Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa
File:                     51f566ba-b5cc-4528-8df7-1206338b802a.roa (raw, json)
Hash identifier:          R5/rOOFfnNDUw7D/lPealmHeZw49O6dOyEsrgxLEs1A=
Subject key identifier:   53:DA:AF:C2:B4:8A:F9:CB:1C:1B:9D:DF:E4:99:5A:7B:C5:10:27:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3916183D7E29780332F625E085B645FFD777D2A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa
Signing time:             Fri 30 May 2025 00:02:05 +0000
ROA not before:           Fri 30 May 2025 00:02:05 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:18:3d:7e:29:78:03:32:f6:25:e0:85:b6:45:ff:d7:77:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:02:05 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=1987ccee20b6ebb56eebbfd64c4fe720fac9e9f2e711cf84f80425c2ca526b5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:60:da:66:12:63:03:11:93:d1:02:ca:7a:ee:
                    c4:73:65:28:e6:0f:54:ee:55:de:99:dd:68:de:5b:
                    be:89:53:7d:9c:5a:c7:47:a8:d8:b1:8c:35:12:dd:
                    7b:a8:71:09:42:d0:39:f9:38:b4:71:55:3b:e5:15:
                    33:4d:05:60:31:a3:96:ab:12:fb:fe:aa:8d:2a:2a:
                    0e:e7:e0:54:0c:b8:b4:8e:16:bd:33:a9:53:74:cb:
                    46:83:05:ec:01:1e:4e:2f:05:30:99:90:2e:40:d4:
                    48:d5:71:7e:8c:f4:6f:9a:b6:2b:ad:92:8a:85:31:
                    fa:bb:51:03:c2:99:16:37:34:cd:e4:3b:91:8e:38:
                    65:aa:01:99:3e:3d:14:5c:23:b9:23:65:5d:09:22:
                    c6:27:31:f9:bd:95:1f:e2:c5:2c:3d:f2:01:aa:4d:
                    b9:31:99:c6:c1:d7:be:54:ec:c3:6a:c8:50:46:8a:
                    b3:3b:52:b3:8c:0d:06:ad:3f:23:5e:a8:f6:26:47:
                    e7:69:4c:2b:af:cf:85:c1:ab:79:b3:26:ee:ba:e3:
                    bc:e7:6a:69:5f:85:c2:86:e5:d5:37:d6:20:87:13:
                    35:bf:d3:18:36:5c:29:c5:a9:6e:33:60:d0:b9:9d:
                    bd:6f:cb:30:99:08:b7:a8:b2:0b:1c:c0:62:94:7f:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DA:AF:C2:B4:8A:F9:CB:1C:1B:9D:DF:E4:99:5A:7B:C5:10:27:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:c9:c9:27:77:fa:55:48:92:79:7b:67:ca:95:a7:59:6b:
         ce:dc:5a:99:f0:33:ed:6b:dd:e2:b2:61:8a:67:34:bb:80:10:
         3a:06:c1:ac:f1:10:1b:b4:5f:50:26:6f:1f:6e:6e:b1:b1:63:
         e5:77:8f:68:f6:37:c0:98:ff:a9:27:ff:c0:56:97:cb:97:b3:
         25:d6:45:e8:f4:b6:fb:f9:e2:eb:8e:0c:0f:fa:e3:db:6f:af:
         85:4f:87:d6:81:af:b6:73:06:8c:fc:31:c5:16:03:27:34:44:
         9b:8b:32:64:3c:1c:91:66:63:be:1d:70:e7:8d:ef:d4:6d:ab:
         7a:01:93:3d:c7:b5:34:1a:11:cc:fa:89:3c:e4:81:3f:58:ed:
         61:57:46:1d:ea:1d:a6:18:e2:43:f2:e3:8d:b4:14:af:f9:78:
         9b:d3:1f:84:0a:0c:c8:56:dd:69:e0:fc:4c:70:77:d9:31:aa:
         b1:49:43:3b:10:f3:65:a0:12:21:ac:fd:35:d3:af:6f:11:70:
         21:42:43:85:57:f7:74:08:59:94:2e:0a:a0:22:34:0d:a6:6b:
         ec:fb:ac:69:cb:62:68:89:de:2d:6a:d7:67:c9:e1:4f:1e:32:
         08:7b:f6:54:e1:1b:77:36:31:0c:fb:91:a9:cd:0a:00:e3:2e:
         70:ca:68:a4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUORYYPX4peAMy9iXghbZF/9d30qkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAwMjA1WhcNMjUwNzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTg3Y2NlZTIwYjZlYmI1NmVlYmJmZDY0YzRmZTcyMGZh
YzllOWYyZTcxMWNmODRmODA0MjVjMmNhNTI2YjVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiYNpmEmMDEZPRAsp67sRzZSjmD1TuVd6Z3WjeW76JU32c
WsdHqNixjDUS3XuocQlC0Dn5OLRxVTvlFTNNBWAxo5arEvv+qo0qKg7n4FQMuLSO
Fr0zqVN0y0aDBewBHk4vBTCZkC5A1EjVcX6M9G+atiutkoqFMfq7UQPCmRY3NM3k
O5GOOGWqAZk+PRRcI7kjZV0JIsYnMfm9lR/ixSw98gGqTbkxmcbB175U7MNqyFBG
irM7UrOMDQatPyNeqPYmR+dpTCuvz4XBq3mzJu6647znamlfhcKG5dU31iCHEzW/
0xg2XCnFqW4zYNC5nb1vyzCZCLeosgscwGKUf1TPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUU9qvwrSK+cscG53f5Jlae8UQJ9swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZjU2NmJhLWI1Y2MtNDUyOC04ZGY3LTEyMDYzMzhiODAyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADRXEUwDQYJKoZIhvcNAQELBQADggEBABoZycknd/pVSJJ5e2fKladZa87c
WpnwM+1r3eKyYYpnNLuAEDoGwazxEBu0X1Ambx9ubrGxY+V3j2j2N8CY/6kn/8BW
l8uXsyXWRej0tvv54uuODA/649tvr4VPh9aBr7ZzBoz8McUWAyc0RJuLMmQ8HJFm
Y74dcOeN79Rtq3oBkz3HtTQaEcz6iTzkgT9Y7WFXRh3qHaYY4kPy4420FK/5eJvT
H4QKDMhW3Wng/Exwd9kxqrFJQzsQ82WgEiGs/TXTr28RcCFCQ4VX93QIWZQuCqAi
NA2ma+z7rGnLYmiJ3i1q12fJ4U8eMgh79lThG3c2MQz7kanNCgDjLnDKaKQ=
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:51:52 2025 by rpki-client