Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13f0527-b12a-49f7-8dbe-daf973329145.roa
File:                     c13f0527-b12a-49f7-8dbe-daf973329145.roa (raw, json)
Hash identifier:          j3spa9z3QoONg2TmbraEbCvOjQNvUvgRIolqrHxGg1A=
Subject key identifier:   96:4A:75:A8:58:2D:B2:84:6A:AF:A8:CC:24:D6:50:EB:9F:F3:B6:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3864A91365CA2F08BE2F7462A038E3BF29FC17C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13f0527-b12a-49f7-8dbe-daf973329145.roa
Signing time:             Tue 26 Aug 2025 15:22:11 +0000
ROA not before:           Tue 26 Aug 2025 15:22:11 +0000
ROA not after:            Tue 30 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.181.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:a9:13:65:ca:2f:08:be:2f:74:62:a0:38:e3:bf:29:fc:17:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 26 15:22:11 2025 GMT
            Not After : Sep 30 23:59:59 2025 GMT
        Subject: serialNumber=95c1cc41b7e68a05f130771a51027d5af440423ee918aa695d50acc055a7025a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:1e:5b:7c:01:fc:e5:ad:8b:54:5a:ae:7f:
                    b1:26:5f:e7:22:76:70:56:5e:14:ea:bf:d5:a4:a9:
                    73:ce:a5:50:77:26:fe:d9:61:f3:92:a9:ae:20:5a:
                    56:ed:7d:37:71:cb:8b:2a:0b:b0:46:4f:4a:29:ec:
                    ff:e7:99:86:a0:6a:7b:b6:e3:55:e8:8a:ce:af:a1:
                    fe:a7:5c:8e:59:d0:a4:2e:f7:29:b0:ad:e9:fc:ff:
                    74:a4:74:c1:2c:96:9c:00:27:3f:5e:95:ea:3a:10:
                    2a:12:26:2d:4c:59:99:7c:53:26:31:02:93:70:56:
                    1d:fd:a9:66:9b:61:a2:20:e0:a8:79:e6:76:df:a1:
                    26:04:d6:8a:17:6e:4e:65:16:14:8c:a8:a2:2c:c8:
                    7e:62:9e:3f:a5:a6:db:6e:c7:d7:f8:95:57:09:78:
                    a4:24:c5:3b:bf:10:b6:22:27:c9:fd:c4:1d:73:ac:
                    d6:ea:e0:91:da:e9:1b:ab:77:d7:31:08:ce:e1:da:
                    97:81:00:3d:b5:5d:84:c4:89:5d:4e:fd:94:d6:5d:
                    de:ac:a5:bf:90:ef:d3:f6:8d:25:68:a2:f3:f2:f5:
                    cb:2d:c1:17:34:c9:67:c9:88:15:69:3c:ce:02:31:
                    bc:0b:88:f6:d5:de:24:e2:93:88:26:70:37:0d:d6:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4A:75:A8:58:2D:B2:84:6A:AF:A8:CC:24:D6:50:EB:9F:F3:B6:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13f0527-b12a-49f7-8dbe-daf973329145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:91:e1:bb:a8:24:1d:42:eb:20:7b:84:38:29:f8:55:bd:d9:
         5b:ed:26:07:dc:50:9c:9d:d3:72:db:f8:ed:bb:4c:04:01:fe:
         f3:8d:80:de:be:70:13:de:d7:97:cb:ca:cd:88:4e:ad:e6:22:
         ff:c3:60:d9:4c:75:1f:6c:32:18:e3:d7:86:4b:61:e7:68:09:
         38:c5:7f:ee:11:c1:ce:6a:93:44:3c:e7:e6:f0:96:13:c5:db:
         d2:92:a3:12:5b:51:1e:bd:0c:ad:be:b0:88:34:5d:f8:e4:56:
         c0:6a:b3:bb:52:83:70:70:25:50:f3:af:21:d4:c9:d5:c3:03:
         09:de:42:0b:c8:14:71:5c:ac:5c:f2:31:19:bd:21:df:e6:74:
         ca:28:4f:97:a8:d4:52:19:c0:90:60:2c:27:16:ff:e3:68:9a:
         67:96:7a:36:e0:3f:8e:a5:42:27:1c:76:e8:8a:6e:c2:f4:fb:
         dc:ef:a1:cb:23:1b:c4:b1:23:34:46:50:2a:a2:cb:72:e5:81:
         4e:b0:7e:2f:42:4f:87:5a:69:1b:9c:ec:6c:23:89:4b:fc:c7:
         2a:c1:42:e1:48:47:e8:f4:1b:16:f4:63:f8:d9:b5:0c:c3:8d:
         4b:a3:6a:29:a1:8c:8a:9c:4c:c0:4e:3d:41:aa:e5:29:db:80:
         ca:9a:ec:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOGSpE2XKLwi+L3RioDjjvyn8F8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMjExWhcNMjUwOTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWMxY2M0MWI3ZTY4YTA1ZjEzMDc3MWE1MTAyN2Q1YWY0
NDA0MjNlZTkxOGFhNjk1ZDUwYWNjMDU1YTcwMjVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4aB5bfAH85a2LVFquf7EmX+cidnBWXhTqv9WkqXPOpVB3
Jv7ZYfOSqa4gWlbtfTdxy4sqC7BGT0op7P/nmYaganu241Xois6vof6nXI5Z0KQu
9ymwren8/3SkdMEslpwAJz9eleo6ECoSJi1MWZl8UyYxApNwVh39qWabYaIg4Kh5
5nbfoSYE1ooXbk5lFhSMqKIsyH5inj+lpttux9f4lVcJeKQkxTu/ELYiJ8n9xB1z
rNbq4JHa6Rurd9cxCM7h2peBAD21XYTEiV1O/ZTWXd6spb+Q79P2jSVoovPy9cst
wRc0yWfJiBVpPM4CMbwLiPbV3iTik4gmcDcN1t6pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlkp1qFgtsoRqr6jMJNZQ65/ztm8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxM2YwNTI3LWIxMmEtNDlmNy04ZGJlLWRhZjk3MzMyOTE0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADKtdswDQYJKoZIhvcNAQELBQADggEBAICR4buoJB1C6yB7hDgp+FW92Vvt
JgfcUJyd03Lb+O27TAQB/vONgN6+cBPe15fLys2ITq3mIv/DYNlMdR9sMhjj14ZL
YedoCTjFf+4Rwc5qk0Q85+bwlhPF29KSoxJbUR69DK2+sIg0XfjkVsBqs7tSg3Bw
JVDzryHUydXDAwneQgvIFHFcrFzyMRm9Id/mdMooT5eo1FIZwJBgLCcW/+NommeW
ejbgP46lQiccduiKbsL0+9zvocsjG8SxIzRGUCqiy3LlgU6wfi9CT4daaRuc7Gwj
iUv8xyrBQuFIR+j0Gxb0Y/jZtQzDjUujaimhjIqcTMBOPUGq5SnbgMqa7Iw=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:50 2025 by rpki-client