Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa
File:                     ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa (raw, json)
Hash identifier:          89o0rh/q/TzhneNyiq7XMUSvzXN+YSv8LxB/AG5y1SU=
Subject key identifier:   56:F6:F2:8C:5E:A3:64:46:8F:0B:F3:AC:1F:C7:56:0B:52:37:79:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55396392CFCF7757F30573DB34CEEFF9D0F25F60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa
Signing time:             Tue 22 Apr 2025 17:31:28 +0000
ROA not before:           Tue 22 Apr 2025 17:31:28 +0000
ROA not after:            Tue 27 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f18::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:39:63:92:cf:cf:77:57:f3:05:73:db:34:ce:ef:f9:d0:f2:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 22 17:31:28 2025 GMT
            Not After : May 27 23:59:59 2025 GMT
        Subject: serialNumber=73ae1bac28807bbb86f2f3f6f4698184061b8195fe70779961dad482631bf9fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:96:e9:80:cf:e9:54:d2:ae:71:53:0e:80:
                    09:8d:27:bf:f5:f7:bb:82:f3:fc:8c:4f:fc:f5:f7:
                    d2:4d:22:ac:1d:d2:12:0f:4c:0b:d7:4d:13:7f:78:
                    9a:48:f0:7f:de:db:7d:5b:0b:3e:4f:06:24:9a:b3:
                    b8:c1:9a:bd:90:a7:f8:e6:71:aa:e1:1c:72:b9:1c:
                    fb:02:04:a1:67:61:c5:be:0b:00:06:c9:2d:81:68:
                    7d:b6:de:71:bd:6e:12:72:ac:25:f4:4e:1b:40:81:
                    d0:bf:87:6f:de:e9:e5:83:96:84:24:68:05:63:6b:
                    05:57:16:4c:5b:6d:ea:a0:54:3d:7a:bb:cb:a4:7b:
                    e6:ed:63:23:66:c4:40:88:81:e6:ff:b3:4d:48:38:
                    7a:a1:05:4a:bc:52:f2:fa:03:28:c6:9b:2c:9d:fe:
                    fe:6f:bf:20:5b:77:ea:54:3e:72:ad:44:e7:d8:7f:
                    7a:be:5b:45:3a:c1:8c:37:90:a2:06:b4:8f:7d:28:
                    41:11:04:12:19:35:5e:6c:5a:ce:96:2a:f4:2e:67:
                    5a:41:b6:12:3c:88:94:aa:4e:9d:8b:14:30:19:a8:
                    9a:db:e1:27:c8:50:1f:50:f4:fe:72:3c:58:da:ba:
                    d5:c6:49:76:d5:42:6c:4c:76:da:c4:97:bf:72:8c:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:F2:8C:5E:A3:64:46:8F:0B:F3:AC:1F:C7:56:0B:52:37:79:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f18::/35

    Signature Algorithm: sha256WithRSAEncryption
         d6:49:ee:45:aa:2e:e2:58:58:72:fb:51:29:94:68:68:9b:e6:
         02:14:8b:cc:02:62:28:de:2e:3f:6b:a6:a7:de:99:5d:d7:c1:
         d9:ef:48:be:f1:73:67:52:bc:2b:3e:8f:31:8b:47:90:1e:5c:
         73:26:13:7a:5d:61:d1:b1:c1:0a:2b:00:28:2f:11:87:a6:c7:
         44:31:37:1f:6d:c8:51:4f:b4:2f:71:1d:4b:d1:23:89:16:d8:
         2c:f7:00:3e:cf:40:1c:48:9b:a6:41:7e:76:f9:e4:69:64:09:
         36:ff:fe:30:82:a4:2e:e4:dd:3c:21:93:57:95:17:03:ab:86:
         d6:4d:26:c3:9b:d2:df:5a:67:99:d4:00:29:8c:6c:15:ce:a3:
         ac:29:ff:21:cf:a6:a5:cb:4c:3f:33:b7:34:54:6a:27:c7:a8:
         e2:4c:3a:41:66:6e:0a:c6:87:44:30:d0:50:8e:5a:36:72:88:
         37:98:37:fc:9c:db:c8:e6:a5:a2:5c:3b:01:e6:d4:89:31:e8:
         5f:27:94:36:3f:26:12:57:8d:42:5a:ee:82:f0:57:e1:ff:01:
         67:03:4a:36:63:9a:ee:a2:bc:19:d7:f6:70:54:e5:a6:f2:c9:
         ae:4f:93:85:06:4d:8d:9d:72:3f:cf:4b:a8:71:93:6f:70:3a:
         c7:84:c3:30
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVTljks/Pd1fzBXPbNM7v+dDyX2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTczMTI4WhcNMjUwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3M2FlMWJhYzI4ODA3YmJiODZmMmYzZjZmNDY5ODE4NDA2
MWI4MTk1ZmU3MDc3OTk2MWRhZDQ4MjYzMWJmOWZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2bpbpgM/pVNKucVMOgAmNJ7/197uC8/yMT/z199JNIqwd
0hIPTAvXTRN/eJpI8H/e231bCz5PBiSas7jBmr2Qp/jmcarhHHK5HPsCBKFnYcW+
CwAGyS2BaH223nG9bhJyrCX0ThtAgdC/h2/e6eWDloQkaAVjawVXFkxbbeqgVD16
u8uke+btYyNmxECIgeb/s01IOHqhBUq8UvL6AyjGmyyd/v5vvyBbd+pUPnKtROfY
f3q+W0U6wYw3kKIGtI99KEERBBIZNV5sWs6WKvQuZ1pBthI8iJSqTp2LFDAZqJrb
4SfIUB9Q9P5yPFjautXGSXbVQmxMdtrEl79yjAYfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUVvbyjF6jZEaPC/OsH8dWC1I3eQYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiNDZmNjFjLWM4YjAtNGNlYS04MTFhLTQwZTViMjNiMDRkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUmAB8YADANBgkqhkiG9w0BAQsFAAOCAQEA1knuRaou4lhYcvtRKZRoaJvm
AhSLzAJiKN4uP2ump96ZXdfB2e9IvvFzZ1K8Kz6PMYtHkB5ccyYTel1h0bHBCisA
KC8Rh6bHRDE3H23IUU+0L3EdS9EjiRbYLPcAPs9AHEibpkF+dvnkaWQJNv/+MIKk
LuTdPCGTV5UXA6uG1k0mw5vS31pnmdQAKYxsFc6jrCn/Ic+mpctMPzO3NFRqJ8eo
4kw6QWZuCsaHRDDQUI5aNnKIN5g3/JzbyOalolw7AebUiTHoXyeUNj8mEleNQlru
gvBX4f8BZwNKNmOa7qK8Gdf2cFTlpvLJrk+ThQZNjZ1yP89LqHGTb3A6x4TDMA==
-----END CERTIFICATE-----
Generated at Mon May 5 22:11:56 2025 by rpki-client