Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
File:                     1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa (raw, json)
Hash identifier:          Bb6Wa3cuKxm+NKMUTnqURpF9jqDB9djhPkvhoFqN/54=
Subject key identifier:   86:97:2A:C2:6F:8C:E0:E1:12:75:9B:B3:BB:C4:D5:47:30:91:09:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D5A9EB34E4A05013687CB206E494FF97FED9718
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa
Signing time:             Tue 08 Jul 2025 15:02:12 +0000
ROA not before:           Tue 08 Jul 2025 15:02:12 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:7440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5a:9e:b3:4e:4a:05:01:36:87:cb:20:6e:49:4f:f9:7f:ed:97:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 15:02:12 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=d203c16d88cde8bb74412bc41d31a47ecd32bb0100bcde26abdf0940d75ac2f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:cf:21:54:84:88:1b:d3:dd:56:02:1f:dc:
                    3e:0c:9c:39:7f:da:15:fc:44:e8:41:08:62:fe:10:
                    61:e2:17:20:fb:e6:75:76:b7:93:80:29:3a:4e:3e:
                    d3:53:64:91:a9:aa:12:ab:08:c9:5a:b9:dd:70:b1:
                    71:a0:dc:0d:5a:f7:71:66:ce:42:bb:2b:01:52:84:
                    0a:6f:64:90:57:79:9d:b0:c9:9b:25:32:16:60:be:
                    97:a2:f9:a2:28:44:92:1e:38:95:da:84:66:0f:de:
                    6a:0f:d1:58:af:9d:aa:10:6e:ec:d8:c0:d6:17:cc:
                    79:dd:f5:be:9a:8c:19:6a:69:47:24:44:8f:ee:ce:
                    9e:c7:c4:69:b1:53:5a:e0:c0:c2:28:25:62:23:7e:
                    d3:f7:93:72:12:45:73:76:a7:50:00:68:0b:79:6f:
                    55:47:61:37:3c:34:32:7f:63:90:1d:3d:10:b3:51:
                    99:e4:62:5d:4e:5f:40:88:92:c2:a0:21:7c:22:cb:
                    0f:62:43:7e:37:6f:0e:c2:75:d6:c2:fd:56:16:4c:
                    d6:63:bd:96:b4:c7:72:66:00:d1:ee:39:30:cd:9b:
                    51:0e:91:10:b9:b2:32:10:51:34:a9:8e:43:88:0d:
                    12:0b:1b:46:51:37:8a:ab:54:61:4b:4b:4e:3d:a7:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:2A:C2:6F:8C:E0:E1:12:75:9B:B3:BB:C4:D5:47:30:91:09:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f15d26f-8f71-43a3-80b0-ce2c01880d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:fa:d1:1c:6d:02:3b:f2:10:33:f3:71:6e:69:3c:a9:ba:
         18:d1:4d:89:8a:85:5f:a8:a3:58:b3:ff:70:77:25:6a:10:90:
         a7:7c:3a:e7:c2:98:77:e8:50:b4:ed:c2:f7:65:d5:0e:34:1e:
         8c:e2:b0:2f:aa:ee:7f:85:88:eb:b2:22:8d:1c:c0:b2:18:55:
         56:0b:75:c6:59:7c:f1:69:37:06:7b:2d:66:88:28:80:f3:8a:
         1d:68:76:29:12:63:24:9d:4e:4a:fa:14:1d:1a:79:c8:1f:2a:
         fa:25:71:bd:05:2d:67:9d:92:55:14:d9:8b:c6:e3:ef:24:2c:
         c9:25:11:ec:3d:10:41:59:75:f1:de:26:b3:1a:d2:0a:ff:f6:
         2d:a1:be:ad:72:4e:2c:07:a7:3c:45:5f:eb:b3:0f:1c:3c:7a:
         97:26:c9:b7:ae:3b:31:30:6b:22:3e:36:0c:c6:8c:71:8a:9f:
         3b:1a:af:d3:c2:bd:e9:ca:f4:7a:28:eb:d1:c2:3d:20:ff:86:
         cc:6f:2e:8c:e3:2f:e3:c5:72:e6:a6:3f:40:79:eb:c8:55:ce:
         69:3d:1c:91:0f:ee:8c:e6:76:72:5d:ed:91:ba:27:ad:8e:99:
         32:9b:40:1a:7a:a6:ba:35:d4:cc:8e:70:ad:c7:c0:ad:92:24:
         76:a5:fb:dd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbVqes05KBQE2h8sgbklP+X/tlxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUwMjEyWhcNMjUwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjAzYzE2ZDg4Y2RlOGJiNzQ0MTJiYzQxZDMxYTQ3ZWNk
MzJiYjAxMDBiY2RlMjZhYmRmMDk0MGQ3NWFjMmYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5sc8hVISIG9PdVgIf3D4MnDl/2hX8ROhBCGL+EGHiFyD7
5nV2t5OAKTpOPtNTZJGpqhKrCMlaud1wsXGg3A1a93FmzkK7KwFShApvZJBXeZ2w
yZslMhZgvpei+aIoRJIeOJXahGYP3moP0VivnaoQbuzYwNYXzHnd9b6ajBlqaUck
RI/uzp7HxGmxU1rgwMIoJWIjftP3k3ISRXN2p1AAaAt5b1VHYTc8NDJ/Y5AdPRCz
UZnkYl1OX0CIksKgIXwiyw9iQ343bw7CddbC/VYWTNZjvZa0x3JmANHuOTDNm1EO
kRC5sjIQUTSpjkOIDRILG0ZRN4qrVGFLS049p30XAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhpcqwm+M4OESdZuzu8TVRzCRCQYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmMTVkMjZmLThmNzEtNDNhMy04MGIwLWNlMmMwMTg4MGQ3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AdEAwDQYJKoZIhvcNAQELBQADggEBAI83+tEcbQI78hAz83FuaTyp
uhjRTYmKhV+oo1iz/3B3JWoQkKd8OufCmHfoULTtwvdl1Q40HozisC+q7n+FiOuy
Io0cwLIYVVYLdcZZfPFpNwZ7LWaIKIDzih1odikSYySdTkr6FB0aecgfKvolcb0F
LWedklUU2YvG4+8kLMklEew9EEFZdfHeJrMa0gr/9i2hvq1yTiwHpzxFX+uzDxw8
epcmybeuOzEwayI+NgzGjHGKnzsar9PCvenK9Hoo69HCPSD/hsxvLozjL+PFcuam
P0B568hVzmk9HJEP7ozmdnJd7ZG6J62OmTKbQBp6pro11MyOcK3HwK2SJHal+90=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:18 2025 by rpki-client