Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16156a62-fdc2-45e5-b359-c8bbf5f3c546.roa
File:                     16156a62-fdc2-45e5-b359-c8bbf5f3c546.roa (raw, json)
Hash identifier:          3koayW4CT5lwCbBgBqP8OhS9Qosb1N83MmCwnTMj7aM=
Subject key identifier:   09:6F:DE:16:A1:27:A7:22:19:22:20:BA:20:74:82:9B:6E:2B:AD:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7633C3CC63699ABEBC6B67771448C74BCC3B8A92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16156a62-fdc2-45e5-b359-c8bbf5f3c546.roa
Signing time:             Fri 01 Aug 2025 15:00:28 +0000
ROA not before:           Fri 01 Aug 2025 15:00:28 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        142.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:33:c3:cc:63:69:9a:be:bc:6b:67:77:14:48:c7:4b:cc:3b:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 15:00:28 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=25d587230a0e78ff11a3c9a4fcaa93009c07f17465b81536871c18fab0fa1a40, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:49:99:93:39:5c:26:25:e5:5f:a2:1c:cb:
                    d6:b6:6c:2b:a9:04:c5:e7:30:bc:ad:3c:f9:d5:39:
                    36:9d:33:14:77:68:40:ed:6e:89:5d:51:77:61:a2:
                    e7:18:06:f7:3b:10:89:e3:23:a2:e8:b7:5b:52:4a:
                    3d:3c:a3:40:7d:ed:e8:d7:05:8b:e9:4f:2c:ed:f9:
                    9d:2b:0e:6d:16:df:bc:46:5a:c4:7d:58:ad:cb:50:
                    70:42:e5:8e:ba:37:4f:f3:49:26:46:96:d0:aa:ba:
                    11:2c:f1:f1:ee:c9:c9:ff:24:97:07:6b:f7:c7:b0:
                    16:1d:95:74:5b:27:49:91:26:ec:3b:fb:3b:1b:8f:
                    12:91:f2:cc:10:71:27:89:c1:13:f6:2c:3f:98:b9:
                    51:a5:82:c3:bb:30:a1:63:47:cd:5f:b4:b1:c0:aa:
                    5b:cd:1f:9c:81:03:e9:47:8d:33:55:a9:ee:19:28:
                    05:3a:ec:12:35:3b:86:31:75:25:a1:ea:d5:61:c2:
                    6c:68:70:b7:39:41:86:68:2e:69:86:27:62:78:43:
                    5c:1e:d7:81:52:1f:f6:37:1b:d3:75:b0:0f:94:a7:
                    ee:e9:93:cc:52:a1:4c:68:fd:c4:bb:00:c7:2e:24:
                    bc:33:ef:cf:55:cc:fc:f3:11:fb:1c:aa:b9:52:5d:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:DE:16:A1:27:A7:22:19:22:20:BA:20:74:82:9B:6E:2B:AD:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16156a62-fdc2-45e5-b359-c8bbf5f3c546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:96:e3:3e:81:ff:2b:d6:95:9e:e3:6d:e7:53:e3:a5:fd:
         6a:88:87:04:3e:1a:41:37:ab:26:d6:37:21:d6:b2:db:da:df:
         94:39:02:35:c5:95:c9:d6:95:06:39:40:51:23:c9:c0:d1:25:
         41:3b:02:16:42:72:e5:eb:f8:41:c4:67:4c:a2:a6:f0:a0:24:
         56:5e:2f:b1:93:07:8f:02:33:0c:f0:63:e4:1d:8d:62:8d:4e:
         22:cd:01:c9:0f:2c:f7:84:29:00:9f:d1:8e:52:87:34:4b:30:
         45:e7:a5:9c:ec:bf:0c:d7:d6:23:30:d3:5b:57:f2:d3:61:31:
         59:6c:cc:9b:31:71:b0:fe:30:a8:f1:4c:7b:2b:a0:ce:6d:60:
         f9:55:b4:61:78:7a:05:91:a8:33:11:00:d7:1d:4a:9c:33:4f:
         c5:6d:d9:fa:39:c4:6f:7a:ef:74:18:7c:39:56:19:55:5d:c8:
         03:70:ca:11:67:2d:56:d6:92:0f:f8:fb:a0:10:40:2d:bf:97:
         36:25:fe:9e:e7:10:fa:33:80:eb:5d:ea:26:99:1e:fb:1b:49:
         17:88:57:aa:9e:8f:db:44:f2:c3:33:f2:90:74:97:96:de:b9:
         75:88:a9:40:ac:c7:d4:90:17:5e:d1:3b:e4:9c:ec:3c:db:de:
         ca:de:bd:af
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdjPDzGNpmr68a2d3FEjHS8w7ipIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUwMDI4WhcNMjUwOTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWQ1ODcyMzBhMGU3OGZmMTFhM2M5YTRmY2FhOTMwMDlj
MDdmMTc0NjViODE1MzY4NzFjMThmYWIwZmExYTQwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCerEmZkzlcJiXlX6Icy9a2bCupBMXnMLytPPnVOTadMxR3
aEDtboldUXdhoucYBvc7EInjI6Lot1tSSj08o0B97ejXBYvpTyzt+Z0rDm0W37xG
WsR9WK3LUHBC5Y66N0/zSSZGltCquhEs8fHuycn/JJcHa/fHsBYdlXRbJ0mRJuw7
+zsbjxKR8swQcSeJwRP2LD+YuVGlgsO7MKFjR81ftLHAqlvNH5yBA+lHjTNVqe4Z
KAU67BI1O4YxdSWh6tVhwmxocLc5QYZoLmmGJ2J4Q1we14FSH/Y3G9N1sA+Up+7p
k8xSoUxo/cS7AMcuJLwz789VzPzzEfscqrlSXWTPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCW/eFqEnpyIZIiC6IHSCm24rrY0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2MTU2YTYyLWZkYzItNDVlNS1iMzU5LWM4YmJmNWYzYzU0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCOPDANBgkqhkiG9w0BAQsFAAOCAQEAo1yW4z6B/yvWlZ7jbedT46X9aoiH
BD4aQTerJtY3Iday29rflDkCNcWVydaVBjlAUSPJwNElQTsCFkJy5ev4QcRnTKKm
8KAkVl4vsZMHjwIzDPBj5B2NYo1OIs0ByQ8s94QpAJ/RjlKHNEswReelnOy/DNfW
IzDTW1fy02ExWWzMmzFxsP4wqPFMeyugzm1g+VW0YXh6BZGoMxEA1x1KnDNPxW3Z
+jnEb3rvdBh8OVYZVV3IA3DKEWctVtaSD/j7oBBALb+XNiX+nucQ+jOA613qJpke
+xtJF4hXqp6P20TywzPykHSXlt65dYipQKzH1JAXXtE75JzsPNveyt69rw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:33 2025 by rpki-client