Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa
File:                     7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa (raw, json)
Hash identifier:          96fe85zKczFqgDMFHhkBbdbuC6w2OaCdf1j1ZhJ4gG4=
Subject key identifier:   6E:8E:BB:F9:86:A1:15:18:CD:99:38:E7:2C:5C:8B:FF:BE:A2:1F:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78791FBC5E68A39B7B97F9941229E2112529717E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa
Signing time:             Tue 08 Jul 2025 15:50:21 +0000
ROA not before:           Tue 08 Jul 2025 15:50:21 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:e0c0::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:1f:bc:5e:68:a3:9b:7b:97:f9:94:12:29:e2:11:25:29:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 15:50:21 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=1142361ad0f8767d5f53782a4473e3365a84274f53e49ab54e732dfd4b9f970b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:84:d4:35:8c:ff:8b:d7:79:14:2b:8d:6e:
                    53:dd:d9:f3:cb:1b:89:47:52:88:89:8e:bb:7c:6a:
                    dc:7e:7a:58:2f:ec:d7:33:d2:3b:f2:91:e6:b0:99:
                    be:9c:9f:ef:63:1e:7b:ba:86:0b:2e:2d:6b:c9:8b:
                    5c:c4:76:a1:79:09:68:ab:f7:2f:df:57:5b:ea:32:
                    17:67:19:ee:7d:07:6a:06:e1:8f:14:38:02:09:05:
                    28:19:59:ab:86:20:df:3c:30:13:2f:e5:70:e2:e5:
                    ef:5e:1b:5b:e2:f8:dc:8d:38:46:a2:b4:6e:a3:d2:
                    5c:b2:a6:ca:1f:b8:70:44:b1:05:f3:6b:16:cc:ef:
                    16:a4:e2:d9:ac:d9:bb:fa:4d:d1:62:a3:e9:38:2d:
                    30:9e:5d:e1:11:77:f5:c3:15:3f:cd:df:49:a2:aa:
                    7d:1a:21:6a:b6:0b:6e:73:80:46:2a:e1:f1:d8:d8:
                    f6:ba:ec:a3:35:13:17:82:1c:2e:34:73:a3:b9:57:
                    59:6a:96:20:c0:8a:c7:36:a3:dd:9d:55:50:b4:3e:
                    93:82:22:7c:1d:8e:4f:2b:2a:6a:0b:a4:04:4b:0d:
                    df:bd:52:1c:b7:eb:eb:ad:d9:2f:1c:87:9b:4b:fe:
                    dc:03:2e:e6:65:06:e1:5a:16:23:97:78:61:64:b8:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:BB:F9:86:A1:15:18:CD:99:38:E7:2C:5C:8B:FF:BE:A2:1F:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:e0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:a5:29:b1:3a:5d:58:12:ec:bd:52:bb:c2:e6:11:74:14:
         07:db:9a:79:ab:6d:ad:37:f8:30:af:7d:5d:2a:b5:6d:00:e8:
         b3:5c:c6:10:af:cc:da:d1:4a:8e:67:f8:2a:95:6b:29:33:f5:
         19:94:e3:1d:67:70:49:c2:bf:63:f2:95:63:27:5b:17:c0:00:
         70:f5:43:e2:90:de:86:1d:3e:26:f6:c0:4a:33:48:5f:69:26:
         ae:b2:71:89:76:17:0a:0c:ef:1d:61:01:63:ff:7f:27:b9:f6:
         40:8d:78:ef:b9:19:62:74:22:85:3e:2c:5b:ee:be:16:b2:49:
         4f:ea:63:94:7b:08:57:0b:79:e9:02:c2:3f:cc:4a:e2:21:f2:
         01:55:15:60:92:43:e0:bf:1d:29:b3:dc:8c:12:61:62:3b:66:
         07:ea:72:c0:4f:96:44:f1:39:5c:bc:5e:53:0d:80:6d:e9:4b:
         21:65:2e:d6:a0:cb:7a:ba:10:35:28:b0:71:7a:6b:c6:95:ed:
         65:4a:e4:c7:6e:a3:26:61:db:10:87:b4:ba:9a:ad:eb:2d:e3:
         26:d9:2b:f3:49:ed:48:9b:47:e7:0a:ec:6a:22:f5:06:85:d5:
         02:72:ce:de:38:ac:9a:9a:2d:89:60:3a:60:b5:16:ba:df:2c:
         f5:85:2c:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeHkfvF5oo5t7l/mUEiniESUpcX4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU1MDIxWhcNMjUwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMTQyMzYxYWQwZjg3NjdkNWY1Mzc4MmE0NDczZTMzNjVh
ODQyNzRmNTNlNDlhYjU0ZTczMmRmZDRiOWY5NzBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvEoTUNYz/i9d5FCuNblPd2fPLG4lHUoiJjrt8atx+elgv
7Ncz0jvykeawmb6cn+9jHnu6hgsuLWvJi1zEdqF5CWir9y/fV1vqMhdnGe59B2oG
4Y8UOAIJBSgZWauGIN88MBMv5XDi5e9eG1vi+NyNOEaitG6j0lyypsofuHBEsQXz
axbM7xak4tms2bv6TdFio+k4LTCeXeERd/XDFT/N30miqn0aIWq2C25zgEYq4fHY
2Pa67KM1ExeCHC40c6O5V1lqliDAisc2o92dVVC0PpOCInwdjk8rKmoLpARLDd+9
Uhy36+ut2S8ch5tL/twDLuZlBuFaFiOXeGFkuPv5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbo67+YahFRjNmTjnLFyL/76iH9EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmNmU4MjhjLWRhYjYtNDlmNi04MzZkLTcyZTFjMGRiNGZhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/74MAwDQYJKoZIhvcNAQELBQADggEBAHOnpSmxOl1YEuy9UrvC5hF0
FAfbmnmrba03+DCvfV0qtW0A6LNcxhCvzNrRSo5n+CqVaykz9RmU4x1ncEnCv2Py
lWMnWxfAAHD1Q+KQ3oYdPib2wEozSF9pJq6ycYl2FwoM7x1hAWP/fye59kCNeO+5
GWJ0IoU+LFvuvhaySU/qY5R7CFcLeekCwj/MSuIh8gFVFWCSQ+C/HSmz3IwSYWI7
ZgfqcsBPlkTxOVy8XlMNgG3pSyFlLtagy3q6EDUosHF6a8aV7WVK5MduoyZh2xCH
tLqarest4ybZK/NJ7UibR+cK7Goi9QaF1QJyzt44rJqaLYlgOmC1FrrfLPWFLBk=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:32 2025 by rpki-client