Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa
File:                     97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa (raw, json)
Hash identifier:          Ayj92H9SQHVBHOdUa2Yj36q73ZEQyRmQhJXJ0jNsINE=
Subject key identifier:   A7:D1:6E:43:74:EE:41:F1:08:2F:F5:0B:FA:46:28:29:03:CE:66:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E6B5A848F24E1B33A229D41276CE992858AA077
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa
Signing time:             Sat 09 Aug 2025 00:10:28 +0000
ROA not before:           Sat 09 Aug 2025 00:10:28 +0000
ROA not after:            Sat 13 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        74.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6b:5a:84:8f:24:e1:b3:3a:22:9d:41:27:6c:e9:92:85:8a:a0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  9 00:10:28 2025 GMT
            Not After : Sep 13 23:59:59 2025 GMT
        Subject: serialNumber=7ed51df82a7e90fe1e202b7dd371ab6a27c203fa809680d65ebfdd6e40b3678b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:f0:8f:df:50:8c:6a:25:f8:8c:f5:fb:12:
                    cf:a5:69:66:6a:55:ae:99:75:a4:69:fb:ca:81:0b:
                    4f:4d:6a:cd:03:84:00:6e:eb:c1:11:60:1b:99:0b:
                    42:93:2c:05:c3:23:33:89:5c:24:84:68:32:97:b3:
                    9e:de:06:b7:6d:19:20:26:3d:d5:2d:59:42:7d:f6:
                    3c:5e:39:c9:3b:e1:39:28:58:c1:f4:a1:84:93:cb:
                    50:3b:07:d1:5d:c3:ab:db:87:2c:a7:9b:23:5b:ae:
                    d6:b7:e0:30:6f:c0:ca:35:6d:8d:35:eb:74:bb:e0:
                    4e:3b:bb:95:48:61:13:e8:f7:89:3f:1a:c1:9e:e7:
                    53:14:75:84:b5:be:4a:fb:f2:07:98:6e:e2:19:d2:
                    f6:b3:70:16:0d:e7:5f:31:8c:e6:7a:f5:97:9f:f4:
                    a6:a2:b4:f1:df:17:e9:f4:78:f4:aa:8b:36:46:f1:
                    ad:34:10:0d:b3:6f:f1:b8:1c:5f:2b:26:e7:75:9f:
                    4f:e0:25:98:4e:d4:1e:e9:75:b8:f3:ad:e4:80:54:
                    0d:4b:00:4c:d1:40:d6:d4:8e:61:9e:ff:3a:0b:8c:
                    73:43:d5:69:a4:6d:e2:f5:03:96:2e:0e:a5:b5:bb:
                    54:6c:ae:2c:8c:12:23:7d:b1:7c:d0:a4:48:bf:af:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:6E:43:74:EE:41:F1:08:2F:F5:0B:FA:46:28:29:03:CE:66:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97f5c8a5-a13a-4184-ad59-ad948ef2fade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:38:41:0f:39:e3:2b:dd:47:ce:0d:ba:c0:a5:90:57:59:b8:
         7b:f6:c7:7c:45:ac:dd:ab:5c:8c:5e:51:83:fd:2a:24:ee:9a:
         a3:5d:39:9b:54:93:12:b9:db:e8:9f:69:c0:d3:15:c1:d7:cf:
         0f:46:a1:bd:0b:44:4e:f4:34:9c:aa:d8:0b:11:3c:4c:af:a8:
         f3:86:2e:e1:c7:e2:32:36:40:1a:e6:68:a4:1d:62:3e:ac:28:
         85:8f:ad:4a:ab:8e:83:04:a8:49:c4:3e:93:b1:80:99:6e:80:
         79:5f:91:14:ec:33:7f:44:0c:02:0b:21:89:aa:3a:f4:e5:71:
         1f:90:16:6c:c5:67:eb:88:ce:81:d4:16:b4:85:ef:d3:1f:9a:
         66:0e:23:9d:12:5a:2d:92:7a:fd:ad:87:ca:f4:70:41:5e:ea:
         a0:ac:f6:d9:ae:b3:56:d7:bd:98:2e:06:c9:44:5e:82:9e:5f:
         c4:ca:07:bd:78:29:15:22:0b:c9:7b:cf:99:1b:51:12:c2:b9:
         34:2d:fc:3d:cb:0e:f8:cb:1b:46:d4:f6:dc:2b:f3:61:d5:c0:
         fe:2d:67:61:1f:52:d3:80:45:da:60:60:b3:36:dc:24:1e:1e:
         3f:32:dc:b2:10:e3:5e:ee:93:bc:3f:50:37:30:f4:fd:40:80:
         69:43:be:62
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbmtahI8k4bM6Ip1BJ2zpkoWKoHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAxMDI4WhcNMjUwOTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZWQ1MWRmODJhN2U5MGZlMWUyMDJiN2RkMzcxYWI2YTI3
YzIwM2ZhODA5NjgwZDY1ZWJmZGQ2ZTQwYjM2NzhiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUs/CP31CMaiX4jPX7Es+laWZqVa6ZdaRp+8qBC09Nas0D
hABu68ERYBuZC0KTLAXDIzOJXCSEaDKXs57eBrdtGSAmPdUtWUJ99jxeOck74Tko
WMH0oYSTy1A7B9Fdw6vbhyynmyNbrta34DBvwMo1bY0163S74E47u5VIYRPo94k/
GsGe51MUdYS1vkr78geYbuIZ0vazcBYN518xjOZ69Zef9KaitPHfF+n0ePSqizZG
8a00EA2zb/G4HF8rJud1n0/gJZhO1B7pdbjzreSAVA1LAEzRQNbUjmGe/zoLjHND
1WmkbeL1A5YuDqW1u1RsriyMEiN9sXzQpEi/ryfjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUp9FuQ3TuQfEIL/UL+kYoKQPOZqYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3ZjVjOGE1LWExM2EtNDE4NC1hZDU5LWFkOTQ4ZWYyZmFkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBKujANBgkqhkiG9w0BAQsFAAOCAQEAVDhBDznjK91Hzg26wKWQV1m4e/bH
fEWs3atcjF5Rg/0qJO6ao105m1STErnb6J9pwNMVwdfPD0ahvQtETvQ0nKrYCxE8
TK+o84Yu4cfiMjZAGuZopB1iPqwohY+tSquOgwSoScQ+k7GAmW6AeV+RFOwzf0QM
Agshiao69OVxH5AWbMVn64jOgdQWtIXv0x+aZg4jnRJaLZJ6/a2HyvRwQV7qoKz2
2a6zVte9mC4GyURegp5fxMoHvXgpFSILyXvPmRtREsK5NC38PcsO+MsbRtT23Cvz
YdXA/i1nYR9S04BF2mBgszbcJB4ePzLcshDjXu6TvD9QNzD0/UCAaUO+Yg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:07:19 2025 by rpki-client