Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa
File:                     0343534b-f673-4820-a35c-761953dd8136.roa (raw, json)
Hash identifier:          ZIbNcl1ot9HogzP2BwkRVE11f5q3NjUU9h3wa2mSodI=
Subject key identifier:   34:90:59:A6:62:78:C6:41:FA:0A:29:C7:40:6D:D9:9C:F4:27:7C:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CEE62772DF1795D65D5E2408F839FBE20B162D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa
Signing time:             Sat 03 May 2025 00:10:25 +0000
ROA not before:           Sat 03 May 2025 00:10:25 +0000
ROA not after:            Sat 07 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        216.73.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ee:62:77:2d:f1:79:5d:65:d5:e2:40:8f:83:9f:be:20:b1:62:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:10:25 2025 GMT
            Not After : Jun  7 23:59:59 2025 GMT
        Subject: serialNumber=7f5de2dad5e4056fdd4be0bee9a537985b01723d34a1e16eb45b33881d608a4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:62:aa:11:b1:02:73:1f:29:b8:cf:10:38:
                    05:ef:9b:3a:15:c2:29:8f:bf:a7:41:dd:97:1d:01:
                    c5:11:2d:1b:7b:f9:37:e6:e5:a8:41:07:40:ce:74:
                    f2:44:27:54:70:71:52:b6:17:a0:2b:fd:c9:2d:a6:
                    ef:f3:8a:98:ff:cf:d1:11:e5:d1:a2:f5:d1:1f:6d:
                    74:4c:09:1b:4f:aa:34:1c:a0:fb:80:be:68:d6:dc:
                    de:99:38:eb:8e:5e:1a:fe:3c:48:30:5c:f4:9b:95:
                    3f:1e:df:d0:9e:0b:75:dd:26:bb:99:c5:03:b1:90:
                    02:d0:71:38:fb:e8:0e:d8:b3:c1:60:03:d2:d7:a3:
                    2e:0c:11:04:4a:8c:15:51:4a:50:15:d9:9b:5a:e3:
                    06:a0:80:85:6a:5e:d4:95:ba:3a:0a:91:ad:c3:31:
                    f9:88:26:b2:6b:46:67:2b:7b:f2:5e:e3:6b:85:fc:
                    ad:a2:49:fc:a8:f5:50:c5:3d:ed:16:09:26:fa:19:
                    15:41:06:84:ff:17:12:6c:90:f3:27:68:21:49:11:
                    23:b1:1b:5f:f9:2d:57:c9:6a:0f:f5:b2:7d:55:47:
                    4a:49:0a:e8:66:11:c3:0d:21:b5:06:87:35:25:cc:
                    bf:dd:12:02:9f:b2:aa:86:8a:e6:02:f4:03:0a:cb:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:59:A6:62:78:C6:41:FA:0A:29:C7:40:6D:D9:9C:F4:27:7C:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0343534b-f673-4820-a35c-761953dd8136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:3c:4c:c4:57:1a:2d:47:ef:1a:f0:ac:ff:3f:07:34:d5:
         8c:6d:ea:78:be:49:5d:cd:a8:33:25:de:37:eb:31:bb:06:1a:
         0a:9b:3f:63:c1:ca:e8:aa:bd:c4:71:ef:94:0d:bd:ab:58:60:
         27:68:12:be:cc:0a:bb:f8:54:b4:98:2c:10:42:c2:33:76:45:
         3f:0e:ac:2e:ff:2e:da:06:88:e1:52:1f:d5:da:5d:00:be:79:
         ad:b5:e9:40:e7:0c:f0:2a:f1:32:61:b7:bc:e5:74:a8:55:3b:
         fd:ae:94:29:fb:b8:b2:82:ab:38:fd:fc:a4:2a:64:f9:08:7b:
         0c:9c:df:44:45:b4:f1:40:ad:e3:61:3d:26:cd:1e:7b:05:59:
         7a:e6:5d:2a:8d:1a:17:7c:1c:45:16:89:8f:2a:61:b6:6c:39:
         ae:46:2e:96:b5:58:dc:ca:a6:e6:1d:83:b2:b3:c6:e6:5d:ff:
         1c:7f:9e:14:73:7e:91:82:f7:ca:fd:2e:e6:2b:3c:52:aa:b8:
         d6:bc:03:89:2f:a7:03:1c:da:cc:77:c3:b0:83:97:46:ee:36:
         da:e5:c1:f8:a3:28:05:50:82:ca:78:19:e5:af:35:33:80:05:
         5e:2f:10:a7:3c:fd:79:63:cd:23:52:12:ae:9c:d3:19:2d:b5:
         7c:93:e2:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHO5idy3xeV1l1eJAj4OfviCxYtkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAxMDI1WhcNMjUwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjVkZTJkYWQ1ZTQwNTZmZGQ0YmUwYmVlOWE1Mzc5ODVi
MDE3MjNkMzRhMWUxNmViNDViMzM4ODFkNjA4YTRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA9WKqEbECcx8puM8QOAXvmzoVwimPv6dB3ZcdAcURLRt7
+Tfm5ahBB0DOdPJEJ1RwcVK2F6Ar/cktpu/zipj/z9ER5dGi9dEfbXRMCRtPqjQc
oPuAvmjW3N6ZOOuOXhr+PEgwXPSblT8e39CeC3XdJruZxQOxkALQcTj76A7Ys8Fg
A9LXoy4MEQRKjBVRSlAV2Zta4waggIVqXtSVujoKka3DMfmIJrJrRmcre/Je42uF
/K2iSfyo9VDFPe0WCSb6GRVBBoT/FxJskPMnaCFJESOxG1/5LVfJag/1sn1VR0pJ
CuhmEcMNIbUGhzUlzL/dEgKfsqqGiuYC9AMKyyAxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNJBZpmJ4xkH6CinHQG3ZnPQnfO8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzNDM1MzRiLWY2NzMtNDgyMC1hMzVjLTc2MTk1M2RkODEzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPYSdAwDQYJKoZIhvcNAQELBQADggEBAI1UPEzEVxotR+8a8Kz/Pwc01Yxt
6ni+SV3NqDMl3jfrMbsGGgqbP2PByuiqvcRx75QNvatYYCdoEr7MCrv4VLSYLBBC
wjN2RT8OrC7/LtoGiOFSH9XaXQC+ea216UDnDPAq8TJht7zldKhVO/2ulCn7uLKC
qzj9/KQqZPkIewyc30RFtPFAreNhPSbNHnsFWXrmXSqNGhd8HEUWiY8qYbZsOa5G
Lpa1WNzKpuYdg7KzxuZd/xx/nhRzfpGC98r9LuYrPFKquNa8A4kvpwMc2sx3w7CD
l0buNtrlwfijKAVQgsp4GeWvNTOABV4vEKc8/XljzSNSEq6c0xkttXyT4mo=
-----END CERTIFICATE-----
Generated at Sat May 10 19:49:11 2025 by rpki-client