Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa
File:                     ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa (raw, json)
Hash identifier:          AIYYHRuLzvKStJ/2FUJMf8stRrJPshhsnLD6ftIeUVY=
Subject key identifier:   BF:B8:D6:6B:E4:5E:7C:29:61:32:A4:8D:8A:BE:C5:9E:79:0B:43:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52F33F53E17AB1DF623B167BA30A90043B151528
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa
Signing time:             Thu 26 Jun 2025 19:07:27 +0000
ROA not before:           Thu 26 Jun 2025 19:07:27 +0000
ROA not after:            Thu 31 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:2080::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f3:3f:53:e1:7a:b1:df:62:3b:16:7b:a3:0a:90:04:3b:15:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 26 19:07:27 2025 GMT
            Not After : Jul 31 23:59:59 2025 GMT
        Subject: serialNumber=bbadc2296a7409d5c9091da12d706b9c7f96a3869483c1c60c481fa02449f698, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:24:72:3c:e1:f9:32:c3:ff:d2:cf:9f:df:
                    67:b9:d0:70:4d:72:f1:9f:fd:eb:b0:84:90:f2:5b:
                    ef:84:66:83:d3:70:4f:88:6c:44:1e:06:98:6e:48:
                    77:fa:a9:4d:38:19:de:3f:b2:14:fa:11:93:13:5f:
                    3c:b9:97:b1:82:a3:09:29:0a:ab:3a:92:1d:6a:3a:
                    fb:14:7d:37:09:33:1c:f1:0e:bb:0c:be:0b:21:34:
                    c7:d0:49:0a:a0:9d:42:36:56:81:a0:dd:58:df:4e:
                    5e:32:27:6a:20:68:ad:46:e0:d9:57:9a:27:10:e0:
                    7e:86:86:ab:db:4b:15:7e:83:69:b8:e5:5f:8a:30:
                    da:d7:df:85:35:7d:89:12:02:3f:44:02:11:fb:f8:
                    87:d7:c1:d3:ab:76:24:1f:fa:6f:65:6f:03:6f:e7:
                    6d:2e:72:ce:1c:89:f0:85:7c:7a:0b:66:09:5e:be:
                    f9:77:89:d8:f8:c9:9d:ab:41:b4:fd:d0:ae:b0:5e:
                    e8:1b:96:77:9e:ba:b5:06:c0:cb:d8:42:06:d3:e0:
                    df:c0:5d:47:be:2b:08:7a:d8:5d:1a:ca:56:77:71:
                    68:9c:4b:b4:cd:18:38:63:f6:19:b1:f2:86:2a:26:
                    0a:10:b9:a7:4e:8b:d5:81:00:e2:02:6b:00:eb:d4:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:D6:6B:E4:5E:7C:29:61:32:A4:8D:8A:BE:C5:9E:79:0B:43:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed4e7a7c-82b0-452d-b394-75e2f2f1ca9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:2080::/46

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:98:2a:a6:b8:f4:79:55:99:0f:a2:83:0c:21:97:43:a2:
         ee:84:bd:39:76:f4:40:64:a1:98:fe:3f:e0:4e:ff:ab:f5:e3:
         c2:44:38:c2:6f:dc:b4:25:9f:52:ac:e5:9a:47:d3:80:2a:57:
         a0:93:f9:a8:ff:a7:05:ad:31:17:36:10:8e:b3:25:7c:bd:c6:
         28:7f:87:43:4a:3e:e1:f4:05:5e:3a:a4:71:98:b9:4d:3c:fb:
         61:c2:ed:22:10:11:b9:04:d2:b4:b9:11:17:ca:a0:7c:5c:08:
         de:c7:ee:15:c5:f0:d7:16:33:91:19:cd:a3:6b:d7:a6:21:c9:
         a1:19:aa:3e:c6:d7:16:fb:d2:21:37:00:c9:a0:ae:93:c8:a1:
         59:04:8d:96:42:20:51:30:9b:11:f7:25:21:2e:57:7d:75:46:
         b6:af:32:e9:4b:6c:7d:be:c5:68:2f:c5:21:b6:37:81:51:65:
         b7:c0:1d:80:af:09:17:7f:3b:2d:9a:90:9a:02:16:10:4b:73:
         d8:f4:c6:fd:cd:13:f6:33:3a:81:cf:d5:be:c2:3b:c3:89:71:
         a6:b2:9e:42:0a:b8:bc:16:a9:b1:90:1d:9c:be:6b:9e:e6:96:
         69:f9:7a:49:7a:42:49:77:df:ed:f0:04:c4:e2:b2:47:d8:47:
         85:56:98:ed
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUvM/U+F6sd9iOxZ7owqQBDsVFSgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI2MTkwNzI3WhcNMjUwNzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYmFkYzIyOTZhNzQwOWQ1YzkwOTFkYTEyZDcwNmI5Yzdm
OTZhMzg2OTQ4M2MxYzYwYzQ4MWZhMDI0NDlmNjk4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCF/CRyPOH5MsP/0s+f32e50HBNcvGf/euwhJDyW++EZoPT
cE+IbEQeBphuSHf6qU04Gd4/shT6EZMTXzy5l7GCowkpCqs6kh1qOvsUfTcJMxzx
DrsMvgshNMfQSQqgnUI2VoGg3VjfTl4yJ2ogaK1G4NlXmicQ4H6GhqvbSxV+g2m4
5V+KMNrX34U1fYkSAj9EAhH7+IfXwdOrdiQf+m9lbwNv520ucs4cifCFfHoLZgle
vvl3idj4yZ2rQbT90K6wXugblneeurUGwMvYQgbT4N/AXUe+Kwh62F0aylZ3cWic
S7TNGDhj9hmx8oYqJgoQuadOi9WBAOICawDr1Mu1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUv7jWa+RefClhMqSNir7FnnkLQ3UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkNGU3YTdjLTgyYjAtNDUyZC1iMzk0LTc1ZTJmMmYxY2E5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zIIAwDQYJKoZIhvcNAQELBQADggEBAJ+WmCqmuPR5VZkPooMMIZdD
ou6EvTl29EBkoZj+P+BO/6v148JEOMJv3LQln1Ks5ZpH04AqV6CT+aj/pwWtMRc2
EI6zJXy9xih/h0NKPuH0BV46pHGYuU08+2HC7SIQEbkE0rS5ERfKoHxcCN7H7hXF
8NcWM5EZzaNr16YhyaEZqj7G1xb70iE3AMmgrpPIoVkEjZZCIFEwmxH3JSEuV311
RravMulLbH2+xWgvxSG2N4FRZbfAHYCvCRd/Oy2akJoCFhBLc9j0xv3NE/YzOoHP
1b7CO8OJcaaynkIKuLwWqbGQHZy+a57mlmn5ekl6Qkl33+3wBMTiskfYR4VWmO0=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:57:44 2025 by rpki-client