Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa
File:                     adaf9344-781a-48cd-903a-098481f29a96.roa (raw, json)
Hash identifier:          i3xNleo61xFMIYU5BnHCb0vzOH8nmqQtFW3zYdsZFyc=
Subject key identifier:   5C:0E:51:10:B4:28:41:7A:42:40:76:34:BF:CC:EA:85:EF:43:2B:3B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0181F4DB4464A1BDE353EAAFA0A4FEF3601AA779
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa
Signing time:             Wed 25 Jun 2025 00:40:10 +0000
ROA not before:           Wed 25 Jun 2025 00:40:10 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:db:44:64:a1:bd:e3:53:ea:af:a0:a4:fe:f3:60:1a:a7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jun 25 00:40:10 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=fedc46e59bff6feaf5a6462ad3288b0c92ede11eeadae1e8b57b4c902560695d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:d1:db:d6:32:ea:85:d0:e9:b8:67:7d:1f:
                    d5:01:92:f7:6c:c7:f2:c2:f6:a9:42:dc:80:7a:86:
                    a3:b2:5e:b2:18:67:4a:59:a9:7c:e6:70:9f:7a:49:
                    44:ae:fa:f3:ba:21:a6:60:2f:b2:b8:e6:90:57:7a:
                    fe:c1:89:00:98:1f:ab:fc:1d:62:19:80:e1:77:b8:
                    dc:b0:8d:06:c2:4e:92:13:ce:4e:56:fe:b3:d7:54:
                    9c:ad:41:ee:4f:8c:a4:ab:d8:fa:da:20:7e:ea:cf:
                    fa:98:7c:38:bd:17:88:d4:49:84:0b:5b:32:3e:8c:
                    ce:94:4a:51:24:1a:ac:ee:68:7f:38:8b:ce:94:51:
                    13:68:a1:72:0c:d4:b7:ce:2e:61:94:69:90:a4:04:
                    d0:ed:76:7a:db:cd:12:91:39:04:52:dc:78:48:cd:
                    91:ca:cd:96:9d:f9:1d:20:56:c7:27:4f:1a:4d:a6:
                    9c:00:ec:fb:7c:d5:bb:b9:05:e6:76:10:7b:57:d2:
                    59:0a:ff:ea:dd:d7:a5:3f:eb:8d:b3:31:79:35:c6:
                    8a:96:e1:d9:90:4f:11:9e:e2:ed:62:de:1b:af:ac:
                    ca:5d:e4:e2:1b:a3:25:c6:cd:9a:4f:ea:27:8d:4f:
                    d4:53:95:4d:60:10:6f:0d:cc:6a:b2:f3:d8:f4:d1:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:51:10:B4:28:41:7A:42:40:76:34:BF:CC:EA:85:EF:43:2B:3B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:f5:1a:7c:af:e1:69:e4:01:41:f8:2f:f3:42:27:93:a6:
         ec:55:c2:2c:09:c6:a9:ba:59:e0:b6:6b:36:e8:cb:4f:c4:bf:
         f1:d3:c9:d0:c5:37:d1:c1:e4:01:93:5a:59:e0:44:f7:29:8c:
         a1:57:1d:1e:5b:66:15:49:49:15:ad:dc:20:e6:39:bd:7e:2e:
         08:f1:f6:9f:a8:da:34:2b:83:3d:fa:55:0b:c3:6a:3b:90:e8:
         3d:c3:5f:6e:80:3a:00:7b:c1:18:dc:7a:98:1c:1e:7d:95:86:
         dd:ef:a8:64:3e:25:57:bf:07:b0:39:c9:ac:7f:fd:62:7f:12:
         b1:82:fb:d5:d8:8b:e5:eb:89:58:5c:d3:86:67:d3:4a:d4:77:
         05:63:54:73:81:d4:99:78:ac:25:8c:66:f2:a6:9a:6b:4e:2c:
         b4:7c:9a:48:98:38:0c:1f:b9:79:51:c4:c4:db:cc:a3:db:aa:
         f8:19:02:c7:56:0c:0e:69:c5:b3:e5:d5:4c:9b:59:e7:ad:a5:
         b0:eb:09:10:6f:34:7f:4e:4a:db:66:d5:83:0a:3c:8a:bb:15:
         8c:d4:35:bc:76:e7:23:f6:63:f9:36:ff:bd:d5:30:ac:da:9f:
         4e:ec:97:77:3e:32:3f:49:22:f1:08:29:99:ed:00:7f:61:bb:
         c4:78:ac:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAYH020Rkob3jU+qvoKT+82Aap3kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MDA0MDEwWhcNMjUwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZWRjNDZlNTliZmY2ZmVhZjVhNjQ2MmFkMzI4OGIwYzky
ZWRlMTFlZWFkYWUxZThiNTdiNGM5MDI1NjA2OTVkMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsgtHb1jLqhdDpuGd9H9UBkvdsx/LC9qlC3IB6hqOyXrIY
Z0pZqXzmcJ96SUSu+vO6IaZgL7K45pBXev7BiQCYH6v8HWIZgOF3uNywjQbCTpIT
zk5W/rPXVJytQe5PjKSr2PraIH7qz/qYfDi9F4jUSYQLWzI+jM6USlEkGqzuaH84
i86UURNooXIM1LfOLmGUaZCkBNDtdnrbzRKROQRS3HhIzZHKzZad+R0gVscnTxpN
ppwA7Pt81bu5BeZ2EHtX0lkK/+rd16U/642zMXk1xoqW4dmQTxGe4u1i3huvrMpd
5OIboyXGzZpP6ieNT9RTlU1gEG8NzGqy89j00XNTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXA5RELQoQXpCQHY0v8zqhe9DKzswHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2FkYWY5MzQ0LTc4MWEtNDhjZC05MDNhLTA5ODQ4MWYyOWE5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAFti9Rp8r+Fp5AFB+C/zQieTpuxV
wiwJxqm6WeC2azboy0/Ev/HTydDFN9HB5AGTWlngRPcpjKFXHR5bZhVJSRWt3CDm
Ob1+Lgjx9p+o2jQrgz36VQvDajuQ6D3DX26AOgB7wRjcepgcHn2Vht3vqGQ+JVe/
B7A5yax//WJ/ErGC+9XYi+XriVhc04Zn00rUdwVjVHOB1Jl4rCWMZvKmmmtOLLR8
mkiYOAwfuXlRxMTbzKPbqvgZAsdWDA5pxbPl1UybWeetpbDrCRBvNH9OSttm1YMK
PIq7FYzUNbx25yP2Y/k2/73VMKzan07sl3c+Mj9JIvEIKZntAH9hu8R4rC8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:21 2025 by rpki-client