Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa
File:                     b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa (raw, json)
Hash identifier:          qbeJ8bj+CWoxKJ3xMzb2euwFcP92o45bafeXyHjnPxQ=
Subject key identifier:   BF:97:1B:FB:DB:DA:3D:9C:61:83:1F:FE:33:0C:A4:1A:03:31:1E:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01F17BCF0C410D94AB710EE74F520BFFE242F6B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa
Signing time:             Fri 23 May 2025 00:00:28 +0000
ROA not before:           Fri 23 May 2025 00:00:28 +0000
ROA not after:            Fri 27 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        111.92.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f1:7b:cf:0c:41:0d:94:ab:71:0e:e7:4f:52:0b:ff:e2:42:f6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 23 00:00:28 2025 GMT
            Not After : Jun 27 23:59:59 2025 GMT
        Subject: serialNumber=7930d37ea49cce4b4329eda1124042c98d236d7c27914c7a9d3f85aeed47620e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:f2:52:6a:60:55:eb:a6:af:aa:f7:e8:d3:
                    aa:dc:45:44:1a:f4:fe:5f:da:23:99:bf:15:c9:70:
                    c5:8d:c6:27:86:b9:d8:5d:59:ac:d7:db:c5:99:7b:
                    2d:a1:36:6f:2b:78:82:f1:de:01:8d:f9:3f:8c:92:
                    cf:45:8b:db:cb:a3:cc:ac:eb:21:6d:4e:23:ad:c9:
                    1b:d1:5d:88:f3:9c:9d:cd:3d:12:27:b3:30:32:2c:
                    53:1c:4c:4a:a7:cf:14:a9:fe:b2:34:a8:39:b2:88:
                    80:49:31:24:77:1d:ed:7b:3e:2e:f7:c0:bd:6d:7d:
                    94:21:2d:78:72:1e:0d:59:79:27:cf:a9:2d:46:7e:
                    bf:1b:18:8d:2f:d4:90:b1:89:1b:8d:f7:12:93:9f:
                    f0:2f:99:7c:02:28:7a:44:9f:60:29:e2:5e:5e:cf:
                    e5:14:96:25:a5:d9:4f:79:a6:dc:23:f1:ea:11:e2:
                    50:02:81:2b:fc:ab:14:0c:6e:fe:6f:6d:91:5f:8a:
                    05:0f:c5:37:01:5b:68:26:cb:a6:d8:7e:22:90:be:
                    2c:da:b8:95:36:2a:66:d4:23:a6:ac:2c:80:a3:cc:
                    84:05:02:f6:96:3a:22:9a:fe:e9:fb:30:79:2a:44:
                    24:53:e8:f6:df:0f:29:85:f1:16:39:e3:21:96:3e:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:1B:FB:DB:DA:3D:9C:61:83:1F:FE:33:0C:A4:1A:03:31:1E:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b466b9f8-fb3b-44eb-8997-8f74888df4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:67:b3:d0:6b:e6:4d:45:aa:f3:86:f4:4a:48:fe:2a:40:fb:
         cd:15:3c:75:8a:20:dc:65:05:f2:4c:de:89:a6:ee:3f:ea:40:
         57:9d:16:b7:22:3c:ad:5b:c9:67:b6:34:62:c3:e3:20:03:af:
         55:0b:d9:93:45:56:5c:5e:6e:d6:1e:3f:b4:4e:7d:b4:c8:f1:
         48:34:7b:9d:2f:ed:87:e0:e9:d4:7a:88:8a:7d:94:c2:61:b0:
         4f:4b:b9:a2:62:2e:5c:4b:38:4f:a5:ca:6f:a8:39:1f:fe:2e:
         00:60:10:f2:5c:8d:9a:a2:d0:45:be:dc:35:9f:29:74:3c:0f:
         f8:76:28:ad:bc:da:9a:30:ce:7a:bf:26:7c:35:c4:60:f1:41:
         d9:de:51:15:6f:0a:65:2c:bd:1a:29:26:13:f7:eb:dc:78:19:
         df:89:4c:23:71:82:0f:49:48:71:2d:ec:4b:66:72:8a:c5:2c:
         de:a7:b9:d3:4d:39:03:0f:e9:3a:50:e4:ba:4e:7d:85:e4:0c:
         dd:bc:f7:bc:b4:fd:f7:1d:4b:df:af:56:0c:4b:0c:29:a8:04:
         6a:6a:01:e2:6b:4a:4a:9f:58:58:44:64:0d:60:7c:36:4d:c1:
         65:80:71:81:02:ff:61:be:86:eb:fc:31:e6:24:7d:f5:8c:73:
         28:d2:62:0a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAfF7zwxBDZSrcQ7nT1IL/+JC9rQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAwMDI4WhcNMjUwNjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OTMwZDM3ZWE0OWNjZTRiNDMyOWVkYTExMjQwNDJjOThk
MjM2ZDdjMjc5MTRjN2E5ZDNmODVhZWVkNDc2MjBlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU8fJSamBV66avqvfo06rcRUQa9P5f2iOZvxXJcMWNxieG
udhdWazX28WZey2hNm8reILx3gGN+T+Mks9Fi9vLo8ys6yFtTiOtyRvRXYjznJ3N
PRInszAyLFMcTEqnzxSp/rI0qDmyiIBJMSR3He17Pi73wL1tfZQhLXhyHg1ZeSfP
qS1Gfr8bGI0v1JCxiRuN9xKTn/AvmXwCKHpEn2Ap4l5ez+UUliWl2U95ptwj8eoR
4lACgSv8qxQMbv5vbZFfigUPxTcBW2gmy6bYfiKQvizauJU2KmbUI6asLICjzIQF
AvaWOiKa/un7MHkqRCRT6PbfDymF8RY54yGWPnBxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUv5cb+9vaPZxhgx/+MwykGgMxHlkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I0NjZiOWY4LWZiM2ItNDRlYi04OTk3LThmNzQ4ODhkZjRhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABvXLAwDQYJKoZIhvcNAQELBQADggEBANVns9Br5k1FqvOG9EpI/ipA+80V
PHWKINxlBfJM3omm7j/qQFedFrciPK1byWe2NGLD4yADr1UL2ZNFVlxebtYeP7RO
fbTI8Ug0e50v7Yfg6dR6iIp9lMJhsE9LuaJiLlxLOE+lym+oOR/+LgBgEPJcjZqi
0EW+3DWfKXQ8D/h2KK282powznq/Jnw1xGDxQdneURVvCmUsvRopJhP369x4Gd+J
TCNxgg9JSHEt7EtmcorFLN6nudNNOQMP6TpQ5LpOfYXkDN2897y0/fcdS9+vVgxL
DCmoBGpqAeJrSkqfWFhEZA1gfDZNwWWAcYEC/2G+huv8MeYkffWMcyjSYgo=
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:31:11 2025 by rpki-client