Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
File:                     7f83be28-929e-466e-8557-0586ca761224.roa (raw, json)
Hash identifier:          mH2Xgics4C79LYhkNQ6TfXGhNcHabhDUAV1TLHjS7/c=
Subject key identifier:   0C:AF:39:EC:94:79:70:E6:F1:2E:5B:CA:59:7A:63:73:F7:A7:2A:0D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D15F382D6249C8BCF5B95F22FAA6DAEA8B39B58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
Signing time:             Tue 20 May 2025 00:40:22 +0000
ROA not before:           Tue 20 May 2025 00:40:22 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.176.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:f3:82:d6:24:9c:8b:cf:5b:95:f2:2f:aa:6d:ae:a8:b3:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:40:22 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=c3e2cd9e150407803980579251a7c0b7248b0105671831f56b7a547eea11fad6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:84:08:46:86:1f:e7:be:bb:22:28:5e:d7:
                    dd:cc:e4:28:4b:5a:24:db:27:14:51:c3:0e:47:04:
                    ed:5b:22:26:65:c2:63:99:81:33:b2:91:0a:80:94:
                    35:64:30:be:58:70:90:26:d8:80:4b:6a:fe:19:e4:
                    c1:5d:2e:3e:71:30:5e:50:84:b1:a6:a9:99:ad:a5:
                    73:4c:0b:62:05:62:8b:67:39:c6:91:aa:16:16:6b:
                    ef:78:9b:84:a0:c7:31:47:64:84:70:e4:c4:0c:9b:
                    76:4f:69:db:76:df:79:34:43:e8:ae:b5:9d:87:58:
                    78:ea:7e:91:88:ac:70:93:92:91:a5:c5:99:db:1b:
                    af:8c:21:dc:42:e3:b6:e5:7e:7e:e1:33:c9:ea:94:
                    3c:90:1d:c6:14:20:e8:71:18:da:f6:84:cb:08:e2:
                    f8:6b:ff:d7:3e:37:99:16:40:2a:a8:82:22:03:9e:
                    4e:4c:d2:4f:97:13:fe:d3:db:29:3e:21:ba:cc:9a:
                    40:f4:65:0c:1c:b5:79:ac:1c:43:08:7a:e4:0f:75:
                    89:60:c0:83:a6:44:be:28:96:69:32:16:95:5f:bd:
                    a0:2d:16:c7:ec:30:36:56:ed:b2:06:e0:7b:08:5f:
                    b9:5a:d3:3c:0d:bd:2b:d6:4d:12:88:d7:8b:3e:73:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:39:EC:94:79:70:E6:F1:2E:5B:CA:59:7A:63:73:F7:A7:2A:0D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:7a:b2:fa:15:36:c5:36:24:9d:24:74:83:0e:89:90:97:
         c1:5b:b2:e5:11:dd:38:c5:1b:f3:b1:a4:7a:e4:c6:70:4b:05:
         b5:e2:e9:56:3e:25:56:30:a7:f8:55:2c:09:f7:0d:81:9c:47:
         46:9f:c0:b5:ec:cf:f2:4c:54:4d:63:ea:7d:04:56:97:cc:2a:
         da:dc:b9:4c:64:7a:d1:cc:42:dc:60:91:84:25:a7:e6:72:ab:
         9b:64:56:9b:bb:f4:74:09:ec:ad:e8:4b:a7:b5:e8:69:66:d8:
         28:b3:bc:43:03:c6:53:a1:f6:d2:3a:c0:57:d9:07:c2:5f:33:
         62:64:bf:dc:8c:ae:f6:9d:5b:bd:9f:5c:57:6d:22:ed:99:77:
         0b:5a:55:d5:66:4b:a2:ce:e9:eb:7d:11:e7:05:82:a7:f0:22:
         4a:ef:be:75:56:d6:c5:dd:f9:50:46:24:4e:83:f0:ad:42:0a:
         c4:01:08:fe:43:26:29:e1:69:93:4f:c0:a2:d2:7b:39:a1:36:
         77:07:c2:6b:1c:46:3d:d1:09:b8:50:a6:cf:0e:b6:f1:bb:f7:
         53:6e:97:72:6f:8f:37:02:35:18:56:33:28:cc:48:b2:ed:9f:
         d5:49:16:8f:ce:d9:c5:2a:e3:a3:95:6a:b3:c1:cb:ff:88:0d:
         4d:92:83:b6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTRXzgtYknIvPW5XyL6ptrqizm1gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA0MDIyWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjM2UyY2Q5ZTE1MDQwNzgwMzk4MDU3OTI1MWE3YzBiNzI0
OGIwMTA1NjcxODMxZjU2YjdhNTQ3ZWVhMTFmYWQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxK4QIRoYf5767Iihe193M5ChLWiTbJxRRww5HBO1bIiZl
wmOZgTOykQqAlDVkML5YcJAm2IBLav4Z5MFdLj5xMF5QhLGmqZmtpXNMC2IFYotn
OcaRqhYWa+94m4SgxzFHZIRw5MQMm3ZPadt233k0Q+iutZ2HWHjqfpGIrHCTkpGl
xZnbG6+MIdxC47blfn7hM8nqlDyQHcYUIOhxGNr2hMsI4vhr/9c+N5kWQCqogiID
nk5M0k+XE/7T2yk+IbrMmkD0ZQwctXmsHEMIeuQPdYlgwIOmRL4olmkyFpVfvaAt
FsfsMDZW7bIG4HsIX7la0zwNvSvWTRKI14s+c341AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUDK857JR5cObxLlvKWXpjc/enKg0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmODNiZTI4LTkyOWUtNDY2ZS04NTU3LTA1ODZjYTc2MTIyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEosDANBgkqhkiG9w0BAQsFAAOCAQEALMl6svoVNsU2JJ0kdIMOiZCXwVuy
5RHdOMUb87GkeuTGcEsFteLpVj4lVjCn+FUsCfcNgZxHRp/AtezP8kxUTWPqfQRW
l8wq2ty5TGR60cxC3GCRhCWn5nKrm2RWm7v0dAnsrehLp7XoaWbYKLO8QwPGU6H2
0jrAV9kHwl8zYmS/3Iyu9p1bvZ9cV20i7Zl3C1pV1WZLos7p630R5wWCp/AiSu++
dVbWxd35UEYkToPwrUIKxAEI/kMmKeFpk0/AotJ7OaE2dwfCaxxGPdEJuFCmzw62
8bv3U26Xcm+PNwI1GFYzKMxIsu2f1UkWj87ZxSrjo5Vqs8HL/4gNTZKDtg==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:25:02 2025 by rpki-client