Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa
File:                     2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa (raw, json)
Hash identifier:          WbGtHfFN7WC6nl9e6kQcrWxh4qb8HGSGjL1nEiVz37U=
Subject key identifier:   AB:AD:00:36:31:BF:CC:1C:51:78:40:CF:A7:A2:A6:4F:16:B2:A2:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47A93D88293FEA1FA90A790C7005FC5F5298B498
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa
Signing time:             Sat 06 Sep 2025 00:21:28 +0000
ROA not before:           Sat 06 Sep 2025 00:21:28 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff0:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a9:3d:88:29:3f:ea:1f:a9:0a:79:0c:70:05:fc:5f:52:98:b4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:21:28 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=5b1e3661c9b7e231ebf9b712750ea9f3b866445fdd2ef10906ba0d2da6165448, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:f0:a3:82:87:0f:15:57:57:9d:dc:de:55:
                    8d:9b:67:62:47:5f:fc:41:df:7b:b3:44:0c:44:5b:
                    7a:d0:1d:b5:0e:c4:c0:cd:eb:73:64:a3:4e:62:72:
                    62:ca:b8:43:3c:86:77:d0:0b:98:7f:c4:2e:70:07:
                    fa:27:b6:02:d0:b9:bd:cf:22:09:16:62:84:93:4f:
                    27:f4:9b:ef:f8:e7:33:34:9f:8c:dc:75:1d:80:b0:
                    ec:23:4e:ab:8d:34:51:9a:a4:8c:89:4f:fc:7e:51:
                    41:5a:ec:15:24:16:1f:2b:8b:48:fe:07:4e:aa:c0:
                    60:f4:7d:b6:b5:c8:62:5d:4c:9d:e5:77:1b:aa:95:
                    42:e6:1f:95:db:de:a1:e7:9e:62:e2:4e:27:ff:4b:
                    c5:d5:6a:8b:d7:db:dd:ae:7d:46:10:bf:5b:b8:2c:
                    cc:35:5b:7b:9d:0d:97:09:18:40:a1:d9:32:cb:2d:
                    8c:b5:63:f8:b4:9b:71:23:27:42:16:15:f5:8c:55:
                    e6:f1:03:f3:77:f2:aa:f4:ec:cd:ec:fa:78:49:a4:
                    6c:dc:e7:e0:3c:94:c3:99:e6:bc:05:6f:37:a8:96:
                    63:4d:40:f1:1f:61:10:c1:e4:fc:af:de:ef:7f:42:
                    1e:e0:42:d5:13:a7:27:9b:98:b1:73:e0:8d:20:0e:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:00:36:31:BF:CC:1C:51:78:40:CF:A7:A2:A6:4F:16:B2:A2:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:ed:a7:30:66:c5:b2:72:c1:50:d1:90:c9:1c:d3:12:c2:
         94:fa:3e:5b:71:39:4c:14:15:17:88:8c:60:e1:d5:d8:fb:cf:
         93:de:ab:f0:24:fa:ce:cc:ff:25:72:e5:2a:27:29:55:dd:d9:
         d1:20:08:58:09:57:9f:6b:35:47:44:ec:e6:c5:da:db:3b:cc:
         7e:7f:01:6a:bf:1b:ae:5e:b2:78:ba:b1:47:fa:ab:e7:92:a2:
         fd:59:25:e3:da:c8:4a:fb:0f:73:de:2e:d7:0d:a1:37:60:34:
         df:32:14:20:aa:83:88:48:29:86:78:9e:71:c6:86:f4:ac:8d:
         02:22:eb:46:34:bf:30:ab:a5:fa:96:99:e5:a2:7b:1d:a5:5d:
         ed:11:f3:9d:c0:e2:20:17:aa:3c:88:8e:a2:98:e8:9a:3e:46:
         22:d3:77:29:5c:50:69:5c:28:b1:2f:06:16:34:e0:cb:d8:24:
         66:b0:7b:b1:e2:58:17:08:1e:3c:29:b8:66:4e:a4:1c:c4:bb:
         05:83:18:ed:b9:ae:dd:82:dc:91:bb:a8:67:1a:2c:16:5c:42:
         ea:08:db:68:af:e0:d3:30:eb:88:c1:54:fa:53:1c:d7:df:bf:
         e1:fa:24:81:57:ea:9d:be:ba:85:c0:88:30:bd:5c:87:98:20:
         65:fc:35:c5
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUR6k9iCk/6h+pCnkMcAX8X1KYtJgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAyMTI4WhcNMjUxMDExMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YjFlMzY2MWM5YjdlMjMxZWJmOWI3MTI3NTBlYTlmM2I4
NjY0NDVmZGQyZWYxMDkwNmJhMGQyZGE2MTY1NDQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5//CjgocPFVdXndzeVY2bZ2JHX/xB33uzRAxEW3rQHbUO
xMDN63Nko05icmLKuEM8hnfQC5h/xC5wB/ontgLQub3PIgkWYoSTTyf0m+/45zM0
n4zcdR2AsOwjTquNNFGapIyJT/x+UUFa7BUkFh8ri0j+B06qwGD0fba1yGJdTJ3l
dxuqlULmH5Xb3qHnnmLiTif/S8XVaovX292ufUYQv1u4LMw1W3udDZcJGECh2TLL
LYy1Y/i0m3EjJ0IWFfWMVebxA/N38qr07M3s+nhJpGzc5+A8lMOZ5rwFbzeolmNN
QPEfYRDB5Pyv3u9/Qh7gQtUTpyebmLFz4I0gDllFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUq60ANjG/zBxReEDPp6KmTxayosYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJmZjEwYmNmLWEwZDEtNGY0MC1iNzljLWQ4NGIwN2QzYzdiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/wUDANBgkqhkiG9w0BAQsFAAOCAQEAQtntpzBmxbJywVDRkMkc0xLC
lPo+W3E5TBQVF4iMYOHV2PvPk96r8CT6zsz/JXLlKicpVd3Z0SAIWAlXn2s1R0Ts
5sXa2zvMfn8Bar8brl6yeLqxR/qr55Ki/Vkl49rISvsPc94u1w2hN2A03zIUIKqD
iEgphnieccaG9KyNAiLrRjS/MKul+paZ5aJ7HaVd7RHzncDiIBeqPIiOopjomj5G
ItN3KVxQaVwosS8GFjTgy9gkZrB7seJYFwgePCm4Zk6kHMS7BYMY7bmu3YLckbuo
ZxosFlxC6gjbaK/g0zDriMFU+lMc19+/4fokgVfqnb66hcCIML1ch5ggZfw1xQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:28 2025 by rpki-client