYlXDLnHdDFkmdTthpaS4h
pZmzcAeW/1BEGxv698m9JqUTrh83sJVmXVLcmNPQqxTQaOaBy3MnWhiLXx4POJLb
fIOq5/bSNns43GnGNnk9dut9gvCYT060Gu/HDmLjEM30tMKzaXkwFuq791Y3b1U=
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:51:51 2025 by rpki-client