Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
File:                     3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa (raw, json)
Hash identifier:          x3IekU5+N85mU6Qlo9TIK7o+w8ioSKwjK1IfU9tP4ls=
Subject key identifier:   1A:A5:CF:C0:6F:FC:35:98:AD:79:4C:21:65:0B:30:F6:D5:17:26:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78DD3D0F76BAD819719EBE4AFDCC938C661E7036
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa
Signing time:             Fri 29 Aug 2025 16:11:13 +0000
ROA not before:           Fri 29 Aug 2025 16:11:13 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1c:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dd:3d:0f:76:ba:d8:19:71:9e:be:4a:fd:cc:93:8c:66:1e:70:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 16:11:13 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=cacf4a2b2c8a08fa6d0c9f828e343113174271526d8d5f66fc1952d6f5ab2dbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:9e:44:04:74:63:a5:19:45:4c:51:85:ae:
                    34:db:8a:89:4c:f4:a3:eb:8e:f5:3d:aa:00:a4:59:
                    82:f1:1e:59:30:59:7a:37:e7:50:b6:45:84:7c:1a:
                    a2:da:81:4b:74:97:21:62:cb:06:06:38:b8:e7:22:
                    18:89:54:74:ad:84:0f:92:9a:9e:81:73:33:08:7d:
                    fc:86:65:17:bd:55:10:7a:08:b7:8f:67:27:46:d9:
                    81:4d:c8:46:cc:f0:48:e4:dd:ee:d4:7c:9e:a0:b2:
                    ed:40:07:3b:3d:85:66:8b:ed:7f:4f:47:de:00:fb:
                    25:1e:84:56:d2:c8:19:a4:c3:c6:ec:7e:b5:fd:b5:
                    78:fc:e3:42:12:f2:d4:58:3c:a0:02:3e:cf:74:0e:
                    c4:fb:d3:d2:8e:87:c0:ad:28:7b:3f:46:9b:6f:1b:
                    c9:fd:3d:14:6b:ff:0e:1e:a9:36:22:d6:c0:11:85:
                    0a:cd:12:b9:ec:c0:83:86:93:ea:f7:96:fd:d4:40:
                    0d:38:86:df:e8:93:c5:8f:0f:f6:4c:2d:ea:16:b4:
                    58:dd:8a:90:3d:d5:ec:0d:2a:5b:d0:06:09:71:a8:
                    f8:58:4d:39:28:51:a7:5e:ef:e4:f5:56:6b:e8:32:
                    da:ed:d6:a8:be:d9:52:7e:e6:66:39:51:b4:a4:57:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:CF:C0:6F:FC:35:98:AD:79:4C:21:65:0B:30:F6:D5:17:26:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f073e6c-f4cd-45c6-8dc7-838b78d05ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c4:7d:bb:d6:97:12:ac:ab:58:7f:1f:93:42:0a:e4:83:cb:ac:
         e5:fc:f9:2c:12:f6:e9:d3:58:ef:a7:6e:b0:58:23:9b:79:0e:
         1f:e1:90:07:d2:2a:4d:12:b7:f1:c9:90:8a:e1:91:62:6f:00:
         97:3d:3c:68:58:c6:1b:a1:c1:79:58:c0:16:4e:c7:c5:1b:fb:
         b1:7c:97:88:58:d5:81:b1:f2:0b:e0:2f:34:de:36:6b:d2:a1:
         7f:c2:88:a4:6c:ac:2a:0d:47:aa:74:18:ed:38:41:a3:de:4e:
         a5:ac:93:bb:57:6e:e7:f6:ae:19:fb:a6:ed:0e:77:b3:e5:f5:
         ae:e3:a7:8f:15:e9:30:c6:3a:2a:9b:33:9e:ab:47:69:97:00:
         4b:88:35:8f:16:f7:9c:4e:4f:43:28:c9:5f:b6:c7:e6:01:05:
         67:fb:28:5d:84:d4:83:cc:37:de:b9:f0:77:d6:e7:4b:a7:9e:
         a4:ad:c3:63:9e:e6:aa:4c:a2:61:db:13:c7:20:31:10:3d:f0:
         86:f1:10:e0:ac:8f:b3:96:a3:e2:78:b9:08:cd:b1:c7:f4:80:
         4a:df:78:6e:50:94:99:42:90:4a:81:86:fb:1d:03:c4:1c:ad:
         9c:2a:2d:03:4f:fd:ae:10:1b:ca:6a:66:c1:8f:17:55:37:42:
         45:93:9d:6c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeN09D3a62Blxnr5K/cyTjGYecDYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMTEzWhcNMjUxMDAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWNmNGEyYjJjOGEwOGZhNmQwYzlmODI4ZTM0MzExMzE3
NDI3MTUyNmQ4ZDVmNjZmYzE5NTJkNmY1YWIyZGJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcfZ5EBHRjpRlFTFGFrjTbiolM9KPrjvU9qgCkWYLxHlkw
WXo351C2RYR8GqLagUt0lyFiywYGOLjnIhiJVHSthA+Smp6BczMIffyGZRe9VRB6
CLePZydG2YFNyEbM8Ejk3e7UfJ6gsu1ABzs9hWaL7X9PR94A+yUehFbSyBmkw8bs
frX9tXj840IS8tRYPKACPs90DsT709KOh8CtKHs/RptvG8n9PRRr/w4eqTYi1sAR
hQrNErnswIOGk+r3lv3UQA04ht/ok8WPD/ZMLeoWtFjdipA91ewNKlvQBglxqPhY
TTkoUade7+T1VmvoMtrt1qi+2VJ+5mY5UbSkV+KpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUGqXPwG/8NZiteUwhZQsw9tUXJn8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNmMDczZTZjLWY0Y2QtNDVjNi04ZGM3LTgzOGI3OGQwNWVlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8cgDANBgkqhkiG9w0BAQsFAAOCAQEAxH271pcSrKtYfx+TQgrkg8us
5fz5LBL26dNY76dusFgjm3kOH+GQB9IqTRK38cmQiuGRYm8Alz08aFjGG6HBeVjA
Fk7HxRv7sXyXiFjVgbHyC+AvNN42a9Khf8KIpGysKg1HqnQY7ThBo95OpayTu1du
5/auGfum7Q53s+X1ruOnjxXpMMY6KpsznqtHaZcAS4g1jxb3nE5PQyjJX7bH5gEF
Z/soXYTUg8w33rnwd9bnS6eepK3DY57mqkyiYdsTxyAxED3whvEQ4KyPs5aj4ni5
CM2xx/SASt94blCUmUKQSoGG+x0DxBytnCotA0/9rhAbympmwY8XVTdCRZOdbA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:19 2025 by rpki-client