Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01aaad2b-8349-48b0-beda-23e6cb0363d7.roa
File:                     01aaad2b-8349-48b0-beda-23e6cb0363d7.roa (raw, json)
Hash identifier:          9Ql4wPHZoPiQr3npdXzB6vXZ29byKrktTk0oUGGP+XA=
Subject key identifier:   A2:34:59:7D:E4:52:0A:B6:29:24:E5:02:67:A4:1C:53:43:72:E1:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FD38775ADAB2DB77E9A8BC169F6AACE6360109A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01aaad2b-8349-48b0-beda-23e6cb0363d7.roa
Signing time:             Fri 22 Aug 2025 00:31:15 +0000
ROA not before:           Fri 22 Aug 2025 00:31:15 +0000
ROA not after:            Fri 26 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.230.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:87:75:ad:ab:2d:b7:7e:9a:8b:c1:69:f6:aa:ce:63:60:10:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 22 00:31:15 2025 GMT
            Not After : Sep 26 23:59:59 2025 GMT
        Subject: serialNumber=746c20dc4e424a8d2a5b1dca0c017643e0801994eb13c2f1baa1afa74b0d14c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:b2:db:4c:c2:3d:1f:fc:54:d4:60:2c:df:
                    c5:8d:0e:a0:01:fa:a7:c5:05:62:f7:ba:42:b3:fe:
                    7f:fe:62:ed:90:3b:3b:d7:60:ec:ca:fc:0b:42:e4:
                    cb:d3:4c:9c:79:93:89:5c:8f:a7:38:f0:a3:f1:4c:
                    e3:44:8e:17:83:18:b3:41:30:a7:97:be:a1:0f:63:
                    59:cd:a8:a5:85:1e:d7:41:43:bd:49:60:6f:3d:82:
                    dd:2e:04:38:d4:8d:af:0f:8e:80:4c:30:78:4c:34:
                    b0:47:b2:36:c9:e2:de:72:8b:90:76:b0:4b:fc:8b:
                    95:df:4c:42:72:59:82:7d:d9:3e:a5:d2:5d:f8:fe:
                    b0:dc:c9:d4:e6:6b:27:e3:75:ca:d2:0b:b1:55:cb:
                    11:1f:ac:38:42:a9:7a:f7:02:bb:4d:c4:2a:c2:73:
                    8a:34:fb:b1:17:f0:37:f4:99:19:a0:9f:86:b0:3c:
                    d3:fa:4d:82:fe:66:23:34:d4:34:52:7d:42:6a:c4:
                    60:cb:f4:78:a2:51:73:68:87:87:e8:55:1a:0c:33:
                    78:5f:a3:65:8c:93:95:e1:f1:02:47:a3:ca:ea:6c:
                    1f:b2:40:78:88:3e:2f:be:0f:d0:d8:d1:04:56:86:
                    34:6d:a4:cc:22:34:34:0d:9a:7b:cb:12:09:27:03:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:59:7D:E4:52:0A:B6:29:24:E5:02:67:A4:1C:53:43:72:E1:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01aaad2b-8349-48b0-beda-23e6cb0363d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:67:88:7d:08:df:dc:39:78:e5:f5:37:e8:e7:78:a0:7d:21:
         28:69:b5:13:04:29:3d:4f:44:02:65:12:b7:fe:5f:af:18:3d:
         0e:6c:b7:60:85:6c:bc:89:91:ce:64:fe:34:8d:28:85:8e:05:
         44:ea:58:3e:a4:0c:d4:19:57:7a:15:86:f1:3c:9a:aa:9e:07:
         d7:fb:23:09:c7:87:e9:01:c3:91:ff:53:da:e6:26:f1:7a:ff:
         68:15:c8:00:80:b0:cb:16:06:49:f9:ab:da:65:a5:d2:e3:24:
         f2:ba:89:29:68:f8:d0:5e:f2:dc:6c:d6:1c:3e:9e:2d:96:fe:
         ab:a8:42:d2:2b:6d:c2:c3:71:f1:f3:4b:02:06:58:3a:ed:7c:
         d9:03:9b:40:6c:64:c1:78:ee:69:6e:d9:65:58:70:e1:77:e7:
         54:ca:a8:6b:aa:e6:c5:f4:c7:18:76:80:40:f6:c7:25:65:f5:
         48:8f:7d:06:e2:34:20:4b:2e:2a:92:ce:3e:29:a8:b3:f8:c7:
         2d:96:c6:ab:40:c0:2b:76:17:5b:2d:41:2a:0a:ef:9d:36:1a:
         a4:98:e2:97:c4:1a:7f:b6:79:9e:e5:f2:f1:32:6f:74:22:a8:
         9c:bb:2c:26:fc:19:c9:ca:24:b8:dc:cf:f8:47:bd:9a:8e:8d:
         69:95:e5:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf9OHda2rLbd+movBafaqzmNgEJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAzMTE1WhcNMjUwOTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDZjMjBkYzRlNDI0YThkMmE1YjFkY2EwYzAxNzY0M2Uw
ODAxOTk0ZWIxM2MyZjFiYWExYWZhNzRiMGQxNGM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC56rLbTMI9H/xU1GAs38WNDqAB+qfFBWL3ukKz/n/+Yu2Q
OzvXYOzK/AtC5MvTTJx5k4lcj6c48KPxTONEjheDGLNBMKeXvqEPY1nNqKWFHtdB
Q71JYG89gt0uBDjUja8PjoBMMHhMNLBHsjbJ4t5yi5B2sEv8i5XfTEJyWYJ92T6l
0l34/rDcydTmayfjdcrSC7FVyxEfrDhCqXr3ArtNxCrCc4o0+7EX8Df0mRmgn4aw
PNP6TYL+ZiM01DRSfUJqxGDL9HiiUXNoh4foVRoMM3hfo2WMk5Xh8QJHo8rqbB+y
QHiIPi++D9DY0QRWhjRtpMwiNDQNmnvLEgknA6wnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUojRZfeRSCrYpJOUCZ6QcU0Ny4Q8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAxYWFhZDJiLTgzNDktNDhiMC1iZWRhLTIzZTZjYjAzNjNkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADY5lwwDQYJKoZIhvcNAQELBQADggEBAM5niH0I39w5eOX1N+jneKB9IShp
tRMEKT1PRAJlErf+X68YPQ5st2CFbLyJkc5k/jSNKIWOBUTqWD6kDNQZV3oVhvE8
mqqeB9f7IwnHh+kBw5H/U9rmJvF6/2gVyACAsMsWBkn5q9plpdLjJPK6iSlo+NBe
8txs1hw+ni2W/quoQtIrbcLDcfHzSwIGWDrtfNkDm0BsZMF47mlu2WVYcOF351TK
qGuq5sX0xxh2gED2xyVl9UiPfQbiNCBLLiqSzj4pqLP4xy2WxqtAwCt2F1stQSoK
7502GqSY4pfEGn+2eZ7l8vEyb3QiqJy7LCb8GcnKJLjcz/hHvZqOjWmV5Xw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:33:23 2025 by rpki-client