Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa
File:                     b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa (raw, json)
Hash identifier:          b79Kz3U0jjDTxy6hPK3oe+kYYKKrU13ArLZJPygfnD0=
Subject key identifier:   A7:29:A7:45:EF:6F:19:74:99:5A:13:80:23:79:76:7A:9B:FF:78:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6759263B2FCA076A5132E2AA377375ABF3AABFF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa
Signing time:             Tue 08 Jul 2025 17:31:16 +0000
ROA not before:           Tue 08 Jul 2025 17:31:16 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1c:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:26:3b:2f:ca:07:6a:51:32:e2:aa:37:73:75:ab:f3:aa:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 17:31:16 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=5f73d65aa859a5c9181f6c9430a8e30cd2bc77906e72fa62d47bb08526f0ff03, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:e1:63:fa:81:01:9d:20:79:af:a3:33:35:
                    b4:1c:d2:31:bb:36:37:81:3d:e3:5e:9e:09:54:7e:
                    0e:f4:9a:65:54:9b:cc:5f:63:83:d0:ff:cf:01:e7:
                    8d:a0:49:00:fb:2a:1b:d9:d4:08:df:68:2c:6a:a0:
                    e8:4d:15:63:81:0e:4e:de:29:de:94:93:0a:7a:67:
                    9a:27:56:6f:db:af:ff:ef:7f:c2:4e:32:7a:07:62:
                    db:62:df:12:24:4e:ea:ed:fb:3b:97:d5:d9:ba:7c:
                    fd:fa:7b:d5:87:77:51:61:c0:8e:ac:a9:06:31:d1:
                    88:a3:e1:39:0d:0e:9e:c2:3e:82:27:4b:43:95:fa:
                    24:3b:f3:c5:36:cb:d5:f3:74:a7:d9:e1:c4:14:e3:
                    cb:7f:08:3e:d5:bd:01:6c:7b:4d:39:a6:bf:c0:30:
                    69:e6:29:b8:9c:57:56:f4:7e:18:0e:c6:ed:7a:10:
                    67:fb:c3:9d:cf:87:8b:f7:c6:e7:a0:c2:19:7b:40:
                    ad:7c:74:3f:fe:72:77:57:71:ca:39:aa:3f:75:12:
                    9a:69:30:44:d9:ec:1d:07:38:73:5b:d6:5e:ac:d7:
                    0e:63:b6:d3:92:75:3f:4b:9e:72:43:31:69:01:5c:
                    86:28:30:98:5c:cd:90:a7:66:ab:49:b5:4a:0b:e6:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:A7:45:EF:6F:19:74:99:5A:13:80:23:79:76:7A:9B:FF:78:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:00:99:d6:e1:ec:77:a7:5d:a6:3d:2b:9c:5b:69:8e:dd:79:
         67:5d:af:c8:0c:10:10:7d:83:49:5f:4f:96:e0:d7:67:13:64:
         d5:ba:1e:c2:9f:9d:19:b0:1b:54:f7:d0:4e:f9:a2:8e:db:f7:
         b2:47:27:de:32:66:18:3f:97:68:7d:67:84:2e:6f:74:f1:b5:
         80:68:1b:e4:35:64:15:d4:52:84:99:59:d8:0e:63:5b:0a:29:
         8f:d6:39:fb:12:ca:8f:57:d4:23:77:69:c2:a9:c1:50:a8:37:
         c1:8d:40:54:3c:ae:a5:bc:f0:f9:d5:28:46:6f:cb:b4:38:3a:
         ba:0e:7f:16:f3:d3:9a:74:d7:c6:6b:fe:2c:95:43:9a:26:b6:
         17:85:be:1a:43:e9:fb:62:12:27:68:4d:40:38:53:91:8c:05:
         1b:6d:72:af:64:5c:ca:71:f4:13:41:6c:8b:99:19:81:74:f4:
         e7:c8:fa:be:46:ff:3e:c3:9d:84:95:37:af:99:1b:4e:a2:87:
         9f:c5:d1:71:99:ca:ae:d2:75:2a:5a:b1:3f:46:9d:32:42:e4:
         95:6f:41:0e:2d:69:e8:a6:65:77:0c:56:21:8e:e4:b0:07:82:
         a4:2c:59:40:c9:1e:1e:bc:4e:4d:a1:3e:0d:fd:90:9b:fb:8a:
         b7:c1:d6:87
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUZ1kmOy/KB2pRMuKqN3N1q/Oqv/MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMTE2WhcNMjUwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZjczZDY1YWE4NTlhNWM5MTgxZjZjOTQzMGE4ZTMwY2Qy
YmM3NzkwNmU3MmZhNjJkNDdiYjA4NTI2ZjBmZjAzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2UOFj+oEBnSB5r6MzNbQc0jG7NjeBPeNenglUfg70mmVU
m8xfY4PQ/88B542gSQD7KhvZ1AjfaCxqoOhNFWOBDk7eKd6Ukwp6Z5onVm/br//v
f8JOMnoHYtti3xIkTurt+zuX1dm6fP36e9WHd1FhwI6sqQYx0Yij4TkNDp7CPoIn
S0OV+iQ788U2y9XzdKfZ4cQU48t/CD7VvQFse005pr/AMGnmKbicV1b0fhgOxu16
EGf7w53Ph4v3xuegwhl7QK18dD/+cndXcco5qj91EpppMETZ7B0HOHNb1l6s1w5j
ttOSdT9LnnJDMWkBXIYoMJhczZCnZqtJtUoL5s91AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUpymnRe9vGXSZWhOAI3l2epv/eH8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I5MWFhMDE5LTJjNzctNGI4Ni1hNmY0LWZiYWRhMGMzZmYxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8cgDANBgkqhkiG9w0BAQsFAAOCAQEAlQCZ1uHsd6ddpj0rnFtpjt15
Z12vyAwQEH2DSV9PluDXZxNk1boewp+dGbAbVPfQTvmijtv3skcn3jJmGD+XaH1n
hC5vdPG1gGgb5DVkFdRShJlZ2A5jWwopj9Y5+xLKj1fUI3dpwqnBUKg3wY1AVDyu
pbzw+dUoRm/LtDg6ug5/FvPTmnTXxmv+LJVDmia2F4W+GkPp+2ISJ2hNQDhTkYwF
G21yr2RcynH0E0Fsi5kZgXT058j6vkb/PsOdhJU3r5kbTqKHn8XRcZnKrtJ1Klqx
P0adMkLklW9BDi1p6KZldwxWIY7ksAeCpCxZQMkeHrxOTaE+Df2Qm/uKt8HWhw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:22 2025 by rpki-client