Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa
File:                     eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa (raw, json)
Hash identifier:          6Z6vxAgE3VGIAw2Sam3faTg9y0+thVZV/WqdqzFpnA8=
Subject key identifier:   C7:85:DD:C4:94:F5:0E:FD:A3:EA:06:95:ED:86:B0:20:DB:50:35:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FFA31422EA94E0D2BD0AA967E74D5514FB99EAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa
Signing time:             Wed 18 Jun 2025 00:21:06 +0000
ROA not before:           Wed 18 Jun 2025 00:21:06 +0000
ROA not after:            Wed 23 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fa:31:42:2e:a9:4e:0d:2b:d0:aa:96:7e:74:d5:51:4f:b9:9e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 18 00:21:06 2025 GMT
            Not After : Jul 23 23:59:59 2025 GMT
        Subject: serialNumber=2cf58c5b57e08f0cb640a5ff3d73137f6fb9db014217144784a93d4ff9dbe3ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:6c:27:1a:6f:59:2e:7e:ba:5f:f8:8e:23:
                    62:12:ff:c5:47:ad:83:50:88:92:58:86:9d:47:09:
                    96:d4:45:05:6b:90:af:b3:c6:0b:96:21:35:b4:e3:
                    04:3d:94:c3:37:b0:29:ea:e5:68:45:d1:b3:b6:a6:
                    66:81:9a:ed:43:a0:6a:26:21:9c:a8:eb:7b:54:a4:
                    b8:44:17:4a:f6:ca:36:dd:b9:ba:6c:ed:a7:7c:1d:
                    50:47:20:43:46:5d:c4:5e:57:77:c1:98:0d:c2:dc:
                    57:32:d1:08:dd:b9:b9:72:e8:f3:b5:24:da:34:90:
                    47:0e:ce:a0:ca:9c:04:6e:22:07:1a:8b:82:da:05:
                    b1:75:c8:d9:59:75:62:a5:fa:0a:da:c3:6d:56:c5:
                    fb:ec:69:b2:7a:9c:d4:64:68:1d:fe:2f:06:c3:f8:
                    c9:2a:f4:8d:64:3d:0d:99:ac:53:a6:d3:ff:f9:ad:
                    8c:03:d6:ed:b2:99:4d:56:db:6a:d2:6e:ff:f3:73:
                    ab:74:48:b3:64:fd:e6:f0:d9:1e:8f:29:e1:1a:76:
                    34:3c:5f:5a:c5:50:8e:bc:4d:21:b1:eb:47:d1:1a:
                    51:50:3f:6f:8e:03:98:ce:45:0b:21:4e:d8:91:14:
                    9e:cd:f5:e0:36:4d:d3:5f:66:ac:e8:21:40:df:cf:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:DD:C4:94:F5:0E:FD:A3:EA:06:95:ED:86:B0:20:DB:50:35:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:df:05:d9:1a:8b:96:37:d9:6e:f8:8a:c3:7e:c1:5e:64:62:
         98:06:e9:25:c2:85:50:b5:e0:d8:b0:e9:68:9b:17:8c:e1:16:
         72:7a:40:e1:1d:48:45:d3:bc:db:32:32:74:44:ff:51:9a:81:
         a3:ec:16:ec:cd:9d:52:be:f2:97:35:c1:60:d9:a5:ba:da:96:
         c3:b4:0b:cb:7d:f5:3b:73:cd:c4:c9:96:da:c5:73:e8:01:5a:
         4e:0c:f8:d1:75:8a:4a:af:ac:ae:f5:6d:b8:81:ea:27:09:cf:
         4e:00:c5:9e:c3:46:9d:a0:80:68:63:ca:66:50:f5:c6:79:67:
         b9:29:31:27:45:f2:10:86:05:e8:70:8e:fa:e0:42:1d:4f:bb:
         94:0a:87:db:88:b1:56:41:41:af:1e:a8:b7:6a:a3:84:48:00:
         01:6a:b3:a0:ec:f6:2f:35:11:81:f4:7d:7f:00:7d:bc:bb:c4:
         7e:37:39:6c:90:1b:5e:58:da:f0:27:17:d5:38:53:4b:c3:5b:
         5a:fb:75:52:ba:b5:b7:3f:aa:52:3d:dd:19:24:9c:3f:d2:0b:
         5f:64:0d:a9:c3:3d:21:df:e0:61:3f:bc:de:fa:ac:1b:69:d9:
         4b:ce:e0:e0:df:3d:55:27:07:97:b3:4e:43:53:78:4e:c2:f6:
         06:43:25:40
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf/oxQi6pTg0r0KqWfnTVUU+5nq8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE4MDAyMTA2WhcNMjUwNzIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyY2Y1OGM1YjU3ZTA4ZjBjYjY0MGE1ZmYzZDczMTM3ZjZm
YjlkYjAxNDIxNzE0NDc4NGE5M2Q0ZmY5ZGJlM2FiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbf2wnGm9ZLn66X/iOI2IS/8VHrYNQiJJYhp1HCZbURQVr
kK+zxguWITW04wQ9lMM3sCnq5WhF0bO2pmaBmu1DoGomIZyo63tUpLhEF0r2yjbd
ubps7ad8HVBHIENGXcReV3fBmA3C3Fcy0Qjdubly6PO1JNo0kEcOzqDKnARuIgca
i4LaBbF1yNlZdWKl+graw21WxfvsabJ6nNRkaB3+LwbD+Mkq9I1kPQ2ZrFOm0//5
rYwD1u2ymU1W22rSbv/zc6t0SLNk/ebw2R6PKeEadjQ8X1rFUI68TSGx60fRGlFQ
P2+OA5jORQshTtiRFJ7N9eA2TdNfZqzoIUDfzwEpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUx4XdxJT1Dv2j6gaV7YawINtQNd0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VhY2ExMGVkLWY3NjUtNGE3Ni05ZWE1LTMyZjM5YjE5YzM2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjlhAwDQYJKoZIhvcNAQELBQADggEBABXfBdkai5Y32W74isN+wV5kYpgG
6SXChVC14Niw6WibF4zhFnJ6QOEdSEXTvNsyMnRE/1GagaPsFuzNnVK+8pc1wWDZ
pbralsO0C8t99TtzzcTJltrFc+gBWk4M+NF1ikqvrK71bbiB6icJz04AxZ7DRp2g
gGhjymZQ9cZ5Z7kpMSdF8hCGBehwjvrgQh1Pu5QKh9uIsVZBQa8eqLdqo4RIAAFq
s6Ds9i81EYH0fX8Afby7xH43OWyQG15Y2vAnF9U4U0vDW1r7dVK6tbc/qlI93Rkk
nD/SC19kDanDPSHf4GE/vN76rBtp2UvO4ODfPVUnB5ezTkNTeE7C9gZDJUA=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:40 2025 by rpki-client