Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa
File:                     e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa (raw, json)
Hash identifier:          3O7jumAfDz5OYvB3M/l6iL+PPY/VgfY697DxN6yCLcA=
Subject key identifier:   2A:9E:0B:C1:57:E1:E8:21:53:A2:8F:DE:DC:00:BE:63:54:D8:BF:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ED87A301BDA13D8A9A86B8F5A8351F477317BEC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa
Signing time:             Sat 16 Aug 2025 00:11:07 +0000
ROA not before:           Sat 16 Aug 2025 00:11:07 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d8:7a:30:1b:da:13:d8:a9:a8:6b:8f:5a:83:51:f4:77:31:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:11:07 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=671beb998719b28509109cbc7bca112eb0bd79bbac096a627025a3d6c5b2e59d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:43:b8:16:bf:86:72:d1:22:9d:58:81:31:
                    a9:3a:7e:53:20:e4:35:4a:50:3a:48:fb:83:d3:31:
                    b0:c8:28:da:1e:49:96:da:c7:97:79:a0:93:d5:07:
                    19:e9:9e:51:65:2c:95:da:a6:47:81:ee:95:d6:28:
                    85:1b:6f:34:41:ee:eb:ff:42:89:fd:5e:e5:da:e1:
                    d2:42:6f:27:16:7a:26:0a:25:c2:ac:eb:1d:9a:b0:
                    52:e5:e2:66:04:56:7e:b4:1c:fc:97:ae:84:62:94:
                    9e:c7:e5:74:95:ce:39:7c:81:8c:61:40:5f:ce:0f:
                    37:a3:36:98:91:2b:a5:d8:4f:06:e4:e6:0d:d5:41:
                    b8:19:ce:d8:fe:fd:5a:c7:24:58:5a:73:11:f1:3e:
                    f8:8f:f9:03:fa:09:fe:4c:21:6f:cc:59:a0:4b:b9:
                    fc:43:bd:80:56:93:f1:49:56:35:cb:4c:73:9e:d6:
                    74:71:8e:b8:97:2b:30:a3:1d:4f:49:2a:ac:44:41:
                    a5:e3:36:c9:9c:62:36:1f:15:60:b7:0b:f9:29:6d:
                    a1:99:0d:67:27:69:c8:dd:0c:98:42:94:35:3f:75:
                    ff:7d:2d:28:49:bd:f6:62:98:18:3d:6e:1d:76:b6:
                    11:dc:f7:52:41:85:fd:c6:e7:52:19:21:ad:a8:fa:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:0B:C1:57:E1:E8:21:53:A2:8F:DE:DC:00:BE:63:54:D8:BF:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6d61cd4-22f9-4610-b3ca-b739a57e7391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:93:e4:8b:c1:d8:ba:a2:74:39:50:a8:4e:7d:14:a6:fb:
         85:62:14:45:59:18:6f:e2:b5:cd:75:73:9a:99:cb:d6:5b:4a:
         e7:a9:15:19:6b:9d:6c:99:0a:aa:79:0c:28:32:f0:62:be:4d:
         7c:0b:7b:ba:42:a1:cb:9d:a0:ed:61:d2:8c:96:f7:c9:dc:10:
         a4:b9:85:34:58:aa:52:c5:fb:a9:29:d6:4a:08:0f:6b:46:88:
         63:16:95:ce:af:14:ab:85:e2:66:69:7f:e7:a3:64:0b:b9:2b:
         d9:e6:86:e6:b6:3b:c6:82:d2:f0:3a:d3:b7:37:79:d6:e9:cb:
         18:5a:ff:14:9a:58:90:ed:2d:cb:3b:c7:ba:3c:bc:04:7f:7b:
         2a:b3:9f:ec:84:13:21:1f:53:1d:ae:58:f4:06:8c:18:8b:bf:
         3d:8a:41:1b:35:c1:e3:a0:f4:46:10:7b:a4:67:ae:1f:47:d0:
         f1:78:c2:ec:30:76:65:6a:76:d7:39:43:cb:1e:e8:2f:9b:31:
         17:14:cb:91:1f:d1:a9:9a:f7:3f:41:46:69:46:26:24:d6:7b:
         9d:c1:9c:38:22:6b:4d:11:00:bf:24:d9:c3:74:45:37:04:94:
         1b:7c:5a:e6:c5:ee:a2:fe:2e:48:cf:e2:35:c6:c1:68:85:b2:
         63:56:36:bb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTth6MBvaE9ipqGuPWoNR9Hcxe+wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE2MDAxMTA3WhcNMjUwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NzFiZWI5OTg3MTliMjg1MDkxMDljYmM3YmNhMTEyZWIw
YmQ3OWJiYWMwOTZhNjI3MDI1YTNkNmM1YjJlNTlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwk0O4Fr+GctEinViBMak6flMg5DVKUDpI+4PTMbDIKNoe
SZbax5d5oJPVBxnpnlFlLJXapkeB7pXWKIUbbzRB7uv/Qon9XuXa4dJCbycWeiYK
JcKs6x2asFLl4mYEVn60HPyXroRilJ7H5XSVzjl8gYxhQF/ODzejNpiRK6XYTwbk
5g3VQbgZztj+/VrHJFhacxHxPviP+QP6Cf5MIW/MWaBLufxDvYBWk/FJVjXLTHOe
1nRxjriXKzCjHU9JKqxEQaXjNsmcYjYfFWC3C/kpbaGZDWcnacjdDJhClDU/df99
LShJvfZimBg9bh12thHc91JBhf3G51IZIa2o+uh/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKp4LwVfh6CFToo/e3AC+Y1TYv7EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2ZDYxY2Q0LTIyZjktNDYxMC1iM2NhLWI3MzlhNTdlNzM5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQNoiAwDQYJKoZIhvcNAQELBQADggEBAEr8k+SLwdi6onQ5UKhOfRSm+4Vi
FEVZGG/itc11c5qZy9ZbSuepFRlrnWyZCqp5DCgy8GK+TXwLe7pCocudoO1h0oyW
98ncEKS5hTRYqlLF+6kp1koID2tGiGMWlc6vFKuF4mZpf+ejZAu5K9nmhua2O8aC
0vA607c3edbpyxha/xSaWJDtLcs7x7o8vAR/eyqzn+yEEyEfUx2uWPQGjBiLvz2K
QRs1weOg9EYQe6Rnrh9H0PF4wuwwdmVqdtc5Q8se6C+bMRcUy5Ef0ama9z9BRmlG
JiTWe53BnDgia00RAL8k2cN0RTcElBt8WubF7qL+LkjP4jXGwWiFsmNWNrs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:00 2025 by rpki-client