Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a728816-ace9-4a07-86ea-7ebc247ed176.roa
File:                     7a728816-ace9-4a07-86ea-7ebc247ed176.roa (raw, json)
Hash identifier:          jWjx7gR+Jdzq388D99x7SylWKMLkXpPR3bDpdJA+JQI=
Subject key identifier:   A6:9C:08:E7:70:6A:87:7E:46:8C:C1:E0:CD:9A:02:EF:8F:74:EC:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FB2373D66400F8F6D10034157A30EEBEE1591E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a728816-ace9-4a07-86ea-7ebc247ed176.roa
Signing time:             Sat 26 Jul 2025 00:10:28 +0000
ROA not before:           Sat 26 Jul 2025 00:10:28 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b2:37:3d:66:40:0f:8f:6d:10:03:41:57:a3:0e:eb:ee:15:91:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 26 00:10:28 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=acce3a03d567a7c5476f2abeb555600bdf3b4e6289c255c9ef71a72b06f5aa20, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:b2:08:59:52:2c:06:84:60:47:b3:af:3c:
                    59:35:69:8a:76:a2:bf:25:89:25:f6:64:98:5d:cc:
                    05:83:9f:d6:c9:af:b8:11:74:37:b6:22:2c:9f:a2:
                    25:2b:69:ec:41:06:a1:47:85:04:02:13:38:49:47:
                    4f:f3:21:1a:1d:2f:d1:f1:ee:d4:dd:2c:f7:f4:c1:
                    ab:2b:e1:4d:c7:7b:c8:b8:9a:f5:30:5d:3a:57:39:
                    a4:d6:78:00:c8:0d:3c:cc:f3:2f:29:62:ee:ce:3c:
                    eb:1d:09:6f:c4:0f:21:08:4c:e9:34:e3:28:f5:96:
                    7a:01:d5:07:d3:ac:e2:0a:90:26:c3:9d:36:ca:29:
                    0a:92:fa:43:7d:d7:e9:e9:1a:e2:24:80:d5:9c:42:
                    f7:2f:2d:64:fb:ad:0a:20:3d:e4:c0:72:83:61:f2:
                    9b:f3:42:5a:3a:1f:e6:61:ac:e7:35:3d:2c:12:f7:
                    a7:eb:19:7f:d8:52:c6:f4:03:6b:86:69:c0:02:d3:
                    66:3c:61:80:3a:72:16:01:fe:80:ee:22:0d:7f:2b:
                    51:e0:45:00:be:7c:26:d3:ca:bc:22:e1:52:cd:5e:
                    88:40:f0:bd:a3:44:25:af:13:cb:92:cb:69:9c:2d:
                    91:b5:13:21:9c:61:bd:09:52:b8:c2:64:6e:1e:94:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9C:08:E7:70:6A:87:7E:46:8C:C1:E0:CD:9A:02:EF:8F:74:EC:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a728816-ace9-4a07-86ea-7ebc247ed176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:59:72:f0:4a:d2:83:bf:fd:1d:34:49:be:71:3e:78:0e:
         dd:75:53:cb:ce:fc:12:10:b3:b1:e4:c0:f9:af:48:ac:35:c4:
         23:eb:3b:cb:e1:0d:9a:4b:40:fe:4d:ec:82:97:5a:5a:75:31:
         34:b1:2d:97:88:3e:c1:f1:7e:b3:f6:a2:5a:b4:2a:86:5a:0e:
         2f:24:2b:b9:e6:37:a3:85:40:7a:07:54:79:3a:c2:8e:9a:7f:
         6b:a4:73:a2:64:2b:e9:89:9b:64:6a:18:a6:6f:a8:b8:e9:c4:
         a7:ce:39:17:81:51:7c:50:e0:91:71:b1:5b:4d:5c:9f:02:ca:
         51:ad:cc:63:5a:68:20:b5:6d:61:f7:ea:cb:3c:6c:d9:7d:3c:
         f5:e2:7f:a1:35:32:a6:7a:2a:72:24:06:95:0f:95:42:72:16:
         5d:03:52:d5:c3:16:e3:39:8c:e5:be:9d:c1:95:e6:c1:1a:83:
         e4:3d:61:70:3f:01:e9:2d:12:60:06:95:69:3a:a6:c1:a1:eb:
         fb:59:17:78:74:77:12:c9:11:e2:61:d4:8d:0f:8c:e4:8a:29:
         51:f9:71:2e:6d:f8:4d:cb:ec:8c:87:42:90:af:05:2a:f8:50:
         79:9b:53:09:63:39:22:f5:3e:78:2f:1d:62:85:26:3f:3b:69:
         94:8c:40:0e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUP7I3PWZAD49tEANBV6MO6+4VkeEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI2MDAxMDI4WhcNMjUwODMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhY2NlM2EwM2Q1NjdhN2M1NDc2ZjJhYmViNTU1NjAwYmRm
M2I0ZTYyODljMjU1YzllZjcxYTcyYjA2ZjVhYTIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvw7IIWVIsBoRgR7OvPFk1aYp2or8liSX2ZJhdzAWDn9bJ
r7gRdDe2IiyfoiUraexBBqFHhQQCEzhJR0/zIRodL9Hx7tTdLPf0wasr4U3He8i4
mvUwXTpXOaTWeADIDTzM8y8pYu7OPOsdCW/EDyEITOk04yj1lnoB1QfTrOIKkCbD
nTbKKQqS+kN91+npGuIkgNWcQvcvLWT7rQogPeTAcoNh8pvzQlo6H+ZhrOc1PSwS
96frGX/YUsb0A2uGacAC02Y8YYA6chYB/oDuIg1/K1HgRQC+fCbTyrwi4VLNXohA
8L2jRCWvE8uSy2mcLZG1EyGcYb0JUrjCZG4elI2FAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUppwI53Bqh35GjMHgzZoC74907NowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhNzI4ODE2LWFjZTktNGEwNy04NmVhLTdlYmMyNDdlZDE3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJODDANBgkqhkiG9w0BAQsFAAOCAQEAPxlZcvBK0oO//R00Sb5xPngO3XVT
y878EhCzseTA+a9IrDXEI+s7y+ENmktA/k3sgpdaWnUxNLEtl4g+wfF+s/aiWrQq
hloOLyQrueY3o4VAegdUeTrCjpp/a6RzomQr6YmbZGoYpm+ouOnEp845F4FRfFDg
kXGxW01cnwLKUa3MY1poILVtYffqyzxs2X089eJ/oTUypnoqciQGlQ+VQnIWXQNS
1cMW4zmM5b6dwZXmwRqD5D1hcD8B6S0SYAaVaTqmwaHr+1kXeHR3EskR4mHUjQ+M
5IopUflxLm34TcvsjIdCkK8FKvhQeZtTCWM5IvU+eC8dYoUmPztplIxADg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:55:32 2025 by rpki-client