Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa
File:                     062eaeae-ddf7-4703-bf27-2c878b44bc68.roa (raw, json)
Hash identifier:          XaZQ0rtxH2zzf1S/Jrx2W+L/Z3K3rGuKAPCQKfqAeFQ=
Subject key identifier:   93:DA:E0:92:2B:60:1E:83:C4:A8:98:82:8D:BD:6D:10:54:6C:4B:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E7B0625AE7BB452A930F4A038EC2D9B9A63EC0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa
Signing time:             Sat 19 Jul 2025 00:50:24 +0000
ROA not before:           Sat 19 Jul 2025 00:50:24 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.85.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:06:25:ae:7b:b4:52:a9:30:f4:a0:38:ec:2d:9b:9a:63:ec:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:50:24 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=877f6f29ae39c10d292325b541a2dcb039686820aee323e69ccdd329661c4489, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:80:7b:13:62:c7:b0:8b:64:75:33:c2:4a:
                    30:a2:ca:0a:66:c1:66:0d:42:90:f7:12:a5:a6:e7:
                    82:2c:3f:73:98:d8:44:e5:30:3e:e3:47:9a:f9:91:
                    45:f1:93:74:d4:8f:20:83:1e:21:bd:60:91:ff:63:
                    2d:31:8f:1f:b5:f8:c7:a0:bc:49:6d:29:5f:03:a0:
                    6f:0b:09:c2:21:0b:c3:7f:18:78:02:96:03:d4:b9:
                    95:bb:cb:e5:9c:ee:e5:c8:6d:02:f5:ac:98:8f:33:
                    01:f9:95:da:50:8a:6b:ac:a7:8d:6b:2a:2e:50:11:
                    ee:97:3e:19:86:2a:96:b9:a4:bd:9c:65:3d:ef:9c:
                    c6:67:9b:f1:c8:b7:f6:e5:39:1a:24:2a:17:07:be:
                    ac:d1:cd:4a:39:2b:59:af:07:c6:5b:c4:0e:19:ee:
                    1c:63:56:e4:a3:a7:f0:15:cb:01:3e:e6:f7:9e:c8:
                    01:78:46:32:c5:96:b9:1f:2e:9f:9d:8a:a7:1f:fa:
                    c4:63:9b:f3:cb:4c:af:c7:a0:f3:d3:09:3c:ef:63:
                    ea:13:c4:8c:1c:e1:c5:23:8f:19:7a:74:63:5f:fe:
                    72:b7:e9:33:76:d7:2a:ca:25:77:ef:20:f5:6c:20:
                    0b:00:e6:72:e6:8e:b2:ef:2c:58:2e:b0:32:e2:a3:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:E0:92:2B:60:1E:83:C4:A8:98:82:8D:BD:6D:10:54:6C:4B:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.85.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:06:70:27:6a:76:23:a3:28:0d:8b:b6:14:e9:40:9b:93:47:
         2b:21:cf:3d:96:c2:c4:d0:35:e5:77:22:50:47:5e:f3:e6:6a:
         34:bd:6b:c7:4d:f3:09:ce:98:b2:1e:e4:9a:d9:2d:73:04:b8:
         28:55:c1:da:aa:df:b0:ab:2d:52:8f:b5:4f:9b:96:47:fc:dd:
         fa:77:6a:0f:a5:13:b9:c7:a6:14:8b:d9:78:66:31:61:94:12:
         a7:c4:62:ac:c5:c8:25:b7:3a:7c:ef:c1:31:f0:5b:e8:a4:2d:
         8b:9b:e8:8b:36:aa:f1:ad:23:b4:78:c4:8b:28:fe:7d:d5:59:
         42:24:12:e1:3a:ea:06:a1:70:4e:f7:d1:4d:43:0a:b1:24:26:
         45:0e:d0:88:75:5c:5e:f3:4f:1d:57:c5:4e:6c:b1:e1:78:42:
         78:da:4d:53:ab:bc:fe:c0:bd:59:f4:cb:83:bf:e0:5d:74:50:
         09:95:f3:40:d6:c5:e1:e0:88:a8:09:ec:03:e5:fd:17:8b:9d:
         32:9f:b6:27:92:c9:7b:72:21:b7:57:3d:73:57:ee:bd:07:37:
         d1:76:b9:d7:87:70:e2:d9:6f:48:9e:fa:32:04:09:d0:93:f7:
         a0:3f:3c:0b:37:50:e5:d8:73:af:28:08:6c:e8:3b:4c:58:c7:
         0f:da:51:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPnsGJa57tFKpMPSgOOwtm5pj7AowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA1MDI0WhcNMjUwODIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NzdmNmYyOWFlMzljMTBkMjkyMzI1YjU0MWEyZGNiMDM5
Njg2ODIwYWVlMzIzZTY5Y2NkZDMyOTY2MWM0NDg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnwoB7E2LHsItkdTPCSjCiygpmwWYNQpD3EqWm54IsP3OY
2ETlMD7jR5r5kUXxk3TUjyCDHiG9YJH/Yy0xjx+1+MegvEltKV8DoG8LCcIhC8N/
GHgClgPUuZW7y+Wc7uXIbQL1rJiPMwH5ldpQimusp41rKi5QEe6XPhmGKpa5pL2c
ZT3vnMZnm/HIt/blORokKhcHvqzRzUo5K1mvB8ZbxA4Z7hxjVuSjp/AVywE+5vee
yAF4RjLFlrkfLp+diqcf+sRjm/PLTK/HoPPTCTzvY+oTxIwc4cUjjxl6dGNf/nK3
6TN21yrKJXfvIPVsIAsA5nLmjrLvLFgusDLio0WJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk9rgkitgHoPEqJiCjb1tEFRsSyswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2MmVhZWFlLWRkZjctNDcwMy1iZjI3LTJjODc4YjQ0YmM2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdjVYAwDQYJKoZIhvcNAQELBQADggEBAC0GcCdqdiOjKA2LthTpQJuTRysh
zz2WwsTQNeV3IlBHXvPmajS9a8dN8wnOmLIe5JrZLXMEuChVwdqq37CrLVKPtU+b
lkf83fp3ag+lE7nHphSL2XhmMWGUEqfEYqzFyCW3OnzvwTHwW+ikLYub6Is2qvGt
I7R4xIso/n3VWUIkEuE66gahcE730U1DCrEkJkUO0Ih1XF7zTx1XxU5sseF4Qnja
TVOrvP7AvVn0y4O/4F10UAmV80DWxeHgiKgJ7APl/ReLnTKftieSyXtyIbdXPXNX
7r0HN9F2udeHcOLZb0ie+jIECdCT96A/PAs3UOXYc68oCGzoO0xYxw/aUVc=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:38 2025 by rpki-client