Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036a67f7-252e-4131-a438-c4749fe3d147.roa
File:                     036a67f7-252e-4131-a438-c4749fe3d147.roa (raw, json)
Hash identifier:          eeV4nmR20mBGkFl4ziMLKwJ5lXU3pBxyYWPm3GWecq4=
Subject key identifier:   EB:01:16:75:3A:B9:D9:42:89:63:66:1A:DA:F0:F6:0B:7E:E4:2E:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       408ED91A6B053345764896C9E09CF6EB9F44085C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036a67f7-252e-4131-a438-c4749fe3d147.roa
Signing time:             Wed 23 Jul 2025 00:40:26 +0000
ROA not before:           Wed 23 Jul 2025 00:40:26 +0000
ROA not after:            Wed 27 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fbb:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:d9:1a:6b:05:33:45:76:48:96:c9:e0:9c:f6:eb:9f:44:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:40:26 2025 GMT
            Not After : Aug 27 23:59:59 2025 GMT
        Subject: serialNumber=ac20e6098565dcc87b53e3b51029a95a8c07f23f413b90f67be54999da0932bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:99:25:99:39:0b:0f:5b:41:53:24:80:a6:
                    51:aa:4d:07:d8:58:33:85:eb:6a:5e:cf:83:97:94:
                    8b:90:4d:72:4f:a5:eb:d6:8c:df:6d:4f:61:47:37:
                    b1:32:3b:2b:73:e4:09:4f:f2:eb:7c:28:45:44:c8:
                    5d:97:72:4a:05:6c:6f:4b:cf:c9:c2:e5:50:fc:51:
                    3c:49:0b:ae:88:8d:4a:0a:1e:e2:22:4e:17:b1:f7:
                    df:6a:c0:71:e5:c5:ff:ab:5d:b9:b4:f6:04:5e:c1:
                    38:c4:42:b9:f0:d1:79:5d:cc:0f:9c:bf:f0:e8:cc:
                    c9:f1:3e:4a:79:01:f9:5d:71:d2:55:a1:be:f8:de:
                    66:63:e2:51:ad:9a:4f:68:af:fd:f7:05:9e:2b:26:
                    9a:dd:72:5a:ed:85:3b:36:7f:04:43:15:1e:66:e0:
                    99:5f:78:46:c0:1c:1b:3f:6c:f9:52:20:1a:64:92:
                    46:07:95:6d:9d:7f:ee:b8:30:df:01:b7:9d:a5:08:
                    e6:90:ec:16:b3:18:4b:0e:14:f4:04:1a:9a:7d:93:
                    f5:63:5b:01:ef:5e:da:28:03:e5:28:34:ae:09:ad:
                    f9:87:92:4b:31:20:cc:2c:8e:61:17:29:3d:92:9e:
                    c3:4f:45:91:f6:f2:7b:cb:36:ba:ee:c4:02:b0:82:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:16:75:3A:B9:D9:42:89:63:66:1A:DA:F0:F6:0B:7E:E4:2E:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036a67f7-252e-4131-a438-c4749fe3d147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fbb:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:d7:3b:c6:4f:14:9a:b9:5d:93:47:ef:5b:8e:b9:df:99:
         ac:59:dc:3c:0b:29:52:58:77:cb:26:cc:6e:f0:56:d1:d9:ff:
         4c:f4:c9:ba:fe:4d:57:f0:c1:52:c5:1c:6e:84:6b:f3:0f:40:
         ec:9c:4b:83:6a:24:53:1d:f5:8b:c5:a5:6d:43:d3:68:a3:7a:
         0b:7c:0c:0e:6e:94:50:54:54:3b:ef:77:b3:9f:55:88:36:1c:
         c8:1c:79:53:a5:d2:db:35:61:7d:38:ac:f5:b7:ad:37:d4:a2:
         fa:bd:ac:79:2e:94:5d:4a:f7:2a:38:64:ce:8c:b4:89:fc:b0:
         85:c4:8f:b2:1b:f1:2b:db:7b:24:a6:08:19:42:3b:8e:0a:13:
         22:bd:ab:04:fb:3e:87:be:82:bd:ae:f5:06:ee:b7:ce:4d:b7:
         cd:fd:fb:0a:9c:96:35:c7:10:b4:0f:5b:6b:2e:9a:f1:86:0e:
         22:89:93:4a:9c:fa:b9:ea:40:2f:15:eb:f6:d9:03:b8:b7:96:
         9b:34:45:cd:4f:04:55:6f:cc:79:28:01:dc:f7:6e:3b:92:51:
         b6:40:a7:00:4b:b5:c5:63:88:29:df:ef:b2:de:72:c2:17:da:
         d0:bf:53:c7:7f:83:43:91:64:c3:5f:84:e4:dc:36:15:13:bd:
         2c:6d:56:64
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQI7ZGmsFM0V2SJbJ4Jz2659ECFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDA0MDI2WhcNMjUwODI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzIwZTYwOTg1NjVkY2M4N2I1M2UzYjUxMDI5YTk1YThj
MDdmMjNmNDEzYjkwZjY3YmU1NDk5OWRhMDkzMmJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDozZklmTkLD1tBUySAplGqTQfYWDOF62pez4OXlIuQTXJP
pevWjN9tT2FHN7EyOytz5AlP8ut8KEVEyF2XckoFbG9Lz8nC5VD8UTxJC66IjUoK
HuIiThex999qwHHlxf+rXbm09gRewTjEQrnw0XldzA+cv/DozMnxPkp5AfldcdJV
ob743mZj4lGtmk9or/33BZ4rJprdclrthTs2fwRDFR5m4JlfeEbAHBs/bPlSIBpk
kkYHlW2df+64MN8Bt52lCOaQ7BazGEsOFPQEGpp9k/VjWwHvXtooA+UoNK4JrfmH
kksxIMwsjmEXKT2SnsNPRZH28nvLNrruxAKwgjN9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU6wEWdTq52UKJY2Ya2vD2C37kLqwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzNmE2N2Y3LTI1MmUtNDEzMS1hNDM4LWM0NzQ5ZmUzZDE0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB+7gDANBgkqhkiG9w0BAQsFAAOCAQEAU6jXO8ZPFJq5XZNH71uOud+Z
rFncPAspUlh3yybMbvBW0dn/TPTJuv5NV/DBUsUcboRr8w9A7JxLg2okUx31i8Wl
bUPTaKN6C3wMDm6UUFRUO+93s59ViDYcyBx5U6XS2zVhfTis9betN9Si+r2seS6U
XUr3Kjhkzoy0ifywhcSPshvxK9t7JKYIGUI7jgoTIr2rBPs+h76Cva71Bu63zk23
zf37CpyWNccQtA9bay6a8YYOIomTSpz6uepALxXr9tkDuLeWmzRFzU8EVW/MeSgB
3PduO5JRtkCnAEu1xWOIKd/vst5ywhfa0L9Tx3+DQ5Fkw1+E5Nw2FRO9LG1WZA==
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:09:49 2025 by rpki-client