Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa
File:                     0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa (raw, json)
Hash identifier:          ZWc7sXETI6Pmr3j/D6XWDHRvKpll2Y6cdW5E5JD8FS4=
Subject key identifier:   E7:C7:ED:6F:85:D3:54:AB:F5:01:9C:B9:46:3D:0B:3F:F1:FE:A3:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37B64CDDDE9A388ADBB2B49C350F74068F879DF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa
Signing time:             Tue 13 May 2025 00:50:20 +0000
ROA not before:           Tue 13 May 2025 00:50:20 +0000
ROA not after:            Tue 17 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.190.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:4c:dd:de:9a:38:8a:db:b2:b4:9c:35:0f:74:06:8f:87:9d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 00:50:20 2025 GMT
            Not After : Jun 17 23:59:59 2025 GMT
        Subject: serialNumber=1f6c879f8971f8339b4317f450f30e53db57d1301276966c54fa140cd217541f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:b7:ea:d0:37:c3:67:f8:c4:6f:36:96:2e:
                    7e:b5:00:a2:fa:c0:78:03:20:94:60:05:c4:b2:23:
                    16:f7:ff:2f:2c:57:6c:b4:77:32:47:02:46:a7:d4:
                    df:4b:da:55:fa:cf:4a:da:a6:5e:26:ac:d8:0e:78:
                    51:69:5d:01:04:1c:98:64:ef:83:49:55:89:76:07:
                    24:44:47:2c:ef:df:22:88:f3:cd:48:23:72:2e:01:
                    2e:3a:e0:6d:bc:00:9f:0b:4a:3e:dc:21:41:f5:35:
                    65:f8:5f:7c:41:8f:bf:52:75:61:5d:62:e2:ee:5e:
                    e4:ad:38:9e:2f:2e:7a:fa:3c:8a:47:de:5a:85:84:
                    2a:2f:30:54:10:6c:5d:ea:3c:88:01:79:40:95:bb:
                    ee:02:a1:3f:55:10:52:d2:51:a6:05:f4:d4:39:2e:
                    b0:03:e6:02:c3:75:4c:b4:5c:ec:ab:58:e8:c1:09:
                    b1:18:8b:dd:3e:f6:e0:0f:44:01:84:74:2d:32:75:
                    d0:05:73:5c:ff:5e:5b:85:9a:9a:42:2c:30:22:88:
                    24:ab:fc:58:83:e1:04:bf:4f:31:6a:d0:fc:dc:55:
                    22:6d:cf:17:cc:2c:03:aa:19:d5:07:33:a4:35:ec:
                    fa:cf:73:db:a1:51:73:c9:5b:42:10:cf:89:12:46:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:ED:6F:85:D3:54:AB:F5:01:9C:B9:46:3D:0B:3F:F1:FE:A3:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ad3a4fb-a417-4f1b-83fd-6527c2718313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:aa:69:63:81:40:1b:e1:a6:04:2f:44:48:3e:63:89:a9:
         33:8a:07:de:b9:65:3c:55:7f:84:89:1d:a7:a9:55:fd:da:4d:
         49:7c:0a:74:93:b4:7c:2e:45:73:58:53:60:09:b8:a9:1e:24:
         18:ef:34:6c:43:3e:c3:8f:85:03:4e:be:65:83:a3:26:c1:ca:
         08:b2:8b:bc:f2:35:fb:bd:87:24:53:36:74:ea:a8:b6:5f:fe:
         30:b0:a3:1f:93:63:87:3d:6c:2f:d7:24:69:d1:7c:38:94:df:
         af:d4:fd:e1:cb:ea:ae:80:9c:3c:36:af:bb:5e:bb:36:7d:e6:
         79:54:45:c1:87:cc:b7:db:e6:22:30:ee:69:10:b3:df:b1:00:
         fb:65:60:84:60:c7:1f:91:c4:57:14:27:0c:69:d1:aa:0b:e5:
         a8:92:d5:d6:ca:71:be:f4:0a:bd:1e:a3:80:20:e6:94:0e:2d:
         ac:04:60:2d:3b:e3:b1:36:f9:30:39:96:8d:96:54:1d:10:c9:
         6d:84:53:1e:9f:55:01:ea:8d:09:7d:49:ce:0a:01:d5:7e:78:
         c9:db:d7:99:be:b4:f0:a3:b2:a0:34:d0:2f:6e:3f:ed:77:98:
         d2:6c:b8:82:66:f6:90:b5:82:8c:54:8d:29:49:50:05:9e:ee:
         79:71:ed:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN7ZM3d6aOIrbsrScNQ90Bo+HnfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDA1MDIwWhcNMjUwNjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjZjODc5Zjg5NzFmODMzOWI0MzE3ZjQ1MGYzMGU1M2Ri
NTdkMTMwMTI3Njk2NmM1NGZhMTQwY2QyMTc1NDFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJ4Lfq0DfDZ/jEbzaWLn61AKL6wHgDIJRgBcSyIxb3/y8s
V2y0dzJHAkan1N9L2lX6z0rapl4mrNgOeFFpXQEEHJhk74NJVYl2ByRERyzv3yKI
881II3IuAS464G28AJ8LSj7cIUH1NWX4X3xBj79SdWFdYuLuXuStOJ4vLnr6PIpH
3lqFhCovMFQQbF3qPIgBeUCVu+4CoT9VEFLSUaYF9NQ5LrAD5gLDdUy0XOyrWOjB
CbEYi90+9uAPRAGEdC0yddAFc1z/XluFmppCLDAiiCSr/FiD4QS/TzFq0PzcVSJt
zxfMLAOqGdUHM6Q17PrPc9uhUXPJW0IQz4kSRn1VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU58ftb4XTVKv1AZy5Rj0LP/H+oxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBhZDNhNGZiLWE0MTctNGYxYi04M2ZkLTY1MjdjMjcxODMxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABdvrgwDQYJKoZIhvcNAQELBQADggEBAAb5qmljgUAb4aYEL0RIPmOJqTOK
B965ZTxVf4SJHaepVf3aTUl8CnSTtHwuRXNYU2AJuKkeJBjvNGxDPsOPhQNOvmWD
oybBygiyi7zyNfu9hyRTNnTqqLZf/jCwox+TY4c9bC/XJGnRfDiU36/U/eHL6q6A
nDw2r7teuzZ95nlURcGHzLfb5iIw7mkQs9+xAPtlYIRgxx+RxFcUJwxp0aoL5aiS
1dbKcb70Cr0eo4Ag5pQOLawEYC0747E2+TA5lo2WVB0QyW2EUx6fVQHqjQl9Sc4K
AdV+eMnb15m+tPCjsqA00C9uP+13mNJsuIJm9pC1goxUjSlJUAWe7nlx7T0=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:58:29 2025 by rpki-client