Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa
File:                     80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa (raw, json)
Hash identifier:          BtD3YJGvD9qQujjVRBAkob5Po6shq+WwBfN0xp5MMIk=
Subject key identifier:   9A:55:D0:97:F8:31:BE:F2:EE:FA:D5:7C:8E:F5:2E:32:DB:B0:E1:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A67E6C30135288CCAB1A4344F6DEC1EDCEE593B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa
Signing time:             Tue 17 Jun 2025 00:10:32 +0000
ROA not before:           Tue 17 Jun 2025 00:10:32 +0000
ROA not after:            Tue 22 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:67:e6:c3:01:35:28:8c:ca:b1:a4:34:4f:6d:ec:1e:dc:ee:59:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 17 00:10:32 2025 GMT
            Not After : Jul 22 23:59:59 2025 GMT
        Subject: serialNumber=6fc2dfce18146d8eb4e28737bbb8d0d9ea5aa348925d250d49888e5ff866dee1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8b:42:83:ff:4b:e9:ef:e7:e1:93:f8:92:1a:
                    e0:1f:8f:83:77:12:b5:ac:be:c5:45:f4:85:3f:78:
                    b7:1e:97:1b:ef:ce:56:44:5f:7d:0f:e4:51:0d:15:
                    23:73:8d:3d:92:4c:c6:0f:86:8d:37:1b:f3:3b:ef:
                    0a:77:5f:91:bb:89:37:45:08:92:4b:3b:21:0d:7b:
                    59:57:a0:c6:02:2e:96:1a:bd:b2:eb:f6:17:88:79:
                    a5:88:af:71:f5:93:e0:57:55:b0:7a:87:f5:cb:e3:
                    16:b8:87:47:36:fc:42:16:7e:a8:65:a9:b9:2d:d2:
                    c1:e8:78:8c:d4:93:3d:10:0e:cc:93:ba:b5:d4:91:
                    6b:c0:98:16:6b:e3:8c:56:d1:de:93:d2:f4:f7:76:
                    33:ab:80:de:6c:e4:fe:f8:9d:ee:ae:a8:f1:59:5c:
                    3b:fd:14:2b:fa:bc:6c:b4:9d:c0:f2:1d:c3:c6:3f:
                    4f:d8:a7:6c:97:97:f6:e0:d5:73:62:26:c2:e9:b8:
                    c8:0e:f7:39:ca:6a:93:22:aa:a0:f8:ff:5f:2c:22:
                    0f:60:cb:a8:8e:10:59:2e:ae:9b:92:89:64:aa:5a:
                    6c:30:cc:69:ba:c5:20:12:b0:e9:7a:e9:ea:39:99:
                    b2:68:22:4c:bc:31:26:ad:3e:09:9d:22:09:0f:99:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:55:D0:97:F8:31:BE:F2:EE:FA:D5:7C:8E:F5:2E:32:DB:B0:E1:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80504e6a-5c12-479d-b42f-a9ddcb2639c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:91:41:28:73:51:05:93:bf:2b:ba:1f:28:a3:ac:08:90:77:
         d7:c6:a6:0e:a2:ec:a1:fa:70:e0:ec:b3:fe:eb:e9:24:e3:e8:
         36:1a:0f:0d:16:14:64:e3:14:3a:99:ac:6e:54:31:b1:74:9e:
         3b:d5:f8:a1:70:b7:46:73:b2:ab:fe:ca:0b:18:12:e8:b9:42:
         aa:89:46:fd:76:a2:66:e8:b8:f2:bc:fe:54:b5:d1:fa:76:4c:
         5b:ab:cc:d2:3e:35:ef:17:a6:04:09:21:3e:67:1b:a0:38:b1:
         5b:2e:d6:2a:58:a5:ed:e6:2a:25:34:12:43:18:f1:50:fa:8b:
         45:61:47:7e:05:65:e1:73:40:8c:a9:5b:4a:63:ca:f1:93:a5:
         31:f0:93:7b:52:ac:9a:a4:16:8f:40:57:01:57:cb:3c:0e:47:
         8d:89:82:c3:ed:df:86:b8:51:e8:25:b4:21:9c:de:bf:41:f6:
         80:0d:79:fd:1a:bc:36:6b:d1:54:90:01:4c:de:68:7a:1d:d2:
         20:04:d6:a5:16:3e:df:ef:a3:8e:f2:00:5a:7d:ae:da:99:b9:
         07:07:f5:0a:b3:37:64:e2:85:6a:27:3f:51:0e:28:5f:90:2a:
         4b:25:fd:a9:83:4c:a2:72:49:bd:c5:77:d4:27:58:83:64:b7:
         bd:ee:9a:17
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUemfmwwE1KIzKsaQ0T23sHtzuWTswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMDMyWhcNMjUwNzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZmMyZGZjZTE4MTQ2ZDhlYjRlMjg3MzdiYmI4ZDBkOWVh
NWFhMzQ4OTI1ZDI1MGQ0OTg4OGU1ZmY4NjZkZWUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsi0KD/0vp7+fhk/iSGuAfj4N3ErWsvsVF9IU/eLcelxvv
zlZEX30P5FENFSNzjT2STMYPho03G/M77wp3X5G7iTdFCJJLOyENe1lXoMYCLpYa
vbLr9heIeaWIr3H1k+BXVbB6h/XL4xa4h0c2/EIWfqhlqbkt0sHoeIzUkz0QDsyT
urXUkWvAmBZr44xW0d6T0vT3djOrgN5s5P74ne6uqPFZXDv9FCv6vGy0ncDyHcPG
P0/Yp2yXl/bg1XNiJsLpuMgO9znKapMiqqD4/18sIg9gy6iOEFkurpuSiWSqWmww
zGm6xSASsOl66eo5mbJoIky8MSatPgmdIgkPmYhzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmlXQl/gxvvLu+tV8jvUuMtuw4ekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwNTA0ZTZhLTVjMTItNDc5ZC1iNDJmLWE5ZGRjYjI2MzljNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAvcUwDQYJKoZIhvcNAQELBQADggEBAAORQShzUQWTvyu6HyijrAiQd9fG
pg6i7KH6cODss/7r6STj6DYaDw0WFGTjFDqZrG5UMbF0njvV+KFwt0Zzsqv+ygsY
Eui5QqqJRv12ombouPK8/lS10fp2TFurzNI+Ne8XpgQJIT5nG6A4sVsu1ipYpe3m
KiU0EkMY8VD6i0VhR34FZeFzQIypW0pjyvGTpTHwk3tSrJqkFo9AVwFXyzwOR42J
gsPt34a4UegltCGc3r9B9oANef0avDZr0VSQAUzeaHod0iAE1qUWPt/vo47yAFp9
rtqZuQcH9QqzN2TihWonP1EOKF+QKksl/amDTKJySb3Fd9QnWINkt73umhc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:33 2025 by rpki-client