Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
File:                     08765d1b-0666-44f8-ba33-732d7e392300.roa (raw, json)
Hash identifier:          atHYxF69b0+TSRZvx7qaUfIffIAn0HBV9ZIadgrSzE4=
Subject key identifier:   3B:7E:46:11:20:CE:E8:E6:98:E3:EF:F2:1B:7B:1B:1A:7B:F9:79:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57E79162A78DF0814D59E8CFE5237CBAD048F302
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
Signing time:             Wed 23 Jul 2025 00:20:16 +0000
ROA not before:           Wed 23 Jul 2025 00:20:16 +0000
ROA not after:            Wed 27 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e7:91:62:a7:8d:f0:81:4d:59:e8:cf:e5:23:7c:ba:d0:48:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:20:16 2025 GMT
            Not After : Aug 27 23:59:59 2025 GMT
        Subject: serialNumber=8f58913af3684ebf3e4b78db76947514b718d25d040b0a0680b26a35a2095539, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:c0:f2:85:ea:74:6c:8d:6f:3c:ee:38:01:
                    ee:3d:f0:d3:93:38:bc:9e:03:e4:5b:af:16:d5:05:
                    a6:6f:4d:f0:44:f1:c0:04:17:9f:6a:e1:a7:d6:8e:
                    1b:11:27:18:24:4d:98:6c:ec:30:7b:bb:8a:88:23:
                    ff:8e:35:df:89:26:28:67:ec:18:37:c3:36:ed:fa:
                    ce:49:36:fb:93:bb:4f:b1:d9:41:97:0d:c2:a2:dc:
                    bf:59:36:b4:77:3e:79:2b:a0:e4:0c:21:19:dc:3d:
                    fb:15:7d:8e:0a:19:d3:cb:ab:d0:af:4e:13:03:cb:
                    50:9a:0d:e3:ab:33:38:3a:1d:64:72:6f:3a:b1:59:
                    75:29:15:cf:f5:3a:09:c7:ed:b0:a7:b0:f1:65:88:
                    f6:90:69:1c:1a:ea:c8:c1:79:05:7f:9f:5a:22:91:
                    e4:b6:14:8b:6f:d0:44:02:f7:ef:68:4e:96:3c:0e:
                    93:b5:e5:5e:3b:77:90:ab:17:b5:a6:dc:8b:2e:88:
                    86:8e:a1:ea:52:9a:d1:81:62:13:b9:2f:28:90:4b:
                    d1:df:0d:6c:a2:2a:3a:1a:e9:d7:85:f5:e1:e7:37:
                    78:7d:39:62:77:0a:34:19:28:df:ea:6a:74:ab:77:
                    b2:19:e3:b6:1d:a5:e7:eb:83:11:e6:89:12:26:24:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:46:11:20:CE:E8:E6:98:E3:EF:F2:1B:7B:1B:1A:7B:F9:79:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:23:49:c0:ff:b8:6c:5d:0a:2f:5a:03:37:37:fe:1c:ec:
         58:15:31:96:2c:2b:0e:3f:58:a8:ec:55:63:36:a1:c1:e2:7d:
         da:1a:75:a2:3c:b6:22:0d:55:80:92:9e:d6:24:c8:cd:7e:cb:
         4c:59:52:15:75:5d:32:85:0b:b6:71:92:c7:9f:7d:08:39:94:
         de:69:b6:d5:55:f8:96:c6:59:4a:1b:23:ec:54:83:c0:5b:5d:
         c3:e4:c9:57:28:9c:bf:8d:76:82:6c:2d:3a:b4:72:f7:82:42:
         e9:83:18:4c:a7:a5:66:a2:8d:a5:0b:5c:17:0c:78:20:33:c0:
         9b:2b:b6:2a:54:eb:0a:9a:66:c4:44:b7:77:92:45:73:90:52:
         76:66:5c:25:3a:0e:d4:84:de:a5:dc:37:a4:2b:16:7f:11:a8:
         4a:d8:53:24:0e:69:c5:da:e4:3d:21:b0:83:a5:d8:28:a3:09:
         78:79:16:36:38:d0:b9:a6:d8:fd:5c:49:71:6b:b2:fd:3b:25:
         88:ca:6e:90:4d:1e:50:8c:08:e3:cf:fe:79:2c:cf:2c:cb:8c:
         88:4a:ee:d6:85:57:20:f0:77:7f:91:f0:85:b3:f1:44:30:67:
         26:f4:d4:e3:7f:39:3b:81:3f:c7:6b:4d:c3:69:d7:ab:94:5e:
         c2:31:e8:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUV+eRYqeN8IFNWejP5SN8utBI8wIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAyMDE2WhcNMjUwODI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjU4OTEzYWYzNjg0ZWJmM2U0Yjc4ZGI3Njk0NzUxNGI3
MThkMjVkMDQwYjBhMDY4MGIyNmEzNWEyMDk1NTM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDj+sDyhep0bI1vPO44Ae498NOTOLyeA+RbrxbVBaZvTfBE
8cAEF59q4afWjhsRJxgkTZhs7DB7u4qII/+ONd+JJihn7Bg3wzbt+s5JNvuTu0+x
2UGXDcKi3L9ZNrR3PnkroOQMIRncPfsVfY4KGdPLq9CvThMDy1CaDeOrMzg6HWRy
bzqxWXUpFc/1OgnH7bCnsPFliPaQaRwa6sjBeQV/n1oikeS2FItv0EQC9+9oTpY8
DpO15V47d5CrF7Wm3IsuiIaOoepSmtGBYhO5LyiQS9HfDWyiKjoa6deF9eHnN3h9
OWJ3CjQZKN/qanSrd7IZ47YdpefrgxHmiRImJM0zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUO35GESDO6OaY4+/yG3sbGnv5eQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4NzY1ZDFiLTA2NjYtNDRmOC1iYTMzLTczMmQ3ZTM5MjMwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS4SYAwDQYJKoZIhvcNAQELBQADggEBAHj6I0nA/7hsXQovWgM3N/4c7FgV
MZYsKw4/WKjsVWM2ocHifdoadaI8tiINVYCSntYkyM1+y0xZUhV1XTKFC7Zxksef
fQg5lN5pttVV+JbGWUobI+xUg8BbXcPkyVconL+NdoJsLTq0cveCQumDGEynpWai
jaULXBcMeCAzwJsrtipU6wqaZsREt3eSRXOQUnZmXCU6DtSE3qXcN6QrFn8RqErY
UyQOacXa5D0hsIOl2CijCXh5FjY40Lmm2P1cSXFrsv07JYjKbpBNHlCMCOPP/nks
zyzLjIhK7taFVyDwd3+R8IWz8UQwZyb01ON/OTuBP8drTcNp16uUXsIx6OY=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:54 2025 by rpki-client