Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa
File:                     e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa (raw, json)
Hash identifier:          N+lS1OdEpSYFnaQT0BV8scTsqKOSvNoDDvznFxJ3lfc=
Subject key identifier:   B1:15:11:2B:A5:8B:6E:77:58:59:D6:32:92:E9:2F:AC:CB:0E:E0:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78821ECB987C7486F633C4F525E3B7C168AB7131
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa
Signing time:             Fri 29 Aug 2025 15:40:18 +0000
ROA not before:           Fri 29 Aug 2025 15:40:18 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:82:1e:cb:98:7c:74:86:f6:33:c4:f5:25:e3:b7:c1:68:ab:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 15:40:18 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=e7e556a2e5b96abde3371cc6d5dbfcbed228ab96e902d1175a8b1594e0a694c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:98:b2:99:72:5c:f1:40:41:fc:7c:6d:21:
                    de:3a:76:e9:73:dd:3e:d2:52:43:3e:53:7f:a2:1b:
                    24:51:0a:ce:77:ad:0b:01:ec:09:18:6b:f6:c3:6f:
                    82:dd:7a:4f:25:1f:41:3c:6c:cc:f1:e4:e7:1d:3a:
                    03:f9:0a:03:a2:4c:2b:e9:5d:04:13:da:93:fd:c4:
                    b5:7c:5a:04:fc:78:e8:2d:17:ef:49:18:68:f3:da:
                    2f:07:e7:e0:e8:69:e1:c3:29:e5:aa:0e:b4:eb:80:
                    39:cd:db:47:41:0b:ac:6a:17:f3:1e:d8:f3:1b:38:
                    d5:5f:7c:b4:f3:77:e1:47:6f:6d:25:25:8f:ce:60:
                    ed:54:87:6a:21:e3:d5:5f:a0:60:a5:6f:83:4e:35:
                    eb:59:62:5d:8e:6a:23:79:55:a9:98:ca:3b:7c:bd:
                    6a:3a:88:eb:1c:d1:2a:8a:81:72:f2:89:96:c0:44:
                    4e:e3:67:b2:b2:bd:94:9c:71:a7:e2:27:ad:a9:1d:
                    91:5a:80:9e:69:09:c0:77:ef:b0:43:a0:78:07:8a:
                    5a:5a:b0:2b:c0:99:4f:7b:bc:ec:43:c1:b9:d9:dc:
                    ca:07:f3:d9:1c:60:64:bd:f2:1e:86:60:a4:df:6a:
                    b4:b6:fc:48:a1:9b:b3:9c:01:86:bc:de:92:ab:61:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:15:11:2B:A5:8B:6E:77:58:59:D6:32:92:E9:2F:AC:CB:0E:E0:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bc2db2-830f-4ee0-b40f-d00b9daa13a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         9c:cf:7c:fc:07:03:0c:f5:ab:45:f7:86:93:d1:9f:56:c3:3d:
         84:7c:e1:df:be:c2:15:42:c7:e1:c3:d3:98:74:2a:e2:67:02:
         09:43:2e:8b:63:b0:3e:9f:e2:9f:4e:93:15:1e:58:bb:46:23:
         60:ea:19:1a:a6:04:58:67:b6:b7:5c:9f:9c:d4:43:24:0f:66:
         90:c9:68:db:00:f7:2f:f3:12:72:ee:46:ee:70:52:4f:14:d2:
         18:52:44:f8:57:49:5e:01:6c:b8:03:66:5a:f8:47:7c:a3:4b:
         bf:46:8d:13:42:c3:02:ce:1c:1d:fb:50:af:15:c5:43:2d:36:
         2b:24:03:09:5c:88:dc:60:38:a2:98:5c:60:18:0a:61:33:83:
         2c:13:c0:26:d5:a9:64:82:0e:0c:e4:d4:45:78:f9:ac:4a:11:
         82:82:82:78:2d:cb:f0:ba:18:f2:48:51:0d:a6:fc:c5:d7:68:
         98:ae:a6:9d:f1:74:35:af:2f:01:cd:07:31:f7:4a:b2:f1:f3:
         e6:8c:65:c5:e1:0c:7a:98:b3:c0:72:17:8b:b2:82:7c:f6:16:
         1b:fa:4c:b2:43:e2:19:d5:93:3b:78:8c:c0:36:e8:22:a0:3f:
         20:2c:c5:63:c8:0e:a3:c1:ee:94:cc:26:27:7f:be:72:1a:90:
         c9:f2:1e:01
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeIIey5h8dIb2M8T1JeO3wWircTEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTU0MDE4WhcNMjUxMDAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlN2U1NTZhMmU1Yjk2YWJkZTMzNzFjYzZkNWRiZmNiZWQy
MjhhYjk2ZTkwMmQxMTc1YThiMTU5NGUwYTY5NGM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJzJiymXJc8UBB/HxtId46dulz3T7SUkM+U3+iGyRRCs53
rQsB7AkYa/bDb4Ldek8lH0E8bMzx5OcdOgP5CgOiTCvpXQQT2pP9xLV8WgT8eOgt
F+9JGGjz2i8H5+DoaeHDKeWqDrTrgDnN20dBC6xqF/Me2PMbONVffLTzd+FHb20l
JY/OYO1Uh2oh49VfoGClb4NONetZYl2OaiN5VamYyjt8vWo6iOsc0SqKgXLyiZbA
RE7jZ7KyvZSccafiJ62pHZFagJ5pCcB377BDoHgHilpasCvAmU97vOxDwbnZ3MoH
89kcYGS98h6GYKTfarS2/Eihm7OcAYa83pKrYafrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUsRURK6WLbndYWdYykukvrMsO4JAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4YmMyZGIyLTgzMGYtNGVlMC1iNDBmLWQwMGI5ZGFhMTNhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8WBDANBgkqhkiG9w0BAQsFAAOCAQEAnM98/AcDDPWrRfeGk9GfVsM9
hHzh377CFULH4cPTmHQq4mcCCUMui2OwPp/in06TFR5Yu0YjYOoZGqYEWGe2t1yf
nNRDJA9mkMlo2wD3L/MScu5G7nBSTxTSGFJE+FdJXgFsuANmWvhHfKNLv0aNE0LD
As4cHftQrxXFQy02KyQDCVyI3GA4ophcYBgKYTODLBPAJtWpZIIODOTURXj5rEoR
goKCeC3L8LoY8khRDab8xddomK6mnfF0Na8vAc0HMfdKsvHz5oxlxeEMepizwHIX
i7KCfPYWG/pMskPiGdWTO3iMwDboIqA/ICzFY8gOo8HulMwmJ3++chqQyfIeAQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:27 2025 by rpki-client