Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
File:                     fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa (raw, json)
Hash identifier:          0AB2jhrxLUQra2t3MUSjnxSwe4Nqm0FFeiKbJJIG32Q=
Subject key identifier:   09:64:E6:51:F4:25:22:C6:C7:00:59:8B:3C:A7:23:E2:2C:4A:3B:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B71695F213CBD58057AF224DD6D94C6E9193C04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa
Signing time:             Tue 08 Jul 2025 00:30:18 +0000
ROA not before:           Tue 08 Jul 2025 00:30:18 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.78.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:71:69:5f:21:3c:bd:58:05:7a:f2:24:dd:6d:94:c6:e9:19:3c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  8 00:30:18 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=ad7d5c460679007e0f6d298637d5db0db833135fdaec86a1e1451bd6b40e598a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:59:f6:52:bc:1a:a0:6b:fc:8b:f4:37:24:
                    fd:87:8c:97:35:6d:21:27:b1:74:d1:44:c7:58:99:
                    b9:44:cb:46:2a:90:bc:cb:31:12:77:47:c4:22:58:
                    14:49:5c:81:09:54:a8:9c:61:41:62:6f:02:d0:93:
                    55:ad:d7:be:87:a9:98:96:1a:3f:39:cc:10:21:d7:
                    60:84:71:4e:6d:11:27:f6:81:15:5c:6f:a2:62:d7:
                    a6:86:90:98:0b:08:00:d9:78:6f:dc:09:7a:df:19:
                    b0:c4:a9:c0:17:49:ff:f5:ec:f5:fb:de:9a:06:b8:
                    8e:30:85:d2:0e:87:1d:83:68:e8:28:f0:62:d1:2f:
                    3a:0a:e9:75:64:f5:46:43:1a:7f:d0:8e:9b:38:22:
                    87:25:c8:b1:88:ee:af:93:70:03:0e:c8:5d:7e:88:
                    e7:d1:cc:03:b3:76:f1:c2:9c:70:0c:f9:70:57:b7:
                    92:ca:dc:d3:a9:14:20:2f:74:15:d0:9c:71:a3:9d:
                    97:1c:3e:bd:36:b2:80:b0:b1:74:2a:21:38:0a:9c:
                    06:8d:8a:4d:77:49:ac:2f:7a:67:10:be:1c:5c:95:
                    41:9c:8b:fa:df:a6:5e:43:e6:e1:d2:29:5a:f7:6f:
                    91:64:c6:04:37:2a:7b:2f:04:cc:84:b8:af:7e:db:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:64:E6:51:F4:25:22:C6:C7:00:59:8B:3C:A7:23:E2:2C:4A:3B:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe061fe4-7f72-4eb7-8ef9-28f55bb762e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d0:a4:45:c2:bf:33:a7:a2:1d:81:bf:da:e6:db:64:b8:08:cb:
         f4:dc:ea:ff:96:0a:82:d2:8e:cc:cf:9a:24:b3:a3:37:91:eb:
         6d:f4:bd:05:e0:f2:54:e5:f6:d4:9d:62:d0:c2:af:e1:d5:1b:
         07:0a:e5:75:49:47:54:d7:28:80:56:43:e9:3d:36:fb:38:54:
         fe:de:31:8a:97:79:d2:42:1d:e9:d6:cb:81:7b:e1:0c:8c:ed:
         6a:d8:4e:65:a6:3b:43:b0:99:50:32:23:5d:4f:9a:97:36:32:
         f4:c4:4a:82:15:93:5d:35:fa:a9:16:ec:a9:38:05:f2:8a:a3:
         f5:b2:e7:4a:40:ce:c6:02:6a:b2:d9:b9:27:5f:6b:1e:62:d0:
         09:d6:b4:54:f0:2d:73:13:15:2d:db:8b:3b:c5:e2:50:49:9d:
         84:16:e4:58:98:0f:a2:91:dc:23:94:22:0e:76:d1:1d:a1:e2:
         e6:89:71:e4:2b:c3:a6:40:7f:76:d0:75:18:67:02:3b:08:ad:
         69:f4:84:62:b6:8a:6d:81:a7:59:43:61:c6:4f:75:ca:c1:43:
         4b:07:59:46:67:d8:eb:c2:27:f5:6d:b5:f3:24:b8:63:a1:06:
         ba:06:a5:bc:7e:80:ab:d2:c5:0f:7f:84:b3:1e:b1:18:6f:5e:
         5b:71:2a:70
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUS3FpXyE8vVgFevIk3W2UxukZPAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAzMDE4WhcNMjUwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZDdkNWM0NjA2NzkwMDdlMGY2ZDI5ODYzN2Q1ZGIwZGI4
MzMxMzVmZGFlYzg2YTFlMTQ1MWJkNmI0MGU1OThhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDS41n2UrwaoGv8i/Q3JP2HjJc1bSEnsXTRRMdYmblEy0Yq
kLzLMRJ3R8QiWBRJXIEJVKicYUFibwLQk1Wt176HqZiWGj85zBAh12CEcU5tESf2
gRVcb6Ji16aGkJgLCADZeG/cCXrfGbDEqcAXSf/17PX73poGuI4whdIOhx2DaOgo
8GLRLzoK6XVk9UZDGn/Qjps4IoclyLGI7q+TcAMOyF1+iOfRzAOzdvHCnHAM+XBX
t5LK3NOpFCAvdBXQnHGjnZccPr02soCwsXQqITgKnAaNik13SawvemcQvhxclUGc
i/rfpl5D5uHSKVr3b5FkxgQ3KnsvBMyEuK9+2ymjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCWTmUfQlIsbHAFmLPKcj4ixKOxcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZlMDYxZmU0LTdmNzItNGViNy04ZWY5LTI4ZjU1YmI3NjJlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQTjANBgkqhkiG9w0BAQsFAAOCAQEA0KRFwr8zp6Idgb/a5ttkuAjL9Nzq
/5YKgtKOzM+aJLOjN5HrbfS9BeDyVOX21J1i0MKv4dUbBwrldUlHVNcogFZD6T02
+zhU/t4xipd50kId6dbLgXvhDIztathOZaY7Q7CZUDIjXU+alzYy9MRKghWTXTX6
qRbsqTgF8oqj9bLnSkDOxgJqstm5J19rHmLQCda0VPAtcxMVLduLO8XiUEmdhBbk
WJgPopHcI5QiDnbRHaHi5olx5CvDpkB/dtB1GGcCOwitafSEYraKbYGnWUNhxk91
ysFDSwdZRmfY68In9W218yS4Y6EGugalvH6Aq9LFD3+Esx6xGG9eW3EqcA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:52 2025 by rpki-client