Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa
File:                     e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa (raw, json)
Hash identifier:          S4gIj33npvT6rnTU4wtRk/NdNz7LwXqsESHetitK8J0=
Subject key identifier:   76:F8:F9:6A:96:2F:1B:3E:B1:E1:1E:6E:F0:8B:D3:61:E0:7B:88:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10FE60921328EEF479CBBF396A058C324C13537A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa
Signing time:             Mon 02 Jun 2025 15:11:18 +0000
ROA not before:           Mon 02 Jun 2025 15:11:18 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fe:60:92:13:28:ee:f4:79:cb:bf:39:6a:05:8c:32:4c:13:53:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:11:18 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=62ab6187963391309787953d99bb45e3e984300d148edd723290f557d5eebd8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:08:8a:b1:b8:93:83:5f:9c:a5:6f:11:0d:
                    f6:df:38:94:63:20:7c:d1:ac:15:16:fe:38:b2:26:
                    24:a8:f5:5c:31:82:09:75:1a:fb:4e:69:d9:02:75:
                    0b:28:4d:ed:53:db:96:6e:0c:65:22:fb:f8:d4:6f:
                    69:8a:c0:bf:15:d1:8e:ba:74:6d:e6:9d:e8:25:21:
                    84:0b:10:20:f6:57:b1:b5:0e:0d:bf:06:94:61:27:
                    13:90:50:82:76:d4:ad:aa:82:97:0e:c3:a2:ce:cb:
                    b9:44:91:9a:50:34:94:fc:b0:d5:b3:7f:58:3b:03:
                    2a:99:95:77:62:f5:b5:2b:89:50:80:39:69:96:76:
                    24:3d:a2:fa:e9:27:e0:90:50:3c:d5:a9:31:9b:78:
                    52:80:b3:5a:d6:6b:f5:04:74:86:6f:fe:df:d7:98:
                    8e:cb:5c:1f:25:dc:df:ea:a7:dc:28:a5:9a:f6:8e:
                    0f:72:b9:25:3f:ee:e7:e4:49:49:bd:56:6d:16:2a:
                    f3:6a:1e:4c:f7:64:b9:da:3e:ab:9c:35:0a:41:99:
                    05:64:00:de:09:3b:f2:c6:a2:b5:dc:5b:6e:bf:0f:
                    e4:39:e4:fd:3b:b8:2c:73:36:9f:24:25:3c:d8:84:
                    a1:82:4d:db:13:af:71:84:62:f7:83:a6:29:01:da:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:F9:6A:96:2F:1B:3E:B1:E1:1E:6E:F0:8B:D3:61:E0:7B:88:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:27:65:97:eb:f8:e3:08:39:c4:22:bd:67:cd:2b:3a:75:58:
         04:67:b3:c1:e9:29:ab:d9:c7:d2:98:d4:92:24:98:b3:a1:6b:
         1b:ce:a3:d0:42:a4:75:2b:37:d3:00:40:31:56:1a:9b:da:ad:
         da:f7:c7:7c:ea:74:68:0d:fe:14:1b:f3:0f:ef:d6:d2:fd:af:
         4d:ee:ae:63:6e:92:5f:12:ed:23:b9:6e:dd:45:31:58:aa:58:
         d7:45:a9:cd:fb:82:f1:f8:9a:f0:50:71:19:18:cb:c1:f9:47:
         51:2e:16:2f:d1:b5:51:90:76:c8:a9:bb:4f:0b:ed:70:61:ba:
         37:5e:f9:99:7a:4f:c2:6f:7f:f8:12:b0:0d:60:58:0c:6a:ee:
         78:28:2f:38:36:9b:ad:ea:94:02:83:5c:61:76:9b:f5:04:b7:
         19:62:2f:6d:27:cd:93:33:15:e1:7e:e3:45:bc:43:d8:17:2a:
         a8:76:c9:91:23:08:28:05:5a:7c:a0:51:47:5a:8f:c3:7f:de:
         6c:16:77:9b:67:03:f5:71:cc:92:c8:70:a6:9a:24:4e:b9:9d:
         25:97:bd:f0:73:82:72:58:bf:d0:c4:06:ed:2f:b8:af:40:be:
         87:eb:e3:91:6d:c0:41:80:a8:3d:7a:80:fc:85:dd:a7:bf:b8:
         74:66:8f:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEP5gkhMo7vR5y785agWMMkwTU3owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMTE4WhcNMjUwNzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MmFiNjE4Nzk2MzM5MTMwOTc4Nzk1M2Q5OWJiNDVlM2U5
ODQzMDBkMTQ4ZWRkNzIzMjkwZjU1N2Q1ZWViZDhjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwJAiKsbiTg1+cpW8RDfbfOJRjIHzRrBUW/jiyJiSo9Vwx
ggl1GvtOadkCdQsoTe1T25ZuDGUi+/jUb2mKwL8V0Y66dG3mneglIYQLECD2V7G1
Dg2/BpRhJxOQUIJ21K2qgpcOw6LOy7lEkZpQNJT8sNWzf1g7AyqZlXdi9bUriVCA
OWmWdiQ9ovrpJ+CQUDzVqTGbeFKAs1rWa/UEdIZv/t/XmI7LXB8l3N/qp9wopZr2
jg9yuSU/7ufkSUm9Vm0WKvNqHkz3ZLnaPqucNQpBmQVkAN4JO/LGorXcW26/D+Q5
5P07uCxzNp8kJTzYhKGCTdsTr3GEYveDpikB2ogBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdvj5apYvGz6x4R5u8IvTYeB7iBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2ZDYxY2Q0LTIyZjktNDYxMC1iM2NhLWI3MzlhNTdlNzM5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQNoiAwDQYJKoZIhvcNAQELBQADggEBACcnZZfr+OMIOcQivWfNKzp1WARn
s8HpKavZx9KY1JIkmLOhaxvOo9BCpHUrN9MAQDFWGpvardr3x3zqdGgN/hQb8w/v
1tL9r03urmNukl8S7SO5bt1FMViqWNdFqc37gvH4mvBQcRkYy8H5R1EuFi/RtVGQ
dsipu08L7XBhujde+Zl6T8Jvf/gSsA1gWAxq7ngoLzg2m63qlAKDXGF2m/UEtxli
L20nzZMzFeF+40W8Q9gXKqh2yZEjCCgFWnygUUdaj8N/3mwWd5tnA/VxzJLIcKaa
JE65nSWXvfBzgnJYv9DEBu0vuK9Avofr45FtwEGAqD16gPyF3ae/uHRmjzc=
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:24:35 2025 by rpki-client