Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
File:                     ef392e95-5697-4675-a401-25d090055bed.roa (raw, json)
Hash identifier:          /0Qn2IvS8KuobxFdKHMEIcT9J7ItGpVcKTD4or/Is/Y=
Subject key identifier:   10:FA:5E:93:BF:B9:F2:16:A1:71:B2:80:6A:25:50:30:53:C5:55:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       311B40DE2A2F64D071C3404E82E1F8EFDEB5AE1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa
Signing time:             Wed 02 Jul 2025 00:31:49 +0000
ROA not before:           Wed 02 Jul 2025 00:31:49 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1b:40:de:2a:2f:64:d0:71:c3:40:4e:82:e1:f8:ef:de:b5:ae:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:31:49 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=f9b845a63219ce792b99eecb03b4ce2e90bea06e9f5f1f858ea4e8a79b53b5dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:ec:52:0a:d6:11:38:5b:f9:4f:45:ba:ed:
                    50:d3:b7:4d:a7:31:fe:82:5b:64:3c:44:97:ea:c3:
                    9e:1c:2d:7c:b2:f3:ee:50:91:06:9e:19:ed:63:de:
                    10:f5:b2:67:7a:64:e2:2a:4a:8c:7e:8c:dc:0a:31:
                    60:23:d9:a4:ea:8c:4f:80:e0:48:42:dc:33:d1:6e:
                    8f:69:a2:01:78:59:ac:56:2b:f8:c6:f3:3f:8d:83:
                    3f:6a:40:34:fd:85:f6:f5:bb:5f:87:40:ba:68:bc:
                    fb:d9:1e:40:0b:40:8c:59:3a:bd:b5:71:22:63:ad:
                    d8:e5:f2:a0:b6:5b:09:6f:da:42:f5:2d:90:d8:47:
                    d1:57:d7:c3:8e:ea:b8:f1:8a:35:c7:2a:a4:44:3f:
                    d9:8d:1a:e3:00:e2:1d:cc:2b:fb:fa:4c:7a:8a:1e:
                    37:71:7e:5d:d4:bd:52:f5:6d:fe:6f:54:41:5c:ca:
                    2c:ec:ab:d1:ea:3f:84:50:9a:20:74:70:15:58:b0:
                    91:1e:17:7e:2e:86:39:65:20:64:8a:b5:f1:3d:1b:
                    73:b8:f6:60:ce:80:e1:8d:91:74:d8:41:b3:d1:90:
                    34:08:d5:e1:50:1a:67:4a:26:8b:ad:05:ef:d7:9a:
                    d7:99:cd:5b:b7:14:06:b2:66:77:1a:cd:f7:ed:d8:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:5E:93:BF:B9:F2:16:A1:71:B2:80:6A:25:50:30:53:C5:55:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef392e95-5697-4675-a401-25d090055bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:e1:8d:c3:cf:23:27:f6:2d:ec:0c:5e:ad:e1:92:37:b9:
         82:34:9c:04:fb:9d:23:7c:f9:c6:e1:df:1f:c1:62:a5:72:a1:
         4c:5b:5e:51:11:23:a2:33:96:25:b0:84:f4:5b:18:1c:80:79:
         f7:a1:1d:d5:e0:ea:50:e4:11:30:77:68:6b:ce:fc:c3:93:f0:
         20:fa:a9:42:ab:1f:18:8a:8d:8d:43:3c:81:47:7a:21:d5:36:
         a7:31:0b:8b:50:87:ec:e1:6c:e7:1b:d1:f9:d6:62:ff:88:3e:
         b1:4c:37:b7:eb:e3:2d:ac:90:72:7e:3f:1c:71:4c:cd:dc:fd:
         45:58:9a:76:6a:4c:0e:f4:68:84:4f:3a:c2:35:52:ec:82:a5:
         cc:e6:d4:93:32:8e:40:80:16:9b:f0:05:80:63:99:30:e6:f0:
         ea:82:ce:b8:cb:a4:0e:f5:56:c2:4d:0c:5d:87:b8:93:c1:5c:
         12:7e:d3:8d:bc:0a:2d:2b:c2:b8:de:78:71:76:af:6c:09:34:
         69:b1:9f:ae:f7:e4:22:0c:51:bf:86:47:68:23:88:b5:ff:09:
         e3:3a:c3:75:0b:2f:a3:df:e3:a8:f2:2b:0c:01:48:a1:3b:90:
         3f:c9:3a:e4:30:e7:bd:6c:79:90:1b:74:88:1c:93:41:59:f7:
         c1:7f:64:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMRtA3iovZNBxw0BOguH47961rh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMTQ5WhcNMjUwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOWI4NDVhNjMyMTljZTc5MmI5OWVlY2IwM2I0Y2UyZTkw
YmVhMDZlOWY1ZjFmODU4ZWE0ZThhNzliNTNiNWRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuZuxSCtYROFv5T0W67VDTt02nMf6CW2Q8RJfqw54cLXyy
8+5QkQaeGe1j3hD1smd6ZOIqSox+jNwKMWAj2aTqjE+A4EhC3DPRbo9pogF4WaxW
K/jG8z+Ngz9qQDT9hfb1u1+HQLpovPvZHkALQIxZOr21cSJjrdjl8qC2Wwlv2kL1
LZDYR9FX18OO6rjxijXHKqREP9mNGuMA4h3MK/v6THqKHjdxfl3UvVL1bf5vVEFc
yizsq9HqP4RQmiB0cBVYsJEeF34uhjllIGSKtfE9G3O49mDOgOGNkXTYQbPRkDQI
1eFQGmdKJoutBe/XmteZzVu3FAayZncazfft2P3VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEPpek7+58hahcbKAaiVQMFPFVRcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmMzkyZTk1LTU2OTctNDY3NS1hNDAxLTI1ZDA5MDA1NWJlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPYV9AwDQYJKoZIhvcNAQELBQADggEBAI624Y3DzyMn9i3sDF6t4ZI3uYI0
nAT7nSN8+cbh3x/BYqVyoUxbXlERI6IzliWwhPRbGByAefehHdXg6lDkETB3aGvO
/MOT8CD6qUKrHxiKjY1DPIFHeiHVNqcxC4tQh+zhbOcb0fnWYv+IPrFMN7fr4y2s
kHJ+PxxxTM3c/UVYmnZqTA70aIRPOsI1UuyCpczm1JMyjkCAFpvwBYBjmTDm8OqC
zrjLpA71VsJNDF2HuJPBXBJ+0428Ci0rwrjeeHF2r2wJNGmxn6735CIMUb+GR2gj
iLX/CeM6w3ULL6Pf46jyKwwBSKE7kD/JOuQw571seZAbdIgck0FZ98F/ZEs=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:38 2025 by rpki-client