Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa
File:                     062d9d6d-7664-4130-90d5-11baa299983d.roa (raw, json)
Hash identifier:          NE357XuBzjPNilVSMQU+mhqjJ+mvcOgirxKxkfawnDo=
Subject key identifier:   46:25:00:87:60:71:F3:33:40:CF:98:6F:05:FF:15:EB:79:B9:3C:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F93A49C89B515A014A4DA9E0E1C5BF94FB29BAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa
Signing time:             Tue 27 May 2025 00:11:10 +0000
ROA not before:           Tue 27 May 2025 00:11:10 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.185.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:93:a4:9c:89:b5:15:a0:14:a4:da:9e:0e:1c:5b:f9:4f:b2:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:11:10 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=a51fb651601f819fc0de40234fba56f6d0010b20a25322e70a2a65d6dbca4cf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:9b:0b:49:90:41:a2:85:1f:e6:33:6d:45:
                    22:bf:3e:50:18:91:e2:ce:3f:43:8b:c7:07:4e:35:
                    9d:17:17:a3:87:37:48:06:30:13:2e:37:b3:04:64:
                    f9:fd:47:1a:84:83:69:fe:e7:4e:4f:e8:77:24:13:
                    c5:28:69:ef:63:86:57:2f:ca:f6:43:2f:0c:7d:d1:
                    99:1f:18:65:a2:2f:50:a5:95:2b:78:0d:c3:5d:78:
                    00:b0:3c:39:78:a0:76:79:45:e3:c1:1f:44:7c:07:
                    b2:c0:b8:25:e0:73:59:99:23:37:91:84:c9:92:c6:
                    3e:a8:fb:fa:42:90:3c:0c:12:4b:80:08:79:80:ab:
                    65:2c:07:e1:da:ec:a1:24:1d:6c:d3:03:5c:2e:7a:
                    4b:59:55:b4:be:7d:e6:7c:91:33:20:f7:e0:0f:fd:
                    87:7c:0b:30:58:2f:0a:f3:42:c3:4f:d7:72:90:65:
                    dc:4d:fa:9b:e4:d7:d4:ce:9b:6b:bd:22:5a:f7:91:
                    b2:32:f7:a2:90:c0:26:43:91:92:ff:51:cf:f9:4b:
                    6f:3b:f7:6f:86:87:43:2a:bd:99:b3:c7:1b:d8:71:
                    b5:dd:e2:70:25:36:41:97:f9:b0:8f:db:29:f5:7c:
                    bb:2c:6e:1f:a9:44:98:9e:cf:88:76:86:5b:37:d2:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:00:87:60:71:F3:33:40:CF:98:6F:05:FF:15:EB:79:B9:3C:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:96:2b:97:ee:2c:08:b6:4d:e8:6f:bf:3d:5d:1f:0c:48:
         cd:95:bb:48:9b:4e:0e:99:a8:b4:98:0e:5d:a9:27:ba:15:8a:
         da:c8:8b:08:ef:7f:59:5f:9d:cc:b3:70:5f:ed:bb:01:bb:f2:
         8b:42:99:d0:1b:f0:a4:e3:af:4b:c0:e5:91:42:cf:13:c4:1b:
         77:ca:2c:00:a9:5b:65:43:99:6e:07:86:25:31:5b:02:8d:29:
         fb:4c:7d:23:3e:d8:ec:3b:d1:29:e0:08:4b:ee:4b:39:9a:1f:
         ce:5e:ca:5b:9e:fc:af:86:b6:e4:31:7a:c2:94:06:99:fa:21:
         55:34:6d:d1:75:64:a1:6e:d6:e7:5d:45:cb:ca:a7:29:2e:e2:
         0a:20:7d:8e:81:f4:fc:fc:69:fb:2d:de:03:4b:23:e7:8b:6a:
         09:2a:e3:35:5d:c2:31:59:9d:25:9a:af:f7:70:b3:12:34:35:
         ae:4b:44:96:9e:08:7d:96:92:b0:57:d5:31:22:da:ee:3a:f4:
         95:18:1b:61:5a:2e:a1:4b:6c:9f:6f:33:20:cf:c1:69:22:bc:
         e9:01:c5:96:69:0b:16:e9:54:07:76:98:63:a3:a3:83:39:67:
         89:de:3a:e0:8d:b8:f5:59:c5:b1:8f:d2:60:48:f4:fb:7d:91:
         5f:03:ae:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUD5OknIm1FaAUpNqeDhxb+U+ym6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAxMTEwWhcNMjUwNzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTFmYjY1MTYwMWY4MTlmYzBkZTQwMjM0ZmJhNTZmNmQw
MDEwYjIwYTI1MzIyZTcwYTJhNjVkNmRiY2E0Y2Y4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpYpsLSZBBooUf5jNtRSK/PlAYkeLOP0OLxwdONZ0XF6OH
N0gGMBMuN7MEZPn9RxqEg2n+505P6HckE8Uoae9jhlcvyvZDLwx90ZkfGGWiL1Cl
lSt4DcNdeACwPDl4oHZ5RePBH0R8B7LAuCXgc1mZIzeRhMmSxj6o+/pCkDwMEkuA
CHmAq2UsB+Ha7KEkHWzTA1wuektZVbS+feZ8kTMg9+AP/Yd8CzBYLwrzQsNP13KQ
ZdxN+pvk19TOm2u9Ilr3kbIy96KQwCZDkZL/Uc/5S28792+Gh0MqvZmzxxvYcbXd
4nAlNkGX+bCP2yn1fLssbh+pRJiez4h2hls30jM3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURiUAh2Bx8zNAz5hvBf8V63m5PIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2MmQ5ZDZkLTc2NjQtNDEzMC05MGQ1LTExYmFhMjk5OTgzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQuTANBgkqhkiG9w0BAQsFAAOCAQEASy+WK5fuLAi2Tehvvz1dHwxIzZW7
SJtODpmotJgOXaknuhWK2siLCO9/WV+dzLNwX+27Abvyi0KZ0BvwpOOvS8DlkULP
E8Qbd8osAKlbZUOZbgeGJTFbAo0p+0x9Iz7Y7DvRKeAIS+5LOZofzl7KW578r4a2
5DF6wpQGmfohVTRt0XVkoW7W511Fy8qnKS7iCiB9joH0/Pxp+y3eA0sj54tqCSrj
NV3CMVmdJZqv93CzEjQ1rktElp4IfZaSsFfVMSLa7jr0lRgbYVouoUtsn28zIM/B
aSK86QHFlmkLFulUB3aYY6Ojgzlnid464I249VnFsY/SYEj0+32RXwOuVg==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:56:42 2025 by rpki-client