Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b128b97-197d-4126-9887-73a31ea7479b.roa
File:                     4b128b97-197d-4126-9887-73a31ea7479b.roa (raw, json)
Hash identifier:          IKEv47D+6zgQ0X55EWWedDLvuTGgA1S/f8ioN6lb3w4=
Subject key identifier:   7E:AF:16:D5:2F:2E:C0:B2:F5:BF:09:09:6C:4C:EA:65:1D:57:99:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01F0BC75E335737E052A1AAC31DBA467D3C231D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b128b97-197d-4126-9887-73a31ea7479b.roa
Signing time:             Fri 25 Jul 2025 00:11:51 +0000
ROA not before:           Fri 25 Jul 2025 00:11:51 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f60:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:bc:75:e3:35:73:7e:05:2a:1a:ac:31:db:a4:67:d3:c2:31:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:11:51 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=d8d55e73b3de55250f32074a9f75b6c84e628aaa480e36730a5f489a7a447a78, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:59:26:fc:10:f8:56:ce:07:ec:38:83:bf:
                    53:63:1d:24:7e:ec:12:8c:9e:eb:df:82:32:1d:05:
                    de:d4:0b:9e:76:ac:30:8a:c8:fa:c1:51:0e:27:a0:
                    fd:9f:63:b3:f0:28:6b:e6:74:b8:f4:78:fa:e8:17:
                    2b:e3:b3:45:c9:80:b0:67:a3:29:b6:bd:c4:c6:a8:
                    9f:13:fd:54:58:ad:22:28:be:22:ce:a7:6b:ba:97:
                    6c:0e:da:1e:fa:1f:86:e9:09:4d:e7:42:aa:dd:bb:
                    d1:3a:e4:88:6b:6a:be:d8:c4:f3:e1:71:18:f3:56:
                    dc:4f:fa:97:85:bb:54:ec:fb:32:8f:44:94:ab:89:
                    11:3e:9f:2e:9f:7e:e3:75:51:f2:45:9b:27:4a:d6:
                    aa:e5:fa:ed:d2:b7:1d:76:cd:a0:42:fd:09:6d:e7:
                    e4:89:12:24:13:e8:b9:0e:9d:a0:70:15:b6:11:a1:
                    91:76:12:f5:20:2f:fe:a2:84:c7:93:75:cf:9b:56:
                    fe:16:ec:bf:fe:1b:5f:48:16:96:30:ff:19:9c:3a:
                    82:8a:61:0a:87:d7:80:7a:ad:6f:63:45:b6:2c:7d:
                    ee:5e:c8:b4:97:b7:db:83:2e:9d:b8:36:10:b4:ce:
                    14:ef:3d:01:46:f0:05:b4:2a:11:9e:66:0a:d9:c8:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AF:16:D5:2F:2E:C0:B2:F5:BF:09:09:6C:4C:EA:65:1D:57:99:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b128b97-197d-4126-9887-73a31ea7479b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:3d:8a:88:04:98:50:2b:a3:f9:16:f2:02:55:85:da:87:e3:
         49:5f:94:43:16:1f:0f:63:82:73:52:83:0f:6a:71:8e:be:cc:
         b4:51:c7:89:a6:90:63:da:3d:40:38:ea:95:55:8f:22:3e:0c:
         54:a0:c8:97:4f:42:29:6f:3c:16:97:b7:2c:75:9e:f7:1e:c9:
         8a:f9:c0:dd:e0:67:45:05:74:d9:04:74:87:ec:6f:35:3b:46:
         ed:48:90:31:65:82:c4:fd:f3:2a:cb:48:42:ae:7b:7b:1c:b0:
         cf:45:b6:10:4d:6e:83:8a:53:a8:80:50:50:b3:52:d7:d1:68:
         2a:00:41:16:bd:50:b4:50:47:76:f4:d3:8d:60:9d:42:22:6e:
         f8:2d:99:1f:28:c0:38:94:06:c6:f6:99:1e:c8:54:6b:82:c3:
         ea:35:ff:5e:49:ad:d7:4e:2d:5b:b2:17:1d:57:e6:cf:f1:b4:
         47:e9:b9:19:4f:65:d4:a6:c9:32:14:52:c1:24:2e:2c:5b:bc:
         b4:ab:7e:ba:7a:1f:e8:1c:d7:56:fc:56:ff:c7:7c:30:25:8f:
         fc:a5:27:1e:5f:5f:e6:c9:ef:65:03:b0:98:bd:6f:5e:12:b5:
         40:86:ff:9d:aa:55:bd:d1:f8:45:00:ee:d0:77:38:5f:77:74:
         7f:1a:f5:a9
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUAfC8deM1c34FKhqsMdukZ9PCMdQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAxMTUxWhcNMjUwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOGQ1NWU3M2IzZGU1NTI1MGYzMjA3NGE5Zjc1YjZjODRl
NjI4YWFhNDgwZTM2NzMwYTVmNDg5YTdhNDQ3YTc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbvVkm/BD4Vs4H7DiDv1NjHSR+7BKMnuvfgjIdBd7UC552
rDCKyPrBUQ4noP2fY7PwKGvmdLj0eProFyvjs0XJgLBnoym2vcTGqJ8T/VRYrSIo
viLOp2u6l2wO2h76H4bpCU3nQqrdu9E65Ihrar7YxPPhcRjzVtxP+peFu1Ts+zKP
RJSriRE+ny6ffuN1UfJFmydK1qrl+u3Stx12zaBC/Qlt5+SJEiQT6LkOnaBwFbYR
oZF2EvUgL/6ihMeTdc+bVv4W7L/+G19IFpYw/xmcOoKKYQqH14B6rW9jRbYsfe5e
yLSXt9uDLp24NhC0zhTvPQFG8AW0KhGeZgrZyBsrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUfq8W1S8uwLL1vwkJbEzqZR1XmccwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRiMTI4Yjk3LTE5N2QtNDEyNi05ODg3LTczYTMxZWE3NDc5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9g4DANBgkqhkiG9w0BAQsFAAOCAQEAzD2KiASYUCuj+RbyAlWF2ofj
SV+UQxYfD2OCc1KDD2pxjr7MtFHHiaaQY9o9QDjqlVWPIj4MVKDIl09CKW88Fpe3
LHWe9x7JivnA3eBnRQV02QR0h+xvNTtG7UiQMWWCxP3zKstIQq57exywz0W2EE1u
g4pTqIBQULNS19FoKgBBFr1QtFBHdvTTjWCdQiJu+C2ZHyjAOJQGxvaZHshUa4LD
6jX/Xkmt104tW7IXHVfmz/G0R+m5GU9l1KbJMhRSwSQuLFu8tKt+unof6BzXVvxW
/8d8MCWP/KUnHl9f5snvZQOwmL1vXhK1QIb/napVvdH4RQDu0Hc4X3d0fxr1qQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:59:00 2025 by rpki-client