Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa
File:                     d02200a5-babe-4deb-9116-f1e308942b64.roa (raw, json)
Hash identifier:          3vJqkZO3CCQCQDu4tMqwWGzQgSAKeH5TwyN5QsGn1/o=
Subject key identifier:   AA:7D:AC:D3:4A:E9:95:B8:34:CD:EF:7E:56:A3:DD:C5:D3:28:15:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       289B562099A8D0883DD7BDE6D76DD88796EDA12E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa
Signing time:             Mon 07 Jul 2025 16:01:15 +0000
ROA not before:           Mon 07 Jul 2025 16:01:15 +0000
ROA not after:            Mon 11 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:56:20:99:a8:d0:88:3d:d7:bd:e6:d7:6d:d8:87:96:ed:a1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  7 16:01:15 2025 GMT
            Not After : Aug 11 23:59:59 2025 GMT
        Subject: serialNumber=d2c08a4023341f9a84b83dce2a3fca63ca53ce8c6c165caf8a41fb03b01b29c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:13:b3:5f:bc:2f:c3:44:8a:cf:62:e8:16:
                    3d:0e:08:9f:f7:0b:10:7a:f0:31:29:1b:6b:b9:3a:
                    63:8b:88:50:18:f2:97:a3:7c:cb:5c:48:f0:eb:37:
                    fb:1f:50:64:92:05:29:24:ad:2d:7a:38:b0:9b:c4:
                    10:c2:65:5f:f7:c3:e6:a3:a5:82:ec:e6:58:25:8a:
                    4c:66:b6:79:65:8b:93:8d:21:68:99:24:a3:d6:29:
                    7b:db:c4:64:13:4f:5f:8d:43:ef:f1:03:91:5f:1a:
                    66:8d:5e:ae:de:1d:f9:11:df:07:f9:5e:25:3e:d5:
                    f1:48:94:23:d3:f0:45:24:31:b1:b3:91:e2:40:73:
                    73:c5:3a:da:cf:e7:16:e8:7d:01:86:2d:5a:f7:26:
                    7d:11:07:22:08:36:ea:c4:0e:f6:b7:8f:6d:b6:01:
                    3a:a4:c7:11:98:2e:1f:f3:e7:03:67:27:8a:a6:1b:
                    93:84:0c:41:fe:f9:8f:d7:d7:0c:30:c5:14:be:a3:
                    2a:e4:a2:5a:82:6a:f8:69:a7:b7:cd:52:da:e6:4f:
                    36:4f:d8:e9:5a:bf:1d:74:c8:98:93:9e:7f:fe:81:
                    86:31:ba:fc:ea:33:6c:a2:e3:46:5b:15:af:2c:5e:
                    ce:5f:98:a4:91:da:47:78:91:25:6a:4e:93:a9:d0:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:AC:D3:4A:E9:95:B8:34:CD:EF:7E:56:A3:DD:C5:D3:28:15:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d02200a5-babe-4deb-9116-f1e308942b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d8:35:48:fb:cd:a1:5e:c3:81:a9:19:a0:41:b2:1a:21:e4:39:
         59:3c:ec:67:c5:e6:2e:24:23:c0:8a:9b:a2:ea:53:2a:66:8b:
         ac:ce:5f:e2:3b:f2:7f:b1:b8:80:46:1e:fe:13:54:fb:03:6a:
         87:bf:ea:ac:35:53:51:57:45:94:fb:48:39:e4:fb:14:c7:d1:
         dc:cf:f7:d9:91:3a:e9:6e:2d:84:56:bc:39:a7:d9:73:40:b1:
         2f:0f:29:9c:b3:90:73:8e:68:15:84:5a:10:b1:2d:73:47:89:
         6e:a5:a4:76:c2:0d:6f:e3:ec:f1:4d:41:a0:e3:13:fb:97:31:
         52:c3:d0:1a:2f:b8:c6:bd:4e:99:b4:f9:c3:1e:22:eb:ec:b4:
         b9:7c:67:a2:48:b8:64:62:bb:cf:b3:08:13:4e:78:4b:a9:62:
         f7:fa:de:e5:20:43:4e:a5:c1:0e:9e:99:f8:df:f5:07:ed:9b:
         65:0f:7a:96:2d:ba:87:a3:ec:2d:b5:1e:62:6c:68:80:b7:b8:
         d0:31:96:48:06:9c:11:17:36:41:fc:d1:ef:db:bd:ef:2e:1a:
         57:12:2f:c2:7e:5e:a0:bb:e1:14:4d:64:9f:2a:94:32:3a:ce:
         e5:a8:de:fb:f5:67:ee:df:03:c1:45:01:3e:64:83:87:bb:1e:
         c2:a9:a5:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKJtWIJmo0Ig9173m123Yh5btoS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMTE1WhcNMjUwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMmMwOGE0MDIzMzQxZjlhODRiODNkY2UyYTNmY2E2M2Nh
NTNjZThjNmMxNjVjYWY4YTQxZmIwM2IwMWIyOWM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC06hOzX7wvw0SKz2LoFj0OCJ/3CxB68DEpG2u5OmOLiFAY
8pejfMtcSPDrN/sfUGSSBSkkrS16OLCbxBDCZV/3w+ajpYLs5lglikxmtnlli5ON
IWiZJKPWKXvbxGQTT1+NQ+/xA5FfGmaNXq7eHfkR3wf5XiU+1fFIlCPT8EUkMbGz
keJAc3PFOtrP5xbofQGGLVr3Jn0RByIINurEDva3j222ATqkxxGYLh/z5wNnJ4qm
G5OEDEH++Y/X1wwwxRS+oyrkolqCavhpp7fNUtrmTzZP2Olavx10yJiTnn/+gYYx
uvzqM2yi40ZbFa8sXs5fmKSR2kd4kSVqTpOp0BRVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqn2s00rplbg0ze9+VqPdxdMoFbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QwMjIwMGE1LWJhYmUtNGRlYi05MTE2LWYxZTMwODk0MmI2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBskgwDQYJKoZIhvcNAQELBQADggEBANg1SPvNoV7DgakZoEGyGiHkOVk8
7GfF5i4kI8CKm6LqUypmi6zOX+I78n+xuIBGHv4TVPsDaoe/6qw1U1FXRZT7SDnk
+xTH0dzP99mROuluLYRWvDmn2XNAsS8PKZyzkHOOaBWEWhCxLXNHiW6lpHbCDW/j
7PFNQaDjE/uXMVLD0BovuMa9Tpm0+cMeIuvstLl8Z6JIuGRiu8+zCBNOeEupYvf6
3uUgQ06lwQ6emfjf9Qftm2UPepYtuoej7C21HmJsaIC3uNAxlkgGnBEXNkH80e/b
ve8uGlcSL8J+XqC74RRNZJ8qlDI6zuWo3vv1Z+7fA8FFAT5kg4e7HsKppT0=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:14 2025 by rpki-client