Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa
File:                     f77092a1-256a-4452-84c4-0af25699a382.roa (raw, json)
Hash identifier:          oYjWp7bJhNvm6zJUTt4QMAM67f9w7W2ZpecvVM54M58=
Subject key identifier:   8F:0E:EE:19:12:A8:76:6E:69:B7:CD:31:46:3C:AB:43:2B:E2:22:E5
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       29E3C02D3174F85E548D10240DCE4F9C60188B43
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa
Signing time:             Tue 20 May 2025 15:30:39 +0000
ROA not before:           Tue 20 May 2025 15:30:39 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:c0:2d:31:74:f8:5e:54:8d:10:24:0d:ce:4f:9c:60:18:8b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: May 20 15:30:39 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=bbfd2002486afe2c75151d316b63736aad1e52badffcf6755b5e77f83ebd06c4, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:da:b4:0c:f4:7e:55:e4:14:43:d6:91:0f:
                    54:91:7b:79:50:00:fd:13:4a:6e:5b:9a:4e:3d:0d:
                    45:a0:45:7b:89:73:ea:89:d8:0f:44:fb:9c:a7:95:
                    75:40:e0:7d:e8:2f:20:f6:1a:d8:0c:63:10:3e:f2:
                    24:34:dc:1a:a2:15:6a:89:b9:f1:4e:00:25:9a:1e:
                    86:2e:4c:7a:55:f8:e5:dc:81:80:ae:27:92:d4:f8:
                    c8:ea:df:5e:69:ee:05:fb:a8:a3:a9:8e:06:86:27:
                    df:84:bd:00:bc:43:ad:0a:ea:80:19:68:0e:69:a5:
                    80:4c:54:b6:78:1e:8c:4c:a0:9d:31:1b:87:be:01:
                    79:cc:8a:0c:e0:85:53:c7:1e:65:44:2f:da:d5:83:
                    8f:a3:0e:73:dd:35:ae:fd:f5:0e:c5:51:c1:ac:c5:
                    26:58:dc:59:f8:08:0f:fe:c8:4a:2a:46:76:f9:e2:
                    f2:ac:6b:a0:5c:08:2f:7f:37:58:82:4d:3c:25:36:
                    e3:96:98:0b:e4:64:8a:05:02:4e:03:26:34:de:b8:
                    67:2b:47:7e:fe:dd:11:91:8e:b9:0f:0b:4a:ea:b6:
                    cf:49:29:67:80:09:d9:16:c7:b1:34:31:3d:43:76:
                    42:8a:df:12:81:05:97:0a:35:7c:04:ed:27:6b:b7:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:EE:19:12:A8:76:6E:69:B7:CD:31:46:3C:AB:43:2B:E2:22:E5
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/f77092a1-256a-4452-84c4-0af25699a382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:21:e1:ec:f8:e5:66:14:39:a8:7d:61:2c:9d:27:68:bd:b3:
         61:d8:f4:e8:7f:9f:8d:b6:b9:8c:29:d8:14:35:be:fa:24:84:
         a1:0b:e6:61:ad:7c:20:1a:e8:cb:11:2f:68:04:9b:2d:da:61:
         f9:d2:cc:1e:17:de:e5:ac:67:db:f8:27:d7:87:d9:a3:4f:2a:
         97:16:d0:8f:28:44:d1:5a:4e:c5:fa:d6:7d:b4:20:d0:60:f7:
         7f:d1:df:96:b1:61:87:76:2f:fd:a6:f7:0c:ea:1d:10:ea:54:
         7d:06:dd:d3:e8:7c:68:27:a9:c2:d8:49:d3:48:ba:98:aa:03:
         b9:b7:b6:e3:f4:82:b0:a0:1a:db:30:f7:2d:0e:81:56:94:53:
         c6:c0:49:be:15:4b:47:1a:ca:bc:19:33:a1:d6:db:7d:ed:39:
         61:91:e2:ef:4f:35:85:f1:42:5a:4c:ad:f7:34:3b:da:20:f1:
         fe:21:93:52:ad:36:d0:0d:d4:37:fe:49:a6:07:2e:ec:bb:d6:
         e8:0a:05:40:e8:07:9f:bb:3a:b2:6c:da:f0:10:3d:4c:a0:54:
         dc:a3:31:a0:ec:c5:c0:78:dc:db:2a:14:2f:a3:bd:3d:ff:8b:
         6b:9a:d6:8b:24:ba:33:2f:52:33:d9:87:6d:91:41:d8:2f:bf:
         0f:98:0f:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKePALTF0+F5UjRAkDc5PnGAYi0MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDM5WhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYmZkMjAwMjQ4NmFmZTJjNzUxNTFkMzE2YjYzNzM2YWFk
MWU1MmJhZGZmY2Y2NzU1YjVlNzdmODNlYmQwNmM0MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzFNq0DPR+VeQUQ9aRD1SRe3lQAP0TSm5bmk49DUWgRXuJ
c+qJ2A9E+5ynlXVA4H3oLyD2GtgMYxA+8iQ03BqiFWqJufFOACWaHoYuTHpV+OXc
gYCuJ5LU+Mjq315p7gX7qKOpjgaGJ9+EvQC8Q60K6oAZaA5ppYBMVLZ4HoxMoJ0x
G4e+AXnMigzghVPHHmVEL9rVg4+jDnPdNa799Q7FUcGsxSZY3Fn4CA/+yEoqRnb5
4vKsa6BcCC9/N1iCTTwlNuOWmAvkZIoFAk4DJjTeuGcrR37+3RGRjrkPC0rqts9J
KWeACdkWx7E0MT1DdkKK3xKBBZcKNXwE7Sdrt8vbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjw7uGRKodm5pt80xRjyrQyviIuUwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5L2Y3NzA5MmExLTI1NmEtNDQ1Mi04NGM0LTBhZjI1Njk5YTM4Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUycKAwDQYJKoZIhvcNAQELBQADggEBAGAh4ez45WYUOah9YSydJ2i9s2HY
9Oh/n422uYwp2BQ1vvokhKEL5mGtfCAa6MsRL2gEmy3aYfnSzB4X3uWsZ9v4J9eH
2aNPKpcW0I8oRNFaTsX61n20INBg93/R35axYYd2L/2m9wzqHRDqVH0G3dPofGgn
qcLYSdNIupiqA7m3tuP0grCgGtsw9y0OgVaUU8bASb4VS0cayrwZM6HW233tOWGR
4u9PNYXxQlpMrfc0O9og8f4hk1KtNtAN1Df+SaYHLuy71ugKBUDoB5+7OrJs2vAQ
PUygVNyjMaDsxcB43NsqFC+jvT3/i2ua1oskujMvUjPZh22RQdgvvw+YDyg=
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:49:51 2025 by rpki-client