Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6256fa50-0c45-4c1f-83fa-55a665592759.roa
File:                     6256fa50-0c45-4c1f-83fa-55a665592759.roa (raw, json)
Hash identifier:          8AvbiOjJwQfcNn4+DjNMKec901UVD9gemUomEZOWv9Q=
Subject key identifier:   E6:42:2D:6F:3F:8B:CF:19:11:23:AD:23:56:B4:68:E3:E6:7A:6D:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CD69C920B0525E0EA63C124A6C037F7BBE696DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6256fa50-0c45-4c1f-83fa-55a665592759.roa
Signing time:             Mon 11 Aug 2025 15:10:21 +0000
ROA not before:           Mon 11 Aug 2025 15:10:21 +0000
ROA not after:            Mon 15 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:9c:92:0b:05:25:e0:ea:63:c1:24:a6:c0:37:f7:bb:e6:96:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 15:10:21 2025 GMT
            Not After : Sep 15 23:59:59 2025 GMT
        Subject: serialNumber=0d32ec420385e119e90e6050d9350f29e60702921e2ba0bd566ef809ed82b1ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:9c:8c:05:71:a4:2b:53:15:21:0c:26:ef:
                    3f:d2:ee:29:0b:aa:97:2a:41:2a:8a:49:0a:db:76:
                    a0:72:ea:eb:b7:e4:96:36:4b:4b:4c:53:f5:50:a9:
                    a7:44:93:af:e1:9c:e4:cf:c4:24:1b:73:a3:eb:68:
                    37:15:9a:6e:55:e8:7d:08:3f:0a:37:75:1c:ae:30:
                    8e:9d:05:2b:ab:cc:cf:18:61:5c:50:e5:15:ad:f7:
                    b1:18:46:fe:63:4f:df:4a:83:9b:0f:e5:42:8c:be:
                    c0:f5:6b:65:8b:bc:7e:c3:b8:8c:6d:43:a5:eb:2b:
                    55:23:44:a8:8b:b7:51:0b:78:de:34:6d:ac:c4:24:
                    66:4d:5b:e5:2c:93:71:ae:57:0b:3b:48:f2:94:25:
                    6f:ea:4f:bd:1f:ff:06:87:7a:d6:e3:ab:7f:ea:5c:
                    bb:e8:85:ed:97:d1:41:1d:cc:9e:f4:8b:ee:20:6c:
                    1e:8a:99:42:e7:6f:f8:a5:e1:e1:f9:b0:46:47:5d:
                    76:77:e9:28:ea:c6:ee:a0:36:16:a2:60:86:0c:55:
                    94:13:53:4d:12:0c:71:d4:23:36:3d:97:69:a1:1d:
                    33:7f:1d:3d:5e:de:06:75:81:6d:d3:aa:53:e4:ca:
                    8d:36:51:9e:68:1c:da:02:b5:90:9b:33:60:c7:36:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:42:2D:6F:3F:8B:CF:19:11:23:AD:23:56:B4:68:E3:E6:7A:6D:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6256fa50-0c45-4c1f-83fa-55a665592759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:41:3c:34:52:5c:cc:5d:fb:a6:fa:b7:38:e0:92:40:56:
         27:cc:a9:f6:2e:06:da:7e:4a:db:b7:13:16:ad:fc:7f:5b:df:
         6b:0d:ca:71:dd:d1:0a:f4:8f:c7:f5:3b:de:18:41:38:0e:45:
         2f:2f:d3:14:91:5c:13:d9:cd:18:93:35:9d:9e:c0:5f:29:24:
         3b:28:94:d2:16:5b:ca:0f:c8:1c:9e:9a:d3:af:14:5f:6b:0e:
         80:86:c1:3e:96:b1:f6:f6:99:30:48:e7:91:65:7e:34:52:5f:
         8b:9b:fd:67:a1:7f:90:88:f5:0e:20:42:d1:17:5a:d1:61:c7:
         f8:94:e5:dc:7d:f0:e2:bf:73:72:5f:9e:1a:ab:eb:b7:a4:1c:
         03:22:cc:63:2c:9d:34:a7:e7:21:80:bc:7a:71:29:9e:7e:19:
         1e:05:ce:10:4c:84:1a:dd:30:fd:2f:01:6c:a5:10:90:9f:00:
         cd:32:d4:f8:04:23:2a:0e:4d:5a:17:f7:c2:17:fe:53:a4:14:
         e6:18:9f:f0:a4:2f:79:1a:03:4f:4c:07:ab:4c:0f:3f:cf:f4:
         59:c9:6a:d3:44:ed:92:22:d8:46:a0:6b:ce:a9:92:0f:5d:c1:
         24:05:52:3d:dc:5c:13:37:71:99:10:f5:58:34:dd:fc:cb:0a:
         1b:34:70:f1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPNackgsFJeDqY8EkpsA397vmltswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUxMDIxWhcNMjUwOTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZDMyZWM0MjAzODVlMTE5ZTkwZTYwNTBkOTM1MGYyOWU2
MDcwMjkyMWUyYmEwYmQ1NjZlZjgwOWVkODJiMWNhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvsZyMBXGkK1MVIQwm7z/S7ikLqpcqQSqKSQrbdqBy6uu3
5JY2S0tMU/VQqadEk6/hnOTPxCQbc6PraDcVmm5V6H0IPwo3dRyuMI6dBSurzM8Y
YVxQ5RWt97EYRv5jT99Kg5sP5UKMvsD1a2WLvH7DuIxtQ6XrK1UjRKiLt1ELeN40
bazEJGZNW+Usk3GuVws7SPKUJW/qT70f/waHetbjq3/qXLvohe2X0UEdzJ70i+4g
bB6KmULnb/il4eH5sEZHXXZ36Sjqxu6gNhaiYIYMVZQTU00SDHHUIzY9l2mhHTN/
HT1e3gZ1gW3TqlPkyo02UZ5oHNoCtZCbM2DHNl/tAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU5kItbz+LzxkRI60jVrRo4+Z6be0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyNTZmYTUwLTBjNDUtNGMxZi04M2ZhLTU1YTY2NTU5Mjc1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQHjANBgkqhkiG9w0BAQsFAAOCAQEALGxBPDRSXMxd+6b6tzjgkkBWJ8yp
9i4G2n5K27cTFq38f1vfaw3Kcd3RCvSPx/U73hhBOA5FLy/TFJFcE9nNGJM1nZ7A
XykkOyiU0hZbyg/IHJ6a068UX2sOgIbBPpax9vaZMEjnkWV+NFJfi5v9Z6F/kIj1
DiBC0Rda0WHH+JTl3H3w4r9zcl+eGqvrt6QcAyLMYyydNKfnIYC8enEpnn4ZHgXO
EEyEGt0w/S8BbKUQkJ8AzTLU+AQjKg5NWhf3whf+U6QU5hif8KQveRoDT0wHq0wP
P8/0Wclq00TtkiLYRqBrzqmSD13BJAVSPdxcEzdxmRD1WDTd/MsKGzRw8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:24 2025 by rpki-client