Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa
File:                     adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa (raw, json)
Hash identifier:          mS1iGLbz788zeTD4p+/Nrg4Wm26ajK9z9ydB53BwObI=
Subject key identifier:   F8:E2:81:83:FF:AF:81:AF:DB:B5:D9:E4:0F:03:65:61:9B:A5:B2:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4DD3686A55DE99CC1B62C4A5D5F9323428BA13E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa
Signing time:             Wed 02 Jul 2025 00:31:41 +0000
ROA not before:           Wed 02 Jul 2025 00:31:41 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.230.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:68:6a:55:de:99:cc:1b:62:c4:a5:d5:f9:32:34:28:ba:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:31:41 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=20b326f09119ae38d927689867196346d9288c740d18d8ca3d9a605163418b83, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:7d:06:d6:75:60:71:54:8c:50:45:d1:74:
                    b8:c5:5b:e5:42:ec:95:12:94:48:5b:e1:81:84:3c:
                    a7:90:90:3c:7c:67:b0:f1:b9:c5:4a:b8:da:f7:74:
                    cd:74:9e:f2:78:0a:6d:57:f5:b9:b9:17:b5:61:14:
                    94:9f:ff:e0:6d:a4:bc:2c:d2:04:1c:a2:b8:28:2f:
                    19:ee:55:ca:9d:8e:65:50:6d:ae:b5:81:ee:ef:d4:
                    22:85:15:0b:75:df:50:d6:38:30:a6:89:70:31:88:
                    f0:68:d0:d1:63:83:76:34:4e:76:bb:be:78:e7:54:
                    be:19:a6:1c:b2:10:3d:a4:99:71:b4:3b:31:40:34:
                    32:52:06:45:dc:e9:72:68:01:4b:00:9a:81:db:9b:
                    d9:23:3d:2a:00:f4:72:13:c1:77:16:4c:6a:23:2f:
                    7e:d2:91:08:70:66:e7:1a:87:6a:f5:da:8f:d0:07:
                    58:cb:96:69:7e:a1:6e:09:30:a3:34:28:c0:0e:2f:
                    c0:36:1e:7c:e6:b4:12:13:42:76:6d:c3:cd:75:c9:
                    83:b1:79:5b:da:cf:67:bf:f1:3b:1e:30:44:a7:e0:
                    79:74:04:fc:08:29:3d:70:8d:20:8b:ba:bb:5d:a2:
                    59:ad:f1:df:10:36:df:46:62:4e:f7:f6:08:01:8c:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:81:83:FF:AF:81:AF:DB:B5:D9:E4:0F:03:65:61:9B:A5:B2:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5c:d6:d6:48:07:ba:0b:7b:c7:fb:07:35:bf:04:c2:df:d4:
         04:6f:68:ad:20:33:aa:4b:77:84:1d:9e:cf:c0:31:12:24:b6:
         67:38:69:f8:68:b7:30:ff:c9:9a:4d:ac:34:34:e6:c8:66:92:
         b2:ee:48:fd:10:b7:91:78:e7:cc:3c:e4:21:e9:f0:54:23:82:
         c3:31:16:f0:9c:b9:a5:25:ea:ee:f7:e9:3f:0e:bc:57:bd:d9:
         ac:5c:fe:32:a7:d8:a6:24:26:25:15:72:d7:ec:0d:f7:57:3a:
         3a:0a:c6:93:53:77:5e:31:11:19:21:ed:f7:b8:47:3b:b5:ad:
         aa:14:15:62:e8:6a:47:46:73:41:48:a2:e8:d4:2e:f3:5b:67:
         b5:fb:89:d9:b6:b1:c9:8c:a6:13:06:36:ea:09:0c:99:35:2b:
         91:44:16:0d:cb:bf:e9:61:49:63:87:81:3f:a0:bc:10:9c:1f:
         86:61:a7:b2:f1:9f:58:98:6b:c9:c0:9c:f5:47:ab:82:f5:60:
         58:7b:92:1f:3a:27:6e:a7:59:39:a9:52:c6:dc:06:0d:17:39:
         da:03:4c:0b:16:04:62:eb:b1:93:4a:a8:c7:e0:c1:69:51:96:
         b5:1e:0e:a5:8b:00:28:ba:29:13:84:63:17:a2:c1:bc:52:97:
         f3:7d:96:d9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTdNoalXemcwbYsSl1fkyNCi6E+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMTQxWhcNMjUwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMGIzMjZmMDkxMTlhZTM4ZDkyNzY4OTg2NzE5NjM0NmQ5
Mjg4Yzc0MGQxOGQ4Y2EzZDlhNjA1MTYzNDE4YjgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIVH0G1nVgcVSMUEXRdLjFW+VC7JUSlEhb4YGEPKeQkDx8
Z7DxucVKuNr3dM10nvJ4Cm1X9bm5F7VhFJSf/+BtpLws0gQcorgoLxnuVcqdjmVQ
ba61ge7v1CKFFQt131DWODCmiXAxiPBo0NFjg3Y0Tna7vnjnVL4ZphyyED2kmXG0
OzFANDJSBkXc6XJoAUsAmoHbm9kjPSoA9HITwXcWTGojL37SkQhwZucah2r12o/Q
B1jLlml+oW4JMKM0KMAOL8A2HnzmtBITQnZtw811yYOxeVvaz2e/8TseMESn4Hl0
BPwIKT1wjSCLurtdolmt8d8QNt9GYk739ggBjAHZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+OKBg/+vga/btdnkDwNlYZulsr4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkZWZjNWE1LTNlZjEtNDBkOS1hNWI5LTg1MTYwYTIzNjFkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADY5lcwDQYJKoZIhvcNAQELBQADggEBACRc1tZIB7oLe8f7BzW/BMLf1ARv
aK0gM6pLd4Qdns/AMRIktmc4afhotzD/yZpNrDQ05shmkrLuSP0Qt5F458w85CHp
8FQjgsMxFvCcuaUl6u736T8OvFe92axc/jKn2KYkJiUVctfsDfdXOjoKxpNTd14x
ERkh7fe4Rzu1raoUFWLoakdGc0FIoujULvNbZ7X7idm2scmMphMGNuoJDJk1K5FE
Fg3Lv+lhSWOHgT+gvBCcH4Zhp7Lxn1iYa8nAnPVHq4L1YFh7kh86J26nWTmpUsbc
Bg0XOdoDTAsWBGLrsZNKqMfgwWlRlrUeDqWLACi6KROEYxeiwbxSl/N9ltk=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:57 2025 by rpki-client