Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa
File:                     c15493d7-7585-4637-a264-dc1a788dad6d.roa (raw, json)
Hash identifier:          6UAcU1t6OYSToxJyMaS9f686zgPB2lEFqevKnlVdzHo=
Subject key identifier:   38:89:15:0A:98:AA:FA:0F:F2:5E:89:B0:76:C1:B5:1F:F0:65:BB:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FEFFD6000E7EFFC0A9BB9C7F9792A06FEE2FA5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa
Signing time:             Sat 19 Jul 2025 00:10:15 +0000
ROA not before:           Sat 19 Jul 2025 00:10:15 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.73.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ef:fd:60:00:e7:ef:fc:0a:9b:b9:c7:f9:79:2a:06:fe:e2:fa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:10:15 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=56c172725afe2e488fea8cf794e244b41aaacee694c66f14eddc9cf2b9859fcd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:66:c1:b7:92:e7:e8:35:69:c4:53:94:06:
                    38:c2:53:02:8a:70:b2:53:cd:ca:4d:38:99:77:22:
                    36:f2:17:a6:58:4f:32:25:b5:79:2c:a1:9a:4d:aa:
                    2d:1d:94:1b:5e:d2:1b:a2:8d:e0:42:bd:be:4d:63:
                    0b:41:cd:c2:60:17:53:26:7d:d4:b6:23:84:83:89:
                    53:68:85:c6:8a:70:b5:d7:2f:3c:fc:39:32:d8:95:
                    0b:a7:86:73:d5:bb:c7:57:3d:50:60:17:d3:17:e0:
                    33:35:64:b8:2e:bd:47:30:c2:7e:1c:27:68:6c:2e:
                    48:e4:f5:c3:cc:94:ab:94:26:71:29:95:a2:b4:53:
                    14:72:d5:7f:b6:90:30:64:d1:fb:b0:b1:6c:f2:60:
                    83:d4:1f:2d:46:c2:67:98:33:17:c8:ea:66:27:8d:
                    f2:96:45:0d:d8:e0:6b:ee:17:ab:67:c2:8c:91:15:
                    7f:71:1d:66:bb:ef:5d:7e:bf:00:43:e6:74:96:0e:
                    d0:e1:fb:e1:f7:ef:c2:c9:26:84:3b:e6:c9:8f:ad:
                    b0:d7:ba:85:e2:8a:9d:9e:f4:65:de:3b:35:65:7d:
                    bc:c0:9f:98:7c:85:18:5f:db:59:7f:57:21:4b:73:
                    1b:db:5a:8d:2e:fd:27:77:29:17:95:74:2a:48:e8:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:89:15:0A:98:AA:FA:0F:F2:5E:89:B0:76:C1:B5:1F:F0:65:BB:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c15493d7-7585-4637-a264-dc1a788dad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:fa:a5:8b:e8:f5:78:6e:78:d2:c2:3c:98:46:52:59:f3:
         8b:b1:7f:64:d3:7d:f2:f3:f7:e6:46:45:6e:d1:a1:14:75:99:
         06:ca:55:a0:5c:ba:c4:47:01:bc:6d:7b:67:49:98:be:39:e0:
         84:4b:bb:09:7b:97:a5:5b:a7:5f:40:88:66:9a:ec:96:f9:96:
         03:46:ac:b3:28:03:ba:6c:a1:ec:b3:e8:c0:df:81:c5:91:77:
         8a:46:5d:b7:8b:35:1f:56:58:9d:dd:95:1a:a0:65:4f:93:ab:
         16:60:23:4b:3c:d2:48:8c:88:81:b3:29:ee:03:e5:83:c8:3a:
         74:ab:f5:8c:98:00:1d:a6:0f:ad:dc:2d:b7:16:ca:4b:2d:6f:
         e2:b2:0e:bc:5e:68:da:dd:5a:01:e4:eb:26:5e:cd:e4:dd:43:
         6a:f7:cf:9a:43:4c:a3:bc:39:b8:80:2e:cb:31:07:06:4f:b1:
         32:ac:0a:03:87:9b:96:e0:d3:26:63:ed:23:31:6b:f2:c0:e5:
         47:d0:c1:fe:ea:38:ee:68:c3:64:ae:2f:e0:8d:57:b5:be:29:
         19:8f:06:3a:03:55:98:81:7c:15:c5:bb:b2:a7:1c:a6:d9:5f:
         d5:74:fd:ec:53:46:24:e5:e8:12:92:80:2c:28:2a:27:d3:00:
         53:d3:48:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL+/9YADn7/wKm7nH+XkqBv7i+l8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAxMDE1WhcNMjUwODIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NmMxNzI3MjVhZmUyZTQ4OGZlYThjZjc5NGUyNDRiNDFh
YWFjZWU2OTRjNjZmMTRlZGRjOWNmMmI5ODU5ZmNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDjmbBt5Ln6DVpxFOUBjjCUwKKcLJTzcpNOJl3IjbyF6ZY
TzIltXksoZpNqi0dlBte0huijeBCvb5NYwtBzcJgF1MmfdS2I4SDiVNohcaKcLXX
Lzz8OTLYlQunhnPVu8dXPVBgF9MX4DM1ZLguvUcwwn4cJ2hsLkjk9cPMlKuUJnEp
laK0UxRy1X+2kDBk0fuwsWzyYIPUHy1GwmeYMxfI6mYnjfKWRQ3Y4GvuF6tnwoyR
FX9xHWa7711+vwBD5nSWDtDh++H378LJJoQ75smPrbDXuoXiip2e9GXeOzVlfbzA
n5h8hRhf21l/VyFLcxvbWo0u/Sd3KReVdCpI6PPxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOIkVCpiq+g/yXomwdsG1H/Blu+IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxNTQ5M2Q3LTc1ODUtNDYzNy1hMjY0LWRjMWE3ODhkYWQ2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbYSQAwDQYJKoZIhvcNAQELBQADggEBANKL+qWL6PV4bnjSwjyYRlJZ84ux
f2TTffLz9+ZGRW7RoRR1mQbKVaBcusRHAbxte2dJmL454IRLuwl7l6Vbp19AiGaa
7Jb5lgNGrLMoA7psoeyz6MDfgcWRd4pGXbeLNR9WWJ3dlRqgZU+TqxZgI0s80kiM
iIGzKe4D5YPIOnSr9YyYAB2mD63cLbcWykstb+KyDrxeaNrdWgHk6yZezeTdQ2r3
z5pDTKO8ObiALssxBwZPsTKsCgOHm5bg0yZj7SMxa/LA5UfQwf7qOO5ow2SuL+CN
V7W+KRmPBjoDVZiBfBXFu7KnHKbZX9V0/exTRiTl6BKSgCwoKifTAFPTSNg=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:32 2025 by rpki-client