Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9320e1b6-a33e-45ad-a9db-a8dfaa30ac0a.roa
File:                     9320e1b6-a33e-45ad-a9db-a8dfaa30ac0a.roa (raw, json)
Hash identifier:          WchUyMQliWCnZ3He3BK0KNC1gR36JJgnSpj3/DQz7lo=
Subject key identifier:   77:E8:82:12:EA:75:C7:63:E3:D5:E8:F7:E4:13:79:12:AE:FE:80:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       131716C9319356462E6819A9DF1A030F86C94D94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9320e1b6-a33e-45ad-a9db-a8dfaa30ac0a.roa
Signing time:             Sat 30 Aug 2025 00:50:32 +0000
ROA not before:           Sat 30 Aug 2025 00:50:32 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:17:16:c9:31:93:56:46:2e:68:19:a9:df:1a:03:0f:86:c9:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:50:32 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=77e5645ebac9e64f1630959d9eb2f6680ad0920c91579b29f7d45601a930400a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:d4:91:5f:f1:ad:e4:ad:cc:3d:37:ce:5a:
                    95:87:fd:58:5f:6c:2b:be:c3:7f:0e:70:ea:44:8a:
                    f6:64:e6:34:18:87:b5:17:c4:67:40:54:b7:28:3b:
                    b9:14:b8:ad:26:d0:11:b1:4f:ce:08:4b:ff:e0:fc:
                    bc:ae:80:98:e6:72:88:58:85:76:5a:87:80:bd:e9:
                    03:ce:cd:99:1b:73:e5:9d:d0:38:63:64:4c:93:02:
                    c8:69:04:4a:d4:c5:f8:c2:f9:16:e0:b5:a9:9c:c9:
                    09:4b:9b:3c:a9:0a:85:36:15:0b:63:f9:8f:4e:6e:
                    ea:03:9e:76:3a:68:a6:71:85:d8:9e:53:68:c8:61:
                    dd:f5:a8:ff:75:cf:d4:ef:3f:2f:95:1d:9a:75:d4:
                    a5:0f:05:25:5a:77:61:53:05:51:b5:5c:34:56:2a:
                    38:49:e9:84:59:b1:7d:55:9d:e0:b4:4a:1e:e7:25:
                    d1:0e:ee:28:bd:83:2e:45:a0:d9:29:c2:04:4c:4d:
                    0b:2b:cf:c4:58:73:d4:db:26:3f:8c:ed:45:5c:8e:
                    2a:9c:9d:c1:c6:1d:e7:f9:94:32:de:e5:4c:0f:f0:
                    dc:6a:75:46:b5:45:ea:67:fa:1a:6d:fc:45:48:57:
                    b1:d1:06:37:b1:99:31:de:76:b7:44:2c:a4:98:e0:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E8:82:12:EA:75:C7:63:E3:D5:E8:F7:E4:13:79:12:AE:FE:80:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9320e1b6-a33e-45ad-a9db-a8dfaa30ac0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:6e:bb:1f:e6:fb:f4:93:48:6a:e4:6c:1e:f5:92:ce:7f:
         0e:c6:f6:87:90:ba:fb:db:c1:a7:da:e4:5b:7c:15:48:a2:4f:
         d1:a9:cb:f0:9c:9b:f9:a0:c8:fc:56:d0:b0:54:c8:01:8a:d2:
         bb:3f:2a:13:95:5b:00:05:ce:ed:63:cc:b1:af:dd:28:7e:b1:
         22:37:ff:4f:30:78:13:38:ed:bb:48:27:56:81:1c:cb:69:9a:
         a2:7d:ca:93:6f:53:13:83:ea:a4:8d:6d:59:39:bd:6b:95:af:
         cf:a3:0a:99:71:08:8f:f9:08:fd:d0:64:88:55:e3:f7:ce:b6:
         b7:09:02:06:e0:98:74:12:65:4a:ff:c0:dc:96:87:61:3c:4d:
         f8:1b:5a:12:ee:b8:f9:6f:44:aa:d9:4a:eb:c1:8c:3d:bb:33:
         4e:a6:e0:cf:7b:ad:c4:86:ab:c8:18:26:fc:c7:46:fb:1b:20:
         f3:ff:d8:11:41:39:82:c2:f5:f1:93:ed:dd:57:c9:05:c5:71:
         cf:fe:41:25:4f:6d:92:1e:0d:95:c8:fb:78:5e:23:dd:04:84:
         cd:02:6a:ec:3a:7e:38:5a:bb:d9:ff:58:4a:33:51:25:0b:f8:
         9b:6b:13:66:f9:a3:ca:00:8d:8d:f0:a4:8f:78:d8:2b:ab:6f:
         f8:8b:4c:ad
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUExcWyTGTVkYuaBmp3xoDD4bJTZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA1MDMyWhcNMjUxMDA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3N2U1NjQ1ZWJhYzllNjRmMTYzMDk1OWQ5ZWIyZjY2ODBh
ZDA5MjBjOTE1NzliMjlmN2Q0NTYwMWE5MzA0MDBhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEatSRX/Gt5K3MPTfOWpWH/VhfbCu+w38OcOpEivZk5jQY
h7UXxGdAVLcoO7kUuK0m0BGxT84IS//g/LyugJjmcohYhXZah4C96QPOzZkbc+Wd
0DhjZEyTAshpBErUxfjC+RbgtamcyQlLmzypCoU2FQtj+Y9ObuoDnnY6aKZxhdie
U2jIYd31qP91z9TvPy+VHZp11KUPBSVad2FTBVG1XDRWKjhJ6YRZsX1VneC0Sh7n
JdEO7ii9gy5FoNkpwgRMTQsrz8RYc9TbJj+M7UVcjiqcncHGHef5lDLe5UwP8Nxq
dUa1Repn+hpt/EVIV7HRBjexmTHedrdELKSY4BnZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUd+iCEup1x2Pj1ej35BN5Eq7+gE4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkzMjBlMWI2LWEzM2UtNDVhZC1hOWRiLWE4ZGZhYTMwYWMwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARLZbAwDQYJKoZIhvcNAQELBQADggEBABrTbrsf5vv0k0hq5Gwe9ZLOfw7G
9oeQuvvbwafa5Ft8FUiiT9Gpy/Ccm/mgyPxW0LBUyAGK0rs/KhOVWwAFzu1jzLGv
3Sh+sSI3/08weBM47btIJ1aBHMtpmqJ9ypNvUxOD6qSNbVk5vWuVr8+jCplxCI/5
CP3QZIhV4/fOtrcJAgbgmHQSZUr/wNyWh2E8TfgbWhLuuPlvRKrZSuvBjD27M06m
4M97rcSGq8gYJvzHRvsbIPP/2BFBOYLC9fGT7d1XyQXFcc/+QSVPbZIeDZXI+3he
I90EhM0Cauw6fjhau9n/WEozUSUL+JtrE2b5o8oAjY3wpI942Curb/iLTK0=
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:04 2025 by rpki-client