Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa
File:                     2bd59750-5d84-4c08-a088-8ea8711b48d8.roa (raw, json)
Hash identifier:          Erg2Cim3d8aVwvxU5yQp9XZK6N6Tbl5mJ1fXhqGOyEM=
Subject key identifier:   EA:E7:BF:0D:3D:DB:61:BA:12:EF:81:2D:1D:66:7B:70:D0:7C:B1:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60C3C88569A24C0A8FFA5C6BC300163577AC158F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa
Signing time:             Fri 25 Jul 2025 00:40:22 +0000
ROA not before:           Fri 25 Jul 2025 00:40:22 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:c8:85:69:a2:4c:0a:8f:fa:5c:6b:c3:00:16:35:77:ac:15:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:40:22 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=fe2bfa8829f523ed2707879b631f82c7328926b7076bbeb45ec42c6ee0a74819, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:05:f5:3d:04:b0:a0:28:1d:87:bf:6b:9e:
                    3b:f7:08:74:a4:35:69:22:cb:00:32:9b:e3:bf:91:
                    26:e8:ca:77:eb:ee:42:ef:a2:a8:86:f5:5d:62:5f:
                    7a:d9:c1:f4:3e:b3:6f:82:38:dd:68:4f:1a:62:bc:
                    0f:26:b2:ab:ca:e0:13:49:6c:6c:db:48:4e:bd:0e:
                    ff:d8:3b:ff:8f:eb:9a:32:16:fa:ca:c5:b2:91:30:
                    b9:6d:d3:a2:d2:ad:db:59:dc:75:e5:28:7d:1b:60:
                    99:4b:61:6f:12:d4:d1:29:37:9c:a8:2c:3a:b5:59:
                    3f:7b:ae:46:14:ac:82:f5:3a:f9:46:a6:bf:f7:1d:
                    6f:42:59:1f:50:8e:83:1b:91:be:b5:81:d0:25:37:
                    4e:02:52:e1:ae:41:c1:7a:d0:49:1a:89:c9:be:41:
                    99:36:66:a5:3f:41:ce:63:e6:95:11:dc:b4:8b:e6:
                    02:a9:eb:04:ac:8f:8a:fc:8f:08:8f:35:86:58:d4:
                    8c:e4:fb:e4:5a:11:cd:7a:8d:2e:83:4c:1b:4d:32:
                    12:a9:58:fd:19:39:da:3a:87:0a:92:01:ea:78:3d:
                    4d:ee:fe:54:27:14:b8:cc:65:97:5e:71:f8:17:5b:
                    e0:51:be:6b:69:cb:f9:04:c5:a7:c9:c1:a2:09:2f:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:BF:0D:3D:DB:61:BA:12:EF:81:2D:1D:66:7B:70:D0:7C:B1:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:50:90:27:d9:b6:bb:02:f1:f3:e1:30:8f:9c:34:fc:81:
         94:09:24:ee:a7:e1:b4:45:ac:a0:30:a3:f1:01:c3:11:c9:cd:
         93:3b:78:81:1f:bc:74:2e:33:b2:b0:f5:56:2b:b3:a6:e0:db:
         a5:61:7d:5f:5f:f2:f2:2e:d1:b4:e0:e5:ff:ed:0b:e2:9d:d1:
         5d:d7:da:8f:4a:74:1f:3d:31:63:a1:9b:bb:53:4f:fd:c8:52:
         c1:f9:3e:a8:e4:5b:7a:15:d8:11:e5:90:72:e6:c0:1e:56:0f:
         61:eb:10:51:15:2c:0d:08:92:27:28:ab:1a:42:35:84:96:7d:
         70:e3:3d:33:96:d4:7d:97:e6:06:d6:67:e3:50:eb:96:24:74:
         84:00:7f:96:ed:95:6d:89:07:8a:a3:f3:50:71:59:de:97:9b:
         d9:d6:f5:9f:12:ec:b4:4d:a5:22:b5:a9:7f:6e:ed:e6:9d:35:
         ef:c5:19:f0:fb:28:f4:da:25:35:a2:78:85:6f:6d:b8:32:6f:
         09:f7:60:46:1d:90:6c:dd:68:62:87:d8:2f:53:29:04:6b:5c:
         44:36:ce:38:a3:fe:e8:63:02:21:ec:7d:21:d9:ba:b6:b0:55:
         d5:73:65:7d:4d:f4:32:3a:d4:7c:ac:a4:9c:be:53:9a:94:d4:
         b1:24:3f:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYMPIhWmiTAqP+lxrwwAWNXesFY8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDA0MDIyWhcNMjUwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZTJiZmE4ODI5ZjUyM2VkMjcwNzg3OWI2MzFmODJjNzMy
ODkyNmI3MDc2YmJlYjQ1ZWM0MmM2ZWUwYTc0ODE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu7QX1PQSwoCgdh79rnjv3CHSkNWkiywAym+O/kSboynfr
7kLvoqiG9V1iX3rZwfQ+s2+CON1oTxpivA8msqvK4BNJbGzbSE69Dv/YO/+P65oy
FvrKxbKRMLlt06LSrdtZ3HXlKH0bYJlLYW8S1NEpN5yoLDq1WT97rkYUrIL1OvlG
pr/3HW9CWR9QjoMbkb61gdAlN04CUuGuQcF60Ekaicm+QZk2ZqU/Qc5j5pUR3LSL
5gKp6wSsj4r8jwiPNYZY1Izk++RaEc16jS6DTBtNMhKpWP0ZOdo6hwqSAep4PU3u
/lQnFLjMZZdecfgXW+BRvmtpy/kExafJwaIJLzI5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6ue/DT3bYboS74EtHWZ7cNB8saAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJiZDU5NzUwLTVkODQtNGMwOC1hMDg4LThlYTg3MTFiNDhkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjl6QwDQYJKoZIhvcNAQELBQADggEBAERLUJAn2ba7AvHz4TCPnDT8gZQJ
JO6n4bRFrKAwo/EBwxHJzZM7eIEfvHQuM7Kw9VYrs6bg26VhfV9f8vIu0bTg5f/t
C+Kd0V3X2o9KdB89MWOhm7tTT/3IUsH5PqjkW3oV2BHlkHLmwB5WD2HrEFEVLA0I
kicoqxpCNYSWfXDjPTOW1H2X5gbWZ+NQ65YkdIQAf5btlW2JB4qj81BxWd6Xm9nW
9Z8S7LRNpSK1qX9u7eadNe/FGfD7KPTaJTWieIVvbbgybwn3YEYdkGzdaGKH2C9T
KQRrXEQ2zjij/uhjAiHsfSHZurawVdVzZX1N9DI61HyspJy+U5qU1LEkP/Q=
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:30:33 2025 by rpki-client