Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa
File:                     514241ca-8435-43d1-8c71-085261ff7563.roa (raw, json)
Hash identifier:          WN/DZC5IDepIUaxZ1eu9ji5H3jGc/eGH1X9xjXvBI+Y=
Subject key identifier:   48:17:21:E6:64:C6:31:04:FE:51:DF:A6:DC:BE:D5:50:52:43:46:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C27196B5C829068CD7FDA06DAEFF23DDCD1FA87
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa
Signing time:             Sat 17 May 2025 00:41:18 +0000
ROA not before:           Sat 17 May 2025 00:41:18 +0000
ROA not after:            Sat 21 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:19:6b:5c:82:90:68:cd:7f:da:06:da:ef:f2:3d:dc:d1:fa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:41:18 2025 GMT
            Not After : Jun 21 23:59:59 2025 GMT
        Subject: serialNumber=49278d95dd7026fe2a59bcdc03796c7ae53d09bd707aa3bbaa5895476b24478c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:01:ac:ad:16:fd:0a:58:1d:89:c0:c5:cd:
                    b1:17:99:b6:7a:23:c9:b2:7a:98:ba:2c:60:9e:64:
                    1a:18:3b:81:1e:93:75:62:98:bf:46:ba:63:84:9e:
                    8b:8f:d5:89:a6:3a:9b:6f:bf:21:4b:69:ff:ce:dc:
                    0b:9a:30:32:9f:36:cc:96:13:21:71:32:be:78:a3:
                    a1:35:c5:59:1f:6e:e2:bd:25:c0:2f:b3:2f:23:4a:
                    20:b2:16:07:13:34:70:8d:21:ac:f6:01:ae:6d:6e:
                    12:90:34:98:04:b5:66:c8:f3:cd:31:b0:64:b4:c2:
                    33:80:4a:a2:c3:c4:4f:60:69:a5:e1:06:1b:0e:37:
                    75:83:b2:55:7c:f7:df:52:fe:da:b0:be:e7:7e:31:
                    74:1c:72:da:71:42:74:b0:b5:7f:53:a1:57:28:a5:
                    cc:18:a2:ad:76:2e:fc:d8:7e:87:f8:68:e0:60:4a:
                    f6:4f:94:41:41:a8:06:12:35:7b:56:9c:41:43:9c:
                    4a:fb:8b:23:0d:58:10:3c:cb:38:86:50:6c:cf:06:
                    85:a4:86:21:55:ff:0b:0c:2e:ac:8e:e2:46:ea:97:
                    0a:0d:bf:06:b7:aa:c7:37:df:18:2b:2a:55:dd:3f:
                    c5:10:5d:0b:e4:d3:b2:7c:d1:de:34:e2:e8:2d:24:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:17:21:E6:64:C6:31:04:FE:51:DF:A6:DC:BE:D5:50:52:43:46:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/514241ca-8435-43d1-8c71-085261ff7563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:9c:aa:bf:ce:bf:b4:d3:01:f9:03:16:fd:fc:73:16:dd:
         27:e7:22:68:c4:ce:fd:25:f7:55:13:eb:2e:12:24:c3:d5:e3:
         29:8b:c1:74:bc:b6:80:4b:c3:d0:ad:b5:32:ea:67:65:55:da:
         58:0a:eb:17:35:e6:20:b1:cf:05:6f:fd:61:46:6b:9d:4c:95:
         05:54:b0:10:19:80:95:af:62:6f:38:2e:11:98:c3:93:12:f0:
         77:8d:86:48:3d:84:12:e9:16:19:8b:2c:ee:c9:c5:19:4c:d3:
         a6:f7:18:92:b1:b8:4e:86:cf:d2:3b:99:23:e8:89:f2:96:b9:
         92:48:c5:b0:a3:50:d9:26:52:0e:69:e4:43:9d:0a:30:47:0c:
         9e:a8:16:f0:9d:bd:74:0e:65:6e:5c:57:7e:21:78:56:a2:86:
         ff:55:25:51:f1:99:e8:7e:68:a9:0e:16:2a:54:d5:bd:25:4f:
         5b:91:ee:ed:fe:72:ef:77:ec:99:e2:89:3c:c2:30:d3:d0:4b:
         25:be:20:04:e6:82:50:f2:83:2e:52:01:0a:17:de:e8:a1:7a:
         d9:dd:fa:ee:92:91:cc:86:7a:8a:38:a7:e6:b6:44:8c:24:c1:
         93:79:ff:89:14:8a:b7:31:68:d6:7b:89:44:e6:c4:97:e6:3b:
         c3:c6:96:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPCcZa1yCkGjNf9oG2u/yPdzR+ocwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDA0MTE4WhcNMjUwNjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0OTI3OGQ5NWRkNzAyNmZlMmE1OWJjZGMwMzc5NmM3YWU1
M2QwOWJkNzA3YWEzYmJhYTU4OTU0NzZiMjQ0NzhjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSfgGsrRb9ClgdicDFzbEXmbZ6I8myepi6LGCeZBoYO4Ee
k3VimL9GumOEnouP1YmmOptvvyFLaf/O3AuaMDKfNsyWEyFxMr54o6E1xVkfbuK9
JcAvsy8jSiCyFgcTNHCNIaz2Aa5tbhKQNJgEtWbI880xsGS0wjOASqLDxE9gaaXh
BhsON3WDslV8999S/tqwvud+MXQcctpxQnSwtX9ToVcopcwYoq12LvzYfof4aOBg
SvZPlEFBqAYSNXtWnEFDnEr7iyMNWBA8yziGUGzPBoWkhiFV/wsMLqyO4kbqlwoN
vwa3qsc33xgrKlXdP8UQXQvk07J80d404ugtJK6TAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSBch5mTGMQT+Ud+m3L7VUFJDRowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxNDI0MWNhLTg0MzUtNDNkMS04YzcxLTA4NTI2MWZmNzU2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/y4EAwDQYJKoZIhvcNAQELBQADggEBAAFLnKq/zr+00wH5Axb9/HMW
3SfnImjEzv0l91UT6y4SJMPV4ymLwXS8toBLw9CttTLqZ2VV2lgK6xc15iCxzwVv
/WFGa51MlQVUsBAZgJWvYm84LhGYw5MS8HeNhkg9hBLpFhmLLO7JxRlM06b3GJKx
uE6Gz9I7mSPoifKWuZJIxbCjUNkmUg5p5EOdCjBHDJ6oFvCdvXQOZW5cV34heFai
hv9VJVHxmeh+aKkOFipU1b0lT1uR7u3+cu937JniiTzCMNPQSyW+IATmglDygy5S
AQoX3uihetnd+u6SkcyGeoo4p+a2RIwkwZN5/4kUircxaNZ7iUTmxJfmO8PGlro=
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:33:01 2025 by rpki-client