Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa
File:                     91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa (raw, json)
Hash identifier:          qzM0U6Nbdr7zrPMn7bCGNuHpPTNtXASY2sFXeBrHZe4=
Subject key identifier:   A0:08:4F:66:0F:41:C3:1A:54:D2:C2:97:87:CE:8C:B6:CF:7E:64:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75952D1966439748FDAF3FD393909BC1C90E46B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa
Signing time:             Sat 19 Jul 2025 00:00:33 +0000
ROA not before:           Sat 19 Jul 2025 00:00:33 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.65.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:95:2d:19:66:43:97:48:fd:af:3f:d3:93:90:9b:c1:c9:0e:46:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:00:33 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=607d0932daf7b8476ebbc91aedafbe1077fffd44654471f0e0251a75ca0bfc93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:9c:18:e3:f7:1e:51:40:42:dc:8a:7c:c0:
                    96:a3:a9:0e:37:08:ad:92:3f:5e:01:3d:9b:52:96:
                    cc:c4:c8:2d:20:07:e1:7b:0a:d7:53:51:ed:08:db:
                    ad:2a:77:c1:7d:a6:47:89:c7:37:46:4d:f1:e3:76:
                    99:ac:46:28:10:ed:0e:e8:6c:cf:ed:6a:99:c8:43:
                    29:f4:42:1c:3d:75:ac:24:49:ad:2e:5c:5e:59:15:
                    0d:e9:56:40:50:18:91:ca:20:ef:1d:29:31:75:94:
                    31:c3:55:9b:47:88:61:41:75:a6:52:b4:a6:71:c8:
                    7d:8b:72:7a:2c:0b:e5:86:0d:85:bf:ba:a7:6d:10:
                    dd:6d:46:68:9b:70:2b:76:fa:2c:f5:56:cb:91:cd:
                    2b:ea:a6:c1:8f:f3:6c:08:f4:c6:73:61:ff:b3:32:
                    3e:62:22:b1:1b:21:fd:88:32:9d:cc:8a:b7:15:ca:
                    af:45:17:18:fc:68:53:6a:2a:06:b8:6f:36:35:31:
                    64:71:75:7a:0b:97:65:4e:9f:d8:22:c7:af:38:5f:
                    55:92:5e:97:f7:34:9c:84:94:f5:ac:ea:9e:87:ea:
                    0b:c4:27:2c:b8:6b:36:52:df:36:b9:cd:8f:49:c3:
                    5c:b0:cd:1d:a5:3b:4e:42:4b:58:6e:fd:b8:29:0c:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:4F:66:0F:41:C3:1A:54:D2:C2:97:87:CE:8C:B6:CF:7E:64:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91760b1f-d1bf-4e34-9cae-8fe5ec98cdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:e2:05:5a:03:8b:43:7b:29:0f:d9:bb:37:14:5b:43:7a:
         70:c5:4b:65:03:cf:d1:40:b1:3b:96:56:6e:4a:fd:a3:c8:1d:
         5a:89:e9:a6:80:c8:70:f1:3f:fa:31:c6:f9:c4:b8:7c:98:9d:
         53:a5:db:9d:96:cf:80:4a:a4:43:86:a1:06:a7:8c:21:47:c5:
         27:aa:73:67:af:f6:4b:98:7a:5a:18:17:ec:53:3f:c5:b7:79:
         cb:a7:83:50:cd:16:63:48:37:63:11:10:11:90:14:2a:75:fb:
         32:a3:ec:01:f6:64:07:89:a2:cd:e9:6e:44:40:2c:55:05:bf:
         79:9c:e5:8f:8f:a9:14:b2:9a:c4:45:da:e6:d9:80:e1:4d:f7:
         f1:6f:0b:1e:8b:4e:db:67:e5:c8:c9:26:8d:05:fe:5b:67:09:
         30:9a:f4:e4:0c:60:4a:1e:6e:bc:5f:9b:4c:0a:02:f2:ca:0f:
         28:36:cd:f4:f3:6b:5b:05:fb:2d:ab:0a:6a:ab:3c:90:97:31:
         73:20:3a:91:aa:52:ad:43:4f:90:63:87:92:3f:5e:88:fb:50:
         ec:a8:1a:25:f8:38:78:58:4d:41:33:70:52:fd:1d:10:cd:2a:
         3f:3e:d0:ae:e4:f6:ee:3c:8c:4b:28:bc:d6:07:89:3a:9a:b1:
         af:34:7b:c5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdZUtGWZDl0j9rz/Tk5CbwckORrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMDMzWhcNMjUwODIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDdkMDkzMmRhZjdiODQ3NmViYmM5MWFlZGFmYmUxMDc3
ZmZmZDQ0NjU0NDcxZjBlMDI1MWE3NWNhMGJmYzkzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCk5wY4/ceUUBC3Ip8wJajqQ43CK2SP14BPZtSlszEyC0g
B+F7CtdTUe0I260qd8F9pkeJxzdGTfHjdpmsRigQ7Q7obM/tapnIQyn0Qhw9dawk
Sa0uXF5ZFQ3pVkBQGJHKIO8dKTF1lDHDVZtHiGFBdaZStKZxyH2LcnosC+WGDYW/
uqdtEN1tRmibcCt2+iz1VsuRzSvqpsGP82wI9MZzYf+zMj5iIrEbIf2IMp3MircV
yq9FFxj8aFNqKga4bzY1MWRxdXoLl2VOn9gix684X1WSXpf3NJyElPWs6p6H6gvE
Jyy4azZS3za5zY9Jw1ywzR2lO05CS1hu/bgpDGezAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUoAhPZg9BwxpU0sKXh86Mts9+ZN8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxNzYwYjFmLWQxYmYtNGUzNC05Y2FlLThmZTVlYzk4Y2RkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQQTANBgkqhkiG9w0BAQsFAAOCAQEAeMbiBVoDi0N7KQ/ZuzcUW0N6cMVL
ZQPP0UCxO5ZWbkr9o8gdWonppoDIcPE/+jHG+cS4fJidU6XbnZbPgEqkQ4ahBqeM
IUfFJ6pzZ6/2S5h6WhgX7FM/xbd5y6eDUM0WY0g3YxEQEZAUKnX7MqPsAfZkB4mi
zeluREAsVQW/eZzlj4+pFLKaxEXa5tmA4U338W8LHotO22flyMkmjQX+W2cJMJr0
5AxgSh5uvF+bTAoC8soPKDbN9PNrWwX7LasKaqs8kJcxcyA6kapSrUNPkGOHkj9e
iPtQ7KgaJfg4eFhNQTNwUv0dEM0qPz7QruT27jyMSyi81geJOpqxrzR7xQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:31:15 2025 by rpki-client