Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
File:                     7f83be28-929e-466e-8557-0586ca761224.roa (raw, json)
Hash identifier:          +5AZxr+aTWQb9knLZtRaXSeJoFFD0+V78GDG1EvLv64=
Subject key identifier:   AB:88:95:AE:B7:93:EB:94:51:BC:6C:B8:11:10:76:A3:98:10:45:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EAE5B12A9376663D5B6E68824AAA48F1C1F8A04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
Signing time:             Wed 09 Jul 2025 00:42:17 +0000
ROA not before:           Wed 09 Jul 2025 00:42:17 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.176.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ae:5b:12:a9:37:66:63:d5:b6:e6:88:24:aa:a4:8f:1c:1f:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  9 00:42:17 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=f65f5783f2f05d162d86b64bb231d432b07e2a44a16401381268c22c8fe87079, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:10:9f:cf:e9:24:e6:8c:4d:b5:bb:a0:ab:
                    6e:09:d4:26:44:b2:35:44:19:d6:df:5b:74:a2:d4:
                    1e:95:45:ef:25:85:72:74:2e:ef:8a:fc:3d:ff:96:
                    30:67:c0:31:e7:fb:d2:90:f1:13:00:3b:a8:da:ac:
                    91:d7:cb:09:b3:ec:d6:46:45:ff:70:67:e8:9d:e9:
                    f4:f8:d0:67:79:0b:31:59:5c:bc:7f:87:b8:06:d2:
                    01:04:8d:e6:6b:02:60:e3:d8:0a:28:77:62:76:38:
                    a5:67:6a:30:c6:b9:96:0b:49:69:71:db:c8:2e:02:
                    06:80:54:95:26:49:36:13:2a:72:f6:6c:d1:a6:e6:
                    73:f8:af:ca:cd:d9:80:19:fa:26:38:c4:26:7f:35:
                    2a:e9:d0:81:5c:ef:08:c5:54:c2:ab:03:8a:87:c1:
                    f8:ea:03:55:4d:e6:c3:76:01:9f:86:91:bd:ca:e0:
                    fe:a6:e7:85:4f:85:e4:98:19:b5:63:30:6f:a7:a0:
                    e1:0e:3e:b6:b6:99:80:93:b8:d3:5b:ce:54:da:80:
                    96:66:a6:3c:26:b6:eb:66:9a:cf:3c:b6:f8:1b:52:
                    f8:a8:8f:dc:1d:52:1b:f3:c2:0e:8b:0c:be:70:03:
                    ed:0d:88:a3:72:5f:d0:e6:53:50:8e:25:8e:c9:30:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:88:95:AE:B7:93:EB:94:51:BC:6C:B8:11:10:76:A3:98:10:45:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         84:7a:fa:a0:31:38:ee:4d:2b:97:e4:4c:6f:06:a4:01:21:3a:
         a2:43:a8:c5:47:ba:c4:1d:79:9d:89:a2:66:b2:e1:50:65:08:
         17:88:d3:6a:3b:b8:8d:82:8c:32:5d:2d:8a:29:51:34:0f:6e:
         f0:7e:61:eb:f7:b6:b7:79:c4:96:27:ca:9a:d4:60:3a:62:44:
         a2:c5:f8:95:a4:7c:a5:22:96:62:06:53:f2:30:77:8b:50:58:
         bb:04:89:ca:a9:43:45:89:4c:9a:3b:0c:f4:ef:3b:39:cf:73:
         4a:6b:2a:d8:1e:d7:9d:f8:15:83:46:31:ac:38:55:d5:51:40:
         dd:8b:da:e7:c8:65:3f:ae:78:0e:e6:11:62:e9:73:57:a2:f7:
         16:4f:ca:b4:30:64:65:8d:73:83:04:2d:57:c2:e5:f8:34:86:
         72:d3:55:be:38:b8:b1:02:d8:d0:cb:49:62:f0:67:02:e3:40:
         e8:45:ef:15:68:a6:43:5c:d0:47:2b:f8:8e:b0:43:56:48:4b:
         e7:f8:ea:9f:83:2f:cb:df:0a:78:d3:57:58:70:fc:c9:5f:d4:
         c8:1d:71:5a:4b:79:e2:fe:49:e1:81:e8:04:b7:92:38:ee:ab:
         83:6c:8b:c1:0d:ae:3a:be:35:c2:16:28:a2:26:52:e8:c0:78:
         23:c8:8f:09
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXq5bEqk3ZmPVtuaIJKqkjxwfigQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA0MjE3WhcNMjUwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjVmNTc4M2YyZjA1ZDE2MmQ4NmI2NGJiMjMxZDQzMmIw
N2UyYTQ0YTE2NDAxMzgxMjY4YzIyYzhmZTg3MDc5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeFhCfz+kk5oxNtbugq24J1CZEsjVEGdbfW3Si1B6VRe8l
hXJ0Lu+K/D3/ljBnwDHn+9KQ8RMAO6jarJHXywmz7NZGRf9wZ+id6fT40Gd5CzFZ
XLx/h7gG0gEEjeZrAmDj2Aood2J2OKVnajDGuZYLSWlx28guAgaAVJUmSTYTKnL2
bNGm5nP4r8rN2YAZ+iY4xCZ/NSrp0IFc7wjFVMKrA4qHwfjqA1VN5sN2AZ+Gkb3K
4P6m54VPheSYGbVjMG+noOEOPra2mYCTuNNbzlTagJZmpjwmtutmms88tvgbUvio
j9wdUhvzwg6LDL5wA+0NiKNyX9DmU1COJY7JMB97AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUq4iVrreT65RRvGy4ERB2o5gQRcIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmODNiZTI4LTkyOWUtNDY2ZS04NTU3LTA1ODZjYTc2MTIyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEosDANBgkqhkiG9w0BAQsFAAOCAQEAhHr6oDE47k0rl+RMbwakASE6okOo
xUe6xB15nYmiZrLhUGUIF4jTaju4jYKMMl0tiilRNA9u8H5h6/e2t3nElifKmtRg
OmJEosX4laR8pSKWYgZT8jB3i1BYuwSJyqlDRYlMmjsM9O87Oc9zSmsq2B7XnfgV
g0YxrDhV1VFA3Yva58hlP654DuYRYulzV6L3Fk/KtDBkZY1zgwQtV8Ll+DSGctNV
vji4sQLY0MtJYvBnAuNA6EXvFWimQ1zQRyv4jrBDVkhL5/jqn4Mvy98KeNNXWHD8
yV/UyB1xWkt54v5J4YHoBLeSOO6rg2yLwQ2uOr41whYooiZS6MB4I8iPCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:32 2025 by rpki-client