Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa
File:                     e1715461-5154-4e19-b317-f31a7158d920.roa (raw, json)
Hash identifier:          Q6ILcA+EnV44fI2YulAf5n0RSkUfL66Wk9PbK2ZvnZA=
Subject key identifier:   66:D1:BB:9E:82:56:20:E3:DF:4C:53:0A:3B:02:47:67:88:E5:50:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DE10807EBB7EA9C3DDD8008835CF60A663E326A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa
Signing time:             Tue 22 Jul 2025 00:41:04 +0000
ROA not before:           Tue 22 Jul 2025 00:41:04 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:08:07:eb:b7:ea:9c:3d:dd:80:08:83:5c:f6:0a:66:3e:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:41:04 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=4ad2d275d513ef6e87a9897905730256b09b1a63eea7c6d5f9f33dcc4acb1d0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:c3:36:8b:4f:d6:55:f8:db:ae:6f:17:d6:
                    48:3a:59:1f:f3:80:5d:97:3e:bb:b3:6c:6c:a7:df:
                    eb:cf:b9:a7:ab:e6:25:5a:6a:66:9c:0a:44:bf:c5:
                    eb:f5:0d:dc:10:8e:18:ca:ae:f1:bb:ed:d3:a7:6f:
                    9a:9c:30:dc:ed:40:17:a6:17:22:c2:06:87:40:c8:
                    1b:f8:7a:de:24:e9:be:c5:bb:af:1d:33:6c:ff:e3:
                    37:4d:61:b3:9b:32:34:d1:0b:2e:44:c0:d2:68:93:
                    5c:00:08:38:3e:33:56:25:fa:f4:54:82:f7:fe:9f:
                    bb:97:86:bf:b9:b1:6e:09:17:c7:44:db:1f:b1:69:
                    aa:2c:3d:34:c4:49:9b:df:fb:df:5f:3d:c4:f4:4c:
                    9b:33:28:ed:45:65:5c:c5:c1:14:43:70:12:62:0d:
                    37:d7:f8:68:ed:4b:37:34:ff:dc:e5:55:2d:51:c1:
                    f3:47:ce:74:03:ac:cd:aa:ac:43:73:ac:b4:2e:c3:
                    9b:09:62:16:a3:76:b0:a5:a6:0b:19:ee:a7:1b:92:
                    ae:9f:62:52:43:8d:ed:42:fe:c6:e0:b2:46:40:2a:
                    51:4d:47:0f:e6:f2:e6:90:d0:5a:62:d2:7f:cf:16:
                    f5:39:8f:0a:ae:b8:9c:00:5f:f1:6c:bc:16:d1:3a:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D1:BB:9E:82:56:20:E3:DF:4C:53:0A:3B:02:47:67:88:E5:50:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:19:39:7d:65:4a:38:a2:6f:0b:53:e8:0f:2f:98:1b:cb:
         d5:e4:f8:23:f4:7e:0a:0c:5c:db:41:5a:cd:ad:f5:44:42:aa:
         28:6f:96:aa:c6:34:3b:25:7a:fa:20:96:49:bf:09:84:b4:06:
         ee:fe:50:93:82:44:49:54:d9:5f:0e:cd:e4:85:03:67:d4:d3:
         ea:14:e7:65:28:0f:b4:d6:35:1d:0c:70:13:4f:3c:ae:6c:d8:
         51:52:db:1b:ff:ac:e5:37:a2:cd:c7:a2:39:e9:03:90:ea:56:
         38:32:1b:ac:8d:c7:7e:0f:23:d8:23:8a:bc:2a:b1:0d:dd:a7:
         ce:62:7c:b4:8b:c4:e4:5c:44:13:06:d6:3a:66:7d:13:78:c0:
         f6:07:d3:da:20:da:e4:d8:0c:15:4f:61:1f:e8:c8:c6:ee:8e:
         9c:30:4e:1e:4f:cf:73:59:bc:78:18:87:d4:2e:cb:79:7f:a7:
         2c:e4:b3:c6:0e:1d:2d:6e:8e:51:e5:25:ee:f1:7d:b6:a8:da:
         9b:a0:94:c0:0d:ed:cb:e3:34:07:d0:0a:a1:1c:fc:bc:28:2b:
         70:d0:ac:04:91:26:44:12:44:ab:14:56:a1:27:6b:b4:66:48:
         65:39:28:b7:36:13:e1:a9:19:c1:50:88:34:7b:99:66:5b:2a:
         24:fb:eb:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbeEIB+u36pw93YAIg1z2CmY+MmowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDA0MTA0WhcNMjUwODI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YWQyZDI3NWQ1MTNlZjZlODdhOTg5NzkwNTczMDI1NmIw
OWIxYTYzZWVhN2M2ZDVmOWYzM2RjYzRhY2IxZDBkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxPsM2i0/WVfjbrm8X1kg6WR/zgF2XPruzbGyn3+vPuaer
5iVaamacCkS/xev1DdwQjhjKrvG77dOnb5qcMNztQBemFyLCBodAyBv4et4k6b7F
u68dM2z/4zdNYbObMjTRCy5EwNJok1wACDg+M1Yl+vRUgvf+n7uXhr+5sW4JF8dE
2x+xaaosPTTESZvf+99fPcT0TJszKO1FZVzFwRRDcBJiDTfX+GjtSzc0/9zlVS1R
wfNHznQDrM2qrENzrLQuw5sJYhajdrClpgsZ7qcbkq6fYlJDje1C/sbgskZAKlFN
Rw/m8uaQ0Fpi0n/PFvU5jwquuJwAX/FsvBbROlIzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZtG7noJWIOPfTFMKOwJHZ4jlUN4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxNzE1NDYxLTUxNTQtNGUxOS1iMzE3LWYzMWE3MTU4ZDkyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUFrgAwDQYJKoZIhvcNAQELBQADggEBADzMGTl9ZUo4om8LU+gPL5gby9Xk
+CP0fgoMXNtBWs2t9URCqihvlqrGNDslevoglkm/CYS0Bu7+UJOCRElU2V8OzeSF
A2fU0+oU52UoD7TWNR0McBNPPK5s2FFS2xv/rOU3os3HojnpA5DqVjgyG6yNx34P
I9gjirwqsQ3dp85ifLSLxORcRBMG1jpmfRN4wPYH09og2uTYDBVPYR/oyMbujpww
Th5Pz3NZvHgYh9Quy3l/pyzks8YOHS1ujlHlJe7xfbao2puglMAN7cvjNAfQCqEc
/LwoK3DQrASRJkQSRKsUVqEna7RmSGU5KLc2E+GpGcFQiDR7mWZbKiT76zU=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:14:11 2025 by rpki-client