Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
File:                     269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa (raw, json)
Hash identifier:          bA+Uru920RXUiFBVIdua7Xk/wnSe7O5oLgrS//bC/P8=
Subject key identifier:   BF:71:D8:A5:C5:5E:84:EE:83:E3:22:2A:91:6A:EF:CE:03:AD:FB:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F1896D8AA17C1ECD89DD4FD997D1A7BC006BD11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
Signing time:             Fri 09 May 2025 00:11:38 +0000
ROA not before:           Fri 09 May 2025 00:11:38 +0000
ROA not after:            Fri 13 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:18:96:d8:aa:17:c1:ec:d8:9d:d4:fd:99:7d:1a:7b:c0:06:bd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:11:38 2025 GMT
            Not After : Jun 13 23:59:59 2025 GMT
        Subject: serialNumber=d7d57f367e371bf7773cbc157dbb76223ef7a3e861792ca2713d0d22ef4e1af8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:6e:ee:bd:38:8b:ee:0d:26:b0:91:1a:8e:
                    d6:99:d4:8a:a6:34:6e:a8:a3:1e:d4:c2:2e:18:b5:
                    2b:95:b2:b3:a3:af:9f:ff:84:e4:df:14:52:52:1e:
                    97:14:92:85:b4:ee:1e:01:97:a7:e2:67:cf:7c:f2:
                    a6:47:9d:c5:9e:be:a7:6b:f9:29:9c:13:5e:e8:88:
                    02:1b:c6:04:ac:fb:14:38:48:62:fb:44:e0:66:a6:
                    d2:cd:48:08:df:39:27:1d:a0:ca:8c:d5:97:44:67:
                    76:85:4f:1f:ea:70:50:43:88:1a:ce:c9:e1:e4:8f:
                    74:2a:78:50:41:6a:91:53:b4:ff:e9:03:6a:cb:18:
                    d7:03:38:5c:10:23:6f:ff:a3:f1:38:ec:f0:f8:c3:
                    73:97:71:cb:f9:09:bd:f0:1f:d4:aa:67:f1:8b:c9:
                    4d:03:56:a0:8d:2b:4a:b2:29:54:a3:38:8a:ee:ba:
                    11:bd:c6:78:52:cc:70:a0:13:9d:68:b8:e1:d3:2b:
                    2e:a9:fc:c0:84:77:5b:d5:9f:ab:67:b6:a8:d5:af:
                    32:61:5c:bd:25:0e:3d:5e:93:31:8d:db:3d:aa:c8:
                    af:b5:87:65:2d:e9:1a:c2:84:4e:56:41:ab:7d:91:
                    5f:5f:4e:10:39:c0:e3:f7:d2:fb:8d:a5:dc:77:66:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:D8:A5:C5:5E:84:EE:83:E3:22:2A:91:6A:EF:CE:03:AD:FB:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:dc:93:a4:08:d1:d1:68:2b:50:f0:24:69:d1:56:34:5e:e9:
         9e:35:a6:a3:32:10:c9:8d:de:40:31:3e:b2:9c:65:8b:28:00:
         61:3a:79:94:4b:20:e1:29:85:e9:2a:68:2c:f9:ad:a2:aa:05:
         61:04:5e:8c:49:3c:16:70:99:0c:31:0b:39:ee:c5:8c:2f:2b:
         fc:a0:a1:5f:02:e7:32:bf:d2:af:60:fe:47:4d:53:02:0b:f8:
         3c:19:35:c5:01:5e:28:04:72:ad:bc:3a:08:44:ce:55:36:b1:
         51:c8:5d:ff:ee:fc:10:10:f7:86:73:04:b0:13:a9:ad:a4:24:
         2a:16:38:a4:1e:02:df:ed:a1:41:58:19:8e:0e:b2:51:68:25:
         0e:c0:84:8c:73:aa:68:7d:d3:c4:61:ad:fd:35:00:14:56:47:
         9f:04:0e:39:d2:92:01:3d:f8:8f:1b:c6:bd:79:83:b2:72:99:
         08:17:9d:d8:6a:64:9d:0d:b6:23:ec:20:42:79:35:9a:74:d2:
         70:3c:25:c4:93:fc:36:76:0d:46:8a:38:1e:84:cc:37:37:9b:
         11:5b:01:c5:7c:1a:fa:3c:1e:f6:39:d8:33:d1:78:92:ff:30:
         43:73:0a:5c:0b:5e:72:36:8b:82:65:6c:2a:16:02:b9:5c:ed:
         8d:cb:70:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXxiW2KoXwezYndT9mX0ae8AGvREwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAxMTM4WhcNMjUwNjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkN2Q1N2YzNjdlMzcxYmY3NzczY2JjMTU3ZGJiNzYyMjNl
ZjdhM2U4NjE3OTJjYTI3MTNkMGQyMmVmNGUxYWY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQ1m7uvTiL7g0msJEajtaZ1IqmNG6oox7Uwi4YtSuVsrOj
r5//hOTfFFJSHpcUkoW07h4Bl6fiZ8988qZHncWevqdr+SmcE17oiAIbxgSs+xQ4
SGL7ROBmptLNSAjfOScdoMqM1ZdEZ3aFTx/qcFBDiBrOyeHkj3QqeFBBapFTtP/p
A2rLGNcDOFwQI2//o/E47PD4w3OXccv5Cb3wH9SqZ/GLyU0DVqCNK0qyKVSjOIru
uhG9xnhSzHCgE51ouOHTKy6p/MCEd1vVn6tntqjVrzJhXL0lDj1ekzGN2z2qyK+1
h2Ut6RrChE5WQat9kV9fThA5wOP30vuNpdx3ZhAnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUv3HYpcVehO6D4yIqkWrvzgOt+7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2OWNlYmM5LWNkM2EtNDZkNi1iNmFiLWYyNTQ2Y2ZjNWY0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4SFAwDQYJKoZIhvcNAQELBQADggEBAM3ck6QI0dFoK1DwJGnRVjRe6Z41
pqMyEMmN3kAxPrKcZYsoAGE6eZRLIOEphekqaCz5raKqBWEEXoxJPBZwmQwxCznu
xYwvK/ygoV8C5zK/0q9g/kdNUwIL+DwZNcUBXigEcq28OghEzlU2sVHIXf/u/BAQ
94ZzBLATqa2kJCoWOKQeAt/toUFYGY4OslFoJQ7AhIxzqmh908Rhrf01ABRWR58E
DjnSkgE9+I8bxr15g7JymQgXndhqZJ0NtiPsIEJ5NZp00nA8JcST/DZ2DUaKOB6E
zDc3mxFbAcV8Gvo8HvY52DPReJL/MENzClwLXnI2i4JlbCoWArlc7Y3LcM0=
-----END CERTIFICATE-----
Generated at Sun May 11 19:11:23 2025 by rpki-client