Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79008744-e901-4450-b3a9-fee39137948b.roa
File:                     79008744-e901-4450-b3a9-fee39137948b.roa (raw, json)
Hash identifier:          SB2ntJqzV8cEFUP30aeCiCE8CnBA6LTA8dGVSMn3MZk=
Subject key identifier:   C7:08:35:51:D2:7C:DA:CF:3F:97:4F:FD:DC:15:2C:A1:3B:7B:73:FC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12E9A62028F16E98F804AD0D3857E2A97814379F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79008744-e901-4450-b3a9-fee39137948b.roa
Signing time:             Tue 19 Aug 2025 00:40:27 +0000
ROA not before:           Tue 19 Aug 2025 00:40:27 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e9:a6:20:28:f1:6e:98:f8:04:ad:0d:38:57:e2:a9:78:14:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:40:27 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=81bd351b44009e4dbe747723a1d48bdf63d64fae66b16a58d1a9924a224e7816, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:8b:1e:45:96:18:cd:26:61:3e:23:bb:13:
                    b5:5e:63:bc:11:4d:cf:f7:18:95:3b:20:90:0c:3e:
                    02:7a:e8:5c:e2:17:99:bb:3e:68:8d:e6:b0:76:47:
                    62:9d:c6:98:ca:55:06:5a:bc:62:ad:59:16:1d:63:
                    1a:4b:eb:87:da:9b:a7:da:f0:31:21:f6:64:e5:9a:
                    6e:eb:62:19:32:df:c2:8e:10:86:df:87:5a:4e:b9:
                    1f:72:42:82:c0:54:d5:a0:8e:ce:a5:5f:0e:d4:db:
                    6c:02:90:74:ee:77:55:46:60:d4:2f:f0:61:0f:bf:
                    13:0e:a8:c2:4f:9c:d1:91:a3:df:ef:87:c4:32:f3:
                    ad:bd:cd:92:ab:e8:84:f1:a7:72:05:6b:8f:50:8a:
                    58:14:f1:cc:16:97:60:b4:61:42:3a:ae:07:7a:26:
                    11:99:c4:8d:ad:6b:5f:95:17:ba:5a:7e:df:7c:9a:
                    38:83:dd:88:81:3a:83:68:af:9a:1e:17:20:21:9c:
                    83:f5:b6:61:f3:87:79:93:be:33:86:db:d5:dc:b1:
                    46:28:f6:40:de:e4:e8:9c:db:6f:54:d6:81:41:b4:
                    b5:68:96:ce:7b:a7:28:3a:f1:8e:6e:2f:3d:64:f4:
                    ff:88:e7:e6:17:0d:b9:0e:65:61:0c:a0:49:a1:27:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:08:35:51:D2:7C:DA:CF:3F:97:4F:FD:DC:15:2C:A1:3B:7B:73:FC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79008744-e901-4450-b3a9-fee39137948b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:80:a5:18:c7:65:a2:1e:89:1f:41:34:74:8a:3a:c8:f4:
         1c:40:c2:95:ac:93:aa:4d:eb:97:91:8b:15:47:b0:55:72:d2:
         f8:09:55:2b:18:fe:0a:87:29:68:2d:8f:f1:ef:5d:5f:91:9e:
         23:ee:77:ac:4f:d2:46:0b:18:6f:db:3f:7c:6a:ca:56:b6:17:
         62:46:99:0d:39:c7:32:1e:95:b2:ee:f8:5e:ef:ce:84:77:f5:
         1a:26:bc:78:4f:73:91:95:52:ef:8a:ef:25:8b:93:5c:b6:bc:
         12:9d:52:0f:bd:3f:63:35:29:4d:f0:78:a1:de:a1:ea:4c:4d:
         93:e0:51:74:ee:c2:02:49:90:46:12:1e:b2:ab:78:7f:dd:8c:
         4f:60:04:4e:8e:c1:56:61:d5:04:50:f2:ab:b8:6b:67:a2:5d:
         4b:7d:0b:02:28:6b:ec:e9:4d:49:97:cc:4a:43:83:14:84:91:
         0f:36:b1:9f:1c:b6:fb:53:65:41:dc:c2:70:74:d3:d3:49:ba:
         ce:18:70:21:34:f2:18:66:c2:6a:06:35:e8:26:3a:fb:d7:9f:
         05:ff:3c:24:79:dd:9f:b0:80:cb:1d:11:5d:34:50:6e:f6:e4:
         e4:e2:9d:4e:e4:72:89:ee:49:21:6a:12:36:1b:ec:48:5c:61:
         34:93:13:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEummICjxbpj4BK0NOFfiqXgUN58wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDA0MDI3WhcNMjUwOTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MWJkMzUxYjQ0MDA5ZTRkYmU3NDc3MjNhMWQ0OGJkZjYz
ZDY0ZmFlNjZiMTZhNThkMWE5OTI0YTIyNGU3ODE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8RoseRZYYzSZhPiO7E7VeY7wRTc/3GJU7IJAMPgJ66Fzi
F5m7PmiN5rB2R2KdxpjKVQZavGKtWRYdYxpL64fam6fa8DEh9mTlmm7rYhky38KO
EIbfh1pOuR9yQoLAVNWgjs6lXw7U22wCkHTud1VGYNQv8GEPvxMOqMJPnNGRo9/v
h8Qy8629zZKr6ITxp3IFa49QilgU8cwWl2C0YUI6rgd6JhGZxI2ta1+VF7paft98
mjiD3YiBOoNor5oeFyAhnIP1tmHzh3mTvjOG29XcsUYo9kDe5Oic229U1oFBtLVo
ls57pyg68Y5uLz1k9P+I5+YXDbkOZWEMoEmhJ+4vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxwg1UdJ82s8/l0/93BUsoTt7c/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5MDA4NzQ0LWU5MDEtNDQ1MC1iM2E5LWZlZTM5MTM3OTQ4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjl0wwDQYJKoZIhvcNAQELBQADggEBACopgKUYx2WiHokfQTR0ijrI9BxA
wpWsk6pN65eRixVHsFVy0vgJVSsY/gqHKWgtj/HvXV+RniPud6xP0kYLGG/bP3xq
yla2F2JGmQ05xzIelbLu+F7vzoR39RomvHhPc5GVUu+K7yWLk1y2vBKdUg+9P2M1
KU3weKHeoepMTZPgUXTuwgJJkEYSHrKreH/djE9gBE6OwVZh1QRQ8qu4a2eiXUt9
CwIoa+zpTUmXzEpDgxSEkQ82sZ8ctvtTZUHcwnB009NJus4YcCE08hhmwmoGNegm
OvvXnwX/PCR53Z+wgMsdEV00UG725OTinU7kconuSSFqEjYb7EhcYTSTE/Q=
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:06:17 2025 by rpki-client