Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa
File:                     5526fc34-9bea-47e2-b707-0173d61f32b5.roa (raw, json)
Hash identifier:          ftP3w9WRYArJ3HjRjjVYH29gN7XkbfExVcswL/Roya8=
Subject key identifier:   94:E9:FF:18:B8:D6:15:3E:D2:7F:D7:62:E9:13:FA:22:0E:67:5B:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1106BE7087E954413C51F77090A13D63B7137AAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa
Signing time:             Wed 02 Jul 2025 00:41:53 +0000
ROA not before:           Wed 02 Jul 2025 00:41:53 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.235.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:06:be:70:87:e9:54:41:3c:51:f7:70:90:a1:3d:63:b7:13:7a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:41:53 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=2e80e6b3a0dc37056a7644f154fa9b0677efac6f5dee8db950f802d83ae4b46b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:b6:61:26:49:10:28:4d:2b:24:37:9e:e9:
                    ca:5d:e4:94:ce:45:9d:72:29:45:9a:71:a6:28:bc:
                    e1:e1:27:18:5f:7e:7f:7a:f0:d8:9e:6c:4a:de:24:
                    e3:f1:90:a3:d1:bc:4b:98:8b:7e:3f:bc:4d:30:d7:
                    9b:89:95:42:13:24:d6:4d:cb:f3:e9:2d:5d:d8:1d:
                    a4:7a:b1:a0:7c:b7:7d:53:40:fb:94:d4:f7:4e:2b:
                    5e:fe:a0:fc:54:17:34:a0:93:95:d5:93:5f:d2:ea:
                    ff:3a:d8:fc:fb:32:41:90:f0:f7:b6:e2:63:94:44:
                    95:56:30:09:66:4c:a2:74:7c:ac:b2:dd:b3:c0:19:
                    14:09:bd:da:27:f1:46:e6:2b:af:a6:51:7c:41:40:
                    51:b9:3e:74:08:f9:15:c7:7e:4a:1a:7f:39:e6:4c:
                    4e:a0:dd:63:96:09:03:35:65:f4:95:65:6b:9d:93:
                    94:71:8c:d1:87:30:2d:bf:87:70:a1:72:32:ee:72:
                    0c:55:41:15:ca:39:99:2d:d1:8f:c4:2c:ca:45:8a:
                    a4:4f:a9:3d:d1:1d:44:af:5b:ef:ec:d0:32:1d:03:
                    06:20:f6:c8:83:6a:9a:57:49:e3:a5:50:c5:9e:68:
                    6d:d5:ad:40:75:bb:b7:db:9d:fb:3e:4e:5c:5d:49:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:FF:18:B8:D6:15:3E:D2:7F:D7:62:E9:13:FA:22:0E:67:5B:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:0c:45:ba:70:aa:e3:42:65:86:97:dc:0b:52:b9:d6:68:
         9a:c2:63:de:85:ac:c7:a2:e5:f5:77:d1:3d:61:cd:60:5d:f8:
         20:7d:ad:e2:32:f1:98:1e:ef:15:83:45:e6:12:6c:1b:a6:a3:
         fb:33:83:01:97:03:9e:23:ec:fc:e5:52:8f:00:08:1f:5e:23:
         22:9c:34:c2:7c:ca:ff:72:c8:9d:d6:6b:47:fc:e3:84:b6:59:
         11:2e:53:7e:0a:72:c4:13:92:4b:eb:bb:11:b0:3c:c8:d3:ca:
         b0:bc:f0:f1:60:46:8c:51:f7:6d:51:a4:9e:a6:41:b4:b6:a9:
         bd:a6:4a:de:ce:08:09:25:98:62:b0:ab:70:78:56:e2:9a:2f:
         10:22:d7:ef:ee:46:da:be:7c:5b:82:0a:52:92:1f:da:e4:53:
         ac:de:97:0b:a5:99:39:20:53:d3:99:93:1b:fa:60:30:a5:09:
         9e:e2:fc:c9:23:3b:2a:76:ec:17:bb:1b:c8:e1:0d:fd:a0:c0:
         41:be:87:d0:99:6b:04:bf:0d:42:fe:c6:ca:da:29:f4:ce:e1:
         16:3d:6c:ec:6d:5c:c3:48:68:e3:ee:68:cb:f1:02:66:c1:1c:
         62:a5:a1:d5:81:52:26:7d:2d:fe:ea:30:c4:b8:c1:a4:85:b5:
         3f:9a:76:c9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEQa+cIfpVEE8UfdwkKE9Y7cTeq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MTUzWhcNMjUwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTgwZTZiM2EwZGMzNzA1NmE3NjQ0ZjE1NGZhOWIwNjc3
ZWZhYzZmNWRlZThkYjk1MGY4MDJkODNhZTRiNDZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcAbZhJkkQKE0rJDee6cpd5JTORZ1yKUWacaYovOHhJxhf
fn968NiebEreJOPxkKPRvEuYi34/vE0w15uJlUITJNZNy/PpLV3YHaR6saB8t31T
QPuU1PdOK17+oPxUFzSgk5XVk1/S6v862Pz7MkGQ8Pe24mOURJVWMAlmTKJ0fKyy
3bPAGRQJvdon8UbmK6+mUXxBQFG5PnQI+RXHfkoafznmTE6g3WOWCQM1ZfSVZWud
k5RxjNGHMC2/h3ChcjLucgxVQRXKOZkt0Y/ELMpFiqRPqT3RHUSvW+/s0DIdAwYg
9siDappXSeOlUMWeaG3VrUB1u7fbnfs+TlxdSe9tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlOn/GLjWFT7Sf9di6RP6Ig5nW7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU1MjZmYzM0LTliZWEtNDdlMi1iNzA3LTAxNzNkNjFmMzJiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAu6wIwDQYJKoZIhvcNAQELBQADggEBAEjqDEW6cKrjQmWGl9wLUrnWaJrC
Y96FrMei5fV30T1hzWBd+CB9reIy8Zge7xWDReYSbBumo/szgwGXA54j7PzlUo8A
CB9eIyKcNMJ8yv9yyJ3Wa0f844S2WREuU34KcsQTkkvruxGwPMjTyrC88PFgRoxR
921RpJ6mQbS2qb2mSt7OCAklmGKwq3B4VuKaLxAi1+/uRtq+fFuCClKSH9rkU6ze
lwulmTkgU9OZkxv6YDClCZ7i/MkjOyp27Be7G8jhDf2gwEG+h9CZawS/DUL+xsra
KfTO4RY9bOxtXMNIaOPuaMvxAmbBHGKlodWBUiZ9Lf7qMMS4waSFtT+adsk=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:15 2025 by rpki-client