Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa
File:                     6e790948-9518-4339-b7cd-f658d299179b.roa (raw, json)
Hash identifier:          AtbnJ2F5n2jg6Fn3zIr2HaylSHQPNFK8HHWo3MeV/3A=
Subject key identifier:   E7:91:21:00:69:4A:09:51:33:91:C7:65:8B:B7:61:A1:22:4E:A6:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       731E6F1EBCF4C3BB60404BFD1D537A4B4773C884
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa
Signing time:             Fri 07 Mar 2025 00:02:20 +0000
ROA not before:           Fri 07 Mar 2025 00:02:20 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1e:6f:1e:bc:f4:c3:bb:60:40:4b:fd:1d:53:7a:4b:47:73:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  7 00:02:20 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:a0:61:05:1a:51:14:04:d5:ca:10:9a:24:
                    6c:3a:94:70:57:88:5e:d7:1f:07:c3:93:d6:be:ac:
                    11:dd:57:f6:f8:b6:f7:4a:1d:e5:f7:de:b1:0a:ed:
                    69:4a:8a:bc:a7:c6:bc:dd:02:77:0d:7d:63:b4:d6:
                    ff:d5:09:5d:d5:fb:e3:52:8e:81:60:d5:da:85:c2:
                    c7:dd:87:6c:a6:71:37:54:d0:ea:dd:54:69:be:20:
                    1f:fa:35:a1:ac:f2:a8:21:bc:43:c3:68:d8:ce:94:
                    78:ae:fe:d8:fa:06:31:27:ec:9d:39:04:db:25:a9:
                    70:2d:2a:90:8b:9f:5f:d9:8d:76:2f:b6:e1:ef:5a:
                    cc:8f:57:1e:d0:7b:1c:ba:a4:9e:c9:c1:fd:6a:ab:
                    a3:1c:de:61:28:db:97:3e:4f:32:5d:f9:79:60:0c:
                    14:3e:68:ae:9a:b3:60:44:68:85:34:48:6e:dd:63:
                    a3:df:bc:8c:e8:bb:5a:c1:f3:97:e4:45:42:61:d9:
                    ef:a7:fe:cb:ef:58:b9:e3:8b:db:08:e3:f2:d3:4f:
                    54:43:47:9e:59:42:1e:4f:68:ad:84:3c:dd:eb:f0:
                    3c:a9:7c:74:ea:44:56:4b:21:bb:d1:a1:7e:66:ac:
                    c8:fe:fa:2f:ac:c9:8b:94:89:e1:8d:24:41:e5:97:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:21:00:69:4A:09:51:33:91:C7:65:8B:B7:61:A1:22:4E:A6:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e790948-9518-4339-b7cd-f658d299179b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:da:74:0e:88:33:cf:18:d8:7b:63:f3:f5:ec:98:8d:32:44:
         3d:01:11:9b:a6:3a:14:74:3d:fc:26:14:49:d1:d3:79:3f:a1:
         5d:50:63:e0:37:f8:fa:b3:37:4f:fd:7b:30:2a:8c:a3:4c:9b:
         3e:42:03:3e:64:3d:a3:ee:f3:71:30:76:9c:71:f3:20:37:e0:
         51:53:3a:94:60:07:ad:2e:4e:4d:55:83:ce:f2:8e:9b:78:ac:
         ae:f3:3b:d9:6f:16:63:96:ed:7f:f5:f3:24:b6:0f:64:32:b1:
         b3:9f:3e:ac:1d:8c:53:30:ff:c1:4e:ae:6d:ff:0a:58:2a:1b:
         11:cd:02:c5:21:b6:ac:11:5d:92:a0:4d:f4:43:d5:73:be:74:
         62:ff:f2:48:01:d2:1b:b8:da:a0:ab:df:73:4b:24:7c:d6:86:
         c7:a6:52:76:b5:68:41:f2:03:49:08:8b:32:3f:8b:6e:ea:d9:
         40:3a:c3:d8:4f:ad:6e:e3:41:ad:8d:4f:65:ea:5e:e5:73:87:
         3c:34:30:cf:4f:0e:7d:5e:76:ea:6b:c1:53:a9:0b:c8:37:47:
         36:c9:65:a9:45:90:28:ba:5c:11:8f:af:2b:5e:60:68:84:b1:
         a2:35:bd:df:24:12:b0:69:77:97:f5:29:ae:30:0f:b8:65:d4:
         49:07:b6:a2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcx5vHrz0w7tgQEv9HVN6S0dzyIQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA3MDAwMjIwWhcNMjUwNDExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MWIzY2Q0ZmQ1MDg3NjJkOTA2MTVlZmViZGY2YWFjMTJh
NWYyMWM3NjcxNzc3MzI0N2UwMjQ2Y2Y0OWM2ODgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD0KBhBRpRFATVyhCaJGw6lHBXiF7XHwfDk9a+rBHdV/b4
tvdKHeX33rEK7WlKirynxrzdAncNfWO01v/VCV3V++NSjoFg1dqFwsfdh2ymcTdU
0OrdVGm+IB/6NaGs8qghvEPDaNjOlHiu/tj6BjEn7J05BNslqXAtKpCLn1/ZjXYv
tuHvWsyPVx7Qexy6pJ7Jwf1qq6Mc3mEo25c+TzJd+XlgDBQ+aK6as2BEaIU0SG7d
Y6PfvIzou1rB85fkRUJh2e+n/svvWLnji9sI4/LTT1RDR55ZQh5PaK2EPN3r8Dyp
fHTqRFZLIbvRoX5mrMj++i+syYuUieGNJEHll2xLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU55EhAGlKCVEzkcdli7dhoSJOpjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlNzkwOTQ4LTk1MTgtNDMzOS1iN2NkLWY2NThkMjk5MTc5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQiDANBgkqhkiG9w0BAQsFAAOCAQEAg9p0DogzzxjYe2Pz9eyYjTJEPQER
m6Y6FHQ9/CYUSdHTeT+hXVBj4Df4+rM3T/17MCqMo0ybPkIDPmQ9o+7zcTB2nHHz
IDfgUVM6lGAHrS5OTVWDzvKOm3isrvM72W8WY5btf/XzJLYPZDKxs58+rB2MUzD/
wU6ubf8KWCobEc0CxSG2rBFdkqBN9EPVc750Yv/ySAHSG7jaoKvfc0skfNaGx6ZS
drVoQfIDSQiLMj+LburZQDrD2E+tbuNBrY1PZepe5XOHPDQwz08OfV526mvBU6kL
yDdHNsllqUWQKLpcEY+vK15gaISxojW93yQSsGl3l/UprjAPuGXUSQe2og==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:52:44 2025 by rpki-client