Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa
File:                     ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa (raw, json)
Hash identifier:          jpbql9h+Xa1h4JTWeoq8CVjYgWlr240A1tw/qH62pEo=
Subject key identifier:   EB:3B:16:3D:A3:EC:1F:BC:9F:2E:33:30:AA:75:AB:77:3F:49:C3:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5717267ED4D8F2FDDA3802857834026E73A172B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa
Signing time:             Tue 26 Aug 2025 16:20:19 +0000
ROA not before:           Tue 26 Aug 2025 16:20:19 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8150::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:26:7e:d4:d8:f2:fd:da:38:02:85:78:34:02:6e:73:a1:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 16:20:19 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=d6cc2c9a5e65021bcc988ad41fabab86cbbc383aa645003fd04b39fa492e4502, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b5:04:9c:1a:bf:f3:4a:42:57:bb:43:99:8f:
                    98:0d:4c:93:63:6a:ce:c5:a5:55:74:d4:db:40:28:
                    cd:dd:03:ae:d4:4a:c4:fe:11:f2:22:7e:c3:70:02:
                    10:e0:72:57:95:8a:15:a1:9f:80:e7:4e:37:00:15:
                    a2:3f:ad:c4:7d:a5:95:dd:26:b3:f1:4c:56:ac:30:
                    ef:53:61:74:69:c5:cb:5d:26:b1:48:ae:10:8d:14:
                    22:d8:04:ad:18:ff:10:45:85:95:f6:3c:0a:87:c0:
                    3a:8c:3a:b3:f8:3e:58:e1:a1:6f:94:01:84:59:3b:
                    51:05:a8:0f:bb:22:4b:3f:bb:49:e2:a4:a2:de:30:
                    e7:f4:ca:c2:a5:e8:9a:74:e2:41:96:5e:e6:51:28:
                    00:07:1c:08:6a:c2:aa:e3:99:3e:d2:55:3e:0d:ff:
                    68:e5:f4:fc:4e:f0:a5:62:52:b9:34:c7:29:75:ea:
                    78:29:7f:e8:f0:6a:57:52:28:99:4b:c3:3d:85:92:
                    b0:02:d7:54:31:a1:8b:41:0e:92:b3:9e:48:cd:d8:
                    b1:62:64:80:14:ce:e9:98:ef:b1:0e:37:49:f6:d9:
                    b5:01:9f:53:1b:48:0f:5e:92:2d:d3:e7:3e:4e:81:
                    2f:32:6c:e8:e9:d5:5b:3b:07:f0:bc:6e:65:c3:9c:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:16:3D:A3:EC:1F:BC:9F:2E:33:30:AA:75:AB:77:3F:49:C3:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8150::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:35:a5:5d:2b:1e:79:00:82:5e:eb:40:d3:43:0a:44:a4:
         87:7a:1c:c4:45:4d:18:b8:b1:b6:97:e0:ad:81:1d:7e:49:bc:
         72:16:f7:94:94:ee:09:d9:9f:5d:01:55:9c:e9:2e:9e:23:78:
         9e:4d:ed:5f:a6:e2:ba:7a:22:0e:e1:42:b7:2f:d1:15:8d:90:
         7e:9d:58:16:86:9e:71:8b:b9:dc:e1:18:fe:6d:4f:e4:b2:f3:
         ef:35:6c:dd:e7:61:b3:2d:1d:0f:1c:e6:e6:4f:4e:13:3c:43:
         0a:84:9f:25:98:29:e0:67:17:51:99:0c:45:0f:81:da:c6:73:
         b4:52:90:99:5d:01:24:c9:d0:03:d2:3b:1b:1f:50:d3:a5:73:
         c3:b2:f2:20:98:63:39:1b:37:fa:6d:9b:b6:3d:96:d1:aa:e7:
         fc:4d:93:55:98:74:bc:2c:00:43:9c:36:c7:db:df:87:cc:ef:
         32:5e:83:c8:e4:f7:78:dc:0d:7d:84:81:e5:b3:0a:ba:aa:39:
         c9:9d:8d:95:d9:39:aa:22:a9:86:03:7e:48:e3:e6:fe:1d:c0:
         88:fc:d1:9f:04:d4:1a:fe:ea:a9:b5:c7:6d:90:a6:1f:dc:48:
         a3:f7:32:88:61:ec:6b:6d:37:4d:27:de:55:73:72:17:17:cc:
         04:c9:66:6d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVxcmftTY8v3aOAKFeDQCbnOhcrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYyMDE5WhcNMjUwOTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNmNjMmM5YTVlNjUwMjFiY2M5ODhhZDQxZmFiYWI4NmNi
YmMzODNhYTY0NTAwM2ZkMDRiMzlmYTQ5MmU0NTAyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvtQScGr/zSkJXu0OZj5gNTJNjas7FpVV01NtAKM3dA67U
SsT+EfIifsNwAhDgcleVihWhn4DnTjcAFaI/rcR9pZXdJrPxTFasMO9TYXRpxctd
JrFIrhCNFCLYBK0Y/xBFhZX2PAqHwDqMOrP4PljhoW+UAYRZO1EFqA+7Iks/u0ni
pKLeMOf0ysKl6Jp04kGWXuZRKAAHHAhqwqrjmT7SVT4N/2jl9PxO8KViUrk0xyl1
6ngpf+jwaldSKJlLwz2FkrAC11QxoYtBDpKznkjN2LFiZIAUzumY77EON0n22bUB
n1MbSA9eki3T5z5OgS8ybOjp1Vs7B/C8bmXDnH15AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6zsWPaPsH7yfLjMwqnWrdz9Jw7wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZmYzZlOGVlLTMzZGMtNGVjMi05MDI0LTJkNWQxNWM4MjZiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//gVAwDQYJKoZIhvcNAQELBQADggEBAHimNaVdKx55AIJe60DTQwpE
pId6HMRFTRi4sbaX4K2BHX5JvHIW95SU7gnZn10BVZzpLp4jeJ5N7V+m4rp6Ig7h
Qrcv0RWNkH6dWBaGnnGLudzhGP5tT+Sy8+81bN3nYbMtHQ8c5uZPThM8QwqEnyWY
KeBnF1GZDEUPgdrGc7RSkJldASTJ0APSOxsfUNOlc8Oy8iCYYzkbN/ptm7Y9ltGq
5/xNk1WYdLwsAEOcNsfb34fM7zJeg8jk93jcDX2EgeWzCrqqOcmdjZXZOaoiqYYD
fkjj5v4dwIj80Z8E1Br+6qm1x22Qph/cSKP3Mohh7GttN00n3lVzchcXzATJZm0=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:44 2025 by rpki-client