Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/365eedf5-fc6c-4bda-bf00-ed0ecbc7d263.roa
File:                     365eedf5-fc6c-4bda-bf00-ed0ecbc7d263.roa (raw, json)
Hash identifier:          WEmQuNDstt9y4myqHUyn6e9j5xF601vZptdkZCXWUu8=
Subject key identifier:   5C:75:28:57:10:B3:1D:AA:AB:4D:DA:34:17:50:C1:19:FB:A9:59:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19A6E83BD2F611020807F73F23B916B82619BC54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/365eedf5-fc6c-4bda-bf00-ed0ecbc7d263.roa
Signing time:             Mon 25 Aug 2025 16:54:02 +0000
ROA not before:           Mon 25 Aug 2025 16:54:02 +0000
ROA not after:            Mon 29 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fec:a400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a6:e8:3b:d2:f6:11:02:08:07:f7:3f:23:b9:16:b8:26:19:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 25 16:54:02 2025 GMT
            Not After : Sep 29 23:59:59 2025 GMT
        Subject: serialNumber=81e44008ce893380d73b7a39d0767c06e6b1f53932a84b80aba7394fbb56f7c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:f0:bb:1e:81:07:c8:8b:13:0b:52:fb:f2:
                    2b:d9:d0:e1:0b:0f:6c:39:b2:ce:a6:e3:1f:2d:ce:
                    0f:85:8e:06:03:79:dd:ae:84:11:8b:e7:d1:2f:df:
                    81:f5:e3:71:f2:d6:b2:3e:60:59:8a:23:1b:2b:34:
                    9f:bd:7b:92:00:17:41:a6:24:ec:2d:b4:45:86:dc:
                    5d:48:77:f1:97:92:9b:36:ec:4e:63:ed:d3:18:47:
                    c3:0c:47:5a:64:7b:a2:06:1d:94:f0:c2:2c:bf:ab:
                    9a:8b:d5:b9:d5:4d:c3:8a:79:47:11:9e:7d:d7:79:
                    40:23:b6:5d:c9:a7:8a:ac:3a:a5:02:c9:e5:38:35:
                    be:48:ca:78:df:ee:fe:c7:65:c0:95:d6:0a:6e:b3:
                    b0:ab:03:1b:7d:94:c6:64:d9:af:3b:3b:4b:1f:e8:
                    e4:3b:c9:a6:8c:22:e1:e0:f0:83:fd:0d:ec:d5:b4:
                    35:f1:fa:00:1e:01:f7:51:67:02:a7:f9:9c:71:3a:
                    ad:d0:41:01:30:c5:be:6b:9a:3c:2f:d3:35:25:24:
                    b5:d4:60:ad:ca:01:dc:d0:c0:e2:8a:09:c7:e8:ac:
                    28:57:d6:b7:39:3d:5a:cb:a6:da:6f:bd:a9:3a:85:
                    83:8b:20:cd:33:e6:cc:63:29:46:04:ec:34:9e:65:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:28:57:10:B3:1D:AA:AB:4D:DA:34:17:50:C1:19:FB:A9:59:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/365eedf5-fc6c-4bda-bf00-ed0ecbc7d263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:a400::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:cf:45:75:27:e1:f0:5c:65:27:29:3f:9a:a9:ab:16:94:19:
         23:21:69:fa:4b:1f:a1:4b:8e:25:88:70:cc:f1:ea:15:c1:c4:
         31:43:45:3e:41:d7:7e:05:26:61:b0:4d:24:0e:48:a8:ab:43:
         3d:39:7b:58:3c:e8:37:35:d8:a0:7b:97:50:92:e1:e0:56:7b:
         19:70:05:2f:fd:66:ee:33:39:51:a2:25:8e:94:1d:8c:0e:3e:
         9e:8f:b0:f8:fd:e9:16:b2:ad:39:ab:5f:f9:e4:0c:7d:14:3c:
         e4:ab:ca:a8:8b:92:29:96:c5:58:33:ea:dd:6c:55:eb:e2:79:
         81:58:f6:56:d8:a5:05:42:fc:97:cf:3f:a1:16:ea:f7:c3:8d:
         cd:8c:0f:ce:3b:ed:85:6c:54:78:9a:d0:ba:cc:ac:17:ad:78:
         e8:2f:e1:82:5a:ff:44:bb:59:ef:86:f1:6a:52:31:4d:ce:b7:
         ce:cb:02:a6:15:27:f4:ea:4f:bf:44:29:38:23:7e:ec:22:47:
         73:ed:a8:04:07:51:60:6d:5e:f0:c6:9f:7e:12:3a:76:c0:88:
         a1:10:8b:02:f8:71:68:8c:3e:d6:59:f8:72:d2:77:c6:93:0c:
         cd:bb:8a:a2:42:5e:41:85:61:d5:24:c4:09:c8:72:03:9c:e1:
         17:d0:84:24
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGaboO9L2EQIIB/c/I7kWuCYZvFQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1NDAyWhcNMjUwOTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MWU0NDAwOGNlODkzMzgwZDczYjdhMzlkMDc2N2MwNmU2
YjFmNTM5MzJhODRiODBhYmE3Mzk0ZmJiNTZmN2MzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNFvC7HoEHyIsTC1L78ivZ0OELD2w5ss6m4x8tzg+FjgYD
ed2uhBGL59Ev34H143Hy1rI+YFmKIxsrNJ+9e5IAF0GmJOwttEWG3F1Id/GXkps2
7E5j7dMYR8MMR1pke6IGHZTwwiy/q5qL1bnVTcOKeUcRnn3XeUAjtl3Jp4qsOqUC
yeU4Nb5Iynjf7v7HZcCV1gpus7CrAxt9lMZk2a87O0sf6OQ7yaaMIuHg8IP9DezV
tDXx+gAeAfdRZwKn+ZxxOq3QQQEwxb5rmjwv0zUlJLXUYK3KAdzQwOKKCcforChX
1rc5PVrLptpvvak6hYOLIM0z5sxjKUYE7DSeZTWLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXHUoVxCzHaqrTdo0F1DBGfupWXowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2NWVlZGY1LWZjNmMtNGJkYS1iZjAwLWVkMGVjYmM3ZDI2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/spAAwDQYJKoZIhvcNAQELBQADggEBAJPPRXUn4fBcZScpP5qpqxaU
GSMhafpLH6FLjiWIcMzx6hXBxDFDRT5B134FJmGwTSQOSKirQz05e1g86Dc12KB7
l1CS4eBWexlwBS/9Zu4zOVGiJY6UHYwOPp6PsPj96RayrTmrX/nkDH0UPOSryqiL
kimWxVgz6t1sVevieYFY9lbYpQVC/JfPP6EW6vfDjc2MD8477YVsVHia0LrMrBet
eOgv4YJa/0S7We+G8WpSMU3Ot87LAqYVJ/TqT79EKTgjfuwiR3PtqAQHUWBtXvDG
n34SOnbAiKEQiwL4cWiMPtZZ+HLSd8aTDM27iqJCXkGFYdUkxAnIcgOc4RfQhCQ=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:12:19 2025 by rpki-client