Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
File:                     4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json)
Hash identifier:          6K+IQOwDyNPaSxUrk0z+pRgGPX+53hhCImNY9kWBFJA=
Subject key identifier:   58:FE:B9:9D:83:F7:BC:15:1F:82:47:5F:86:1E:B0:60:FA:5E:3F:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CB8E232EE3F1218037FB9373B210F8756F3BDA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
Signing time:             Fri 30 May 2025 00:10:58 +0000
ROA not before:           Fri 30 May 2025 00:10:58 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b8:e2:32:ee:3f:12:18:03:7f:b9:37:3b:21:0f:87:56:f3:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:10:58 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=4653a72690e292f02018537725a7842f59dac93c7e8da6bf6c6a4621117bd15a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:f5:97:ff:87:78:5d:40:12:3b:64:e5:08:
                    82:37:e2:20:44:67:43:10:d4:1a:81:ff:83:de:e7:
                    3b:62:c9:95:23:a2:8d:65:e3:26:a5:0d:32:60:43:
                    8f:88:76:20:56:65:ec:86:b1:64:e2:3d:29:57:16:
                    41:a0:23:f3:bc:25:b3:97:96:89:12:99:f5:53:fc:
                    14:c8:7b:9e:b9:c2:88:21:81:44:09:79:e9:53:3c:
                    12:ff:a9:06:20:76:90:62:94:ce:06:75:bb:71:9d:
                    22:e2:d8:84:bf:52:3c:95:91:1d:ab:dc:a8:fa:67:
                    84:1c:79:b9:fd:83:05:be:77:e2:5d:ab:b9:35:53:
                    c8:7b:ac:98:2a:d5:44:d2:20:b9:86:6b:26:82:d2:
                    0a:aa:08:09:51:93:fc:6d:c2:83:8b:3a:08:5c:70:
                    bb:83:ac:c4:c4:f5:75:75:40:6b:93:b9:23:d1:d7:
                    7a:e8:e4:2b:08:d8:c7:78:d8:4d:53:bc:2e:68:04:
                    e2:9b:85:d0:e7:92:3e:b6:72:88:a6:48:91:0c:ec:
                    7b:6e:18:6c:be:19:00:bd:80:fa:be:d6:4c:2b:ce:
                    20:e0:3a:00:ff:52:08:4f:92:47:67:69:32:12:dc:
                    c8:ca:0a:9f:0d:2f:57:26:50:c0:d7:e1:c7:5a:26:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FE:B9:9D:83:F7:BC:15:1F:82:47:5F:86:1E:B0:60:FA:5E:3F:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:d3:8b:df:14:2f:46:56:d3:35:56:2f:8d:0a:a2:3d:2e:
         48:9e:c1:71:80:da:b1:50:2c:ac:40:f0:05:fa:3c:bd:6d:36:
         a6:d2:87:4c:02:71:91:4a:6e:a3:c3:d3:85:0a:55:3c:54:13:
         17:2d:af:0f:40:09:df:aa:7e:d6:e1:34:78:c2:e3:cf:b7:01:
         54:49:22:c3:30:82:1a:03:54:d4:f3:18:82:19:cd:a7:3e:29:
         48:7c:3d:7d:b7:57:95:fb:68:4d:5b:1f:e2:59:4c:87:94:a6:
         af:b5:63:c7:2a:8b:35:a3:04:1d:29:66:ec:72:57:a8:0d:0c:
         d9:56:3e:e7:68:32:6c:04:d6:6f:16:53:51:e2:f7:84:ce:44:
         18:82:b3:c4:3e:f6:42:83:84:cc:31:94:aa:23:59:f9:0a:55:
         11:95:c3:83:7d:b5:72:bc:43:b2:63:0b:f5:dd:2f:5e:c6:55:
         61:cf:0f:0f:23:4d:d8:6f:86:9f:1d:08:cc:45:b0:1e:04:20:
         b2:e2:e3:15:dd:d7:a1:3a:65:52:44:b4:65:a2:85:4a:64:02:
         83:13:6c:5c:77:51:76:9b:22:b4:bc:66:a9:29:16:db:28:c5:
         ed:79:84:cd:28:b9:83:9f:82:8c:9d:1c:f8:68:47:d8:54:aa:
         31:09:5f:4c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUPLjiMu4/EhgDf7k3OyEPh1bzvacwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMDU4WhcNMjUwNzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjUzYTcyNjkwZTI5MmYwMjAxODUzNzcyNWE3ODQyZjU5
ZGFjOTNjN2U4ZGE2YmY2YzZhNDYyMTExN2JkMTVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCenfWX/4d4XUASO2TlCII34iBEZ0MQ1BqB/4Pe5ztiyZUj
oo1l4yalDTJgQ4+IdiBWZeyGsWTiPSlXFkGgI/O8JbOXlokSmfVT/BTIe565wogh
gUQJeelTPBL/qQYgdpBilM4GdbtxnSLi2IS/UjyVkR2r3Kj6Z4Qcebn9gwW+d+Jd
q7k1U8h7rJgq1UTSILmGayaC0gqqCAlRk/xtwoOLOghccLuDrMTE9XV1QGuTuSPR
13ro5CsI2Md42E1TvC5oBOKbhdDnkj62coimSJEM7HtuGGy+GQC9gPq+1kwrziDg
OgD/UghPkkdnaTIS3MjKCp8NL1cmUMDX4cdaJmONAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUWP65nYP3vBUfgkdfhh6wYPpeP6YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRlYjFkNDVjLTBiZmMtNDZhMy05N2M2LWQ3M2IyOGNkOGEwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+gUDANBgkqhkiG9w0BAQsFAAOCAQEAX2XTi98UL0ZW0zVWL40Koj0u
SJ7BcYDasVAsrEDwBfo8vW02ptKHTAJxkUpuo8PThQpVPFQTFy2vD0AJ36p+1uE0
eMLjz7cBVEkiwzCCGgNU1PMYghnNpz4pSHw9fbdXlftoTVsf4llMh5Smr7VjxyqL
NaMEHSlm7HJXqA0M2VY+52gybATWbxZTUeL3hM5EGIKzxD72QoOEzDGUqiNZ+QpV
EZXDg321crxDsmML9d0vXsZVYc8PDyNN2G+Gnx0IzEWwHgQgsuLjFd3XoTplUkS0
ZaKFSmQCgxNsXHdRdpsitLxmqSkW2yjF7XmEzSi5g5+CjJ0c+GhH2FSqMQlfTA==
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:21:41 2025 by rpki-client