Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa
File:                     2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa (raw, json)
Hash identifier:          +fbxoKWxsdUslotUwgOfHhtBVhrcIskkDo4uRLex+xw=
Subject key identifier:   D5:2E:DA:81:BF:7E:08:EA:FC:3B:5F:9B:FB:9F:1F:E5:F8:60:B1:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FBDE8D6FE821CFB95298B51E60076BC713092C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa
Signing time:             Wed 11 Jun 2025 00:01:34 +0000
ROA not before:           Wed 11 Jun 2025 00:01:34 +0000
ROA not after:            Wed 16 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bd:e8:d6:fe:82:1c:fb:95:29:8b:51:e6:00:76:bc:71:30:92:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 11 00:01:34 2025 GMT
            Not After : Jul 16 23:59:59 2025 GMT
        Subject: serialNumber=f6c97faed1bb631fdaff5ec571b13fa419cd15636ba61146f281fc8eae5c56bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:fd:1e:bd:f4:63:b8:b2:f3:66:1d:f9:3c:
                    90:96:72:a5:32:91:81:2c:4f:82:d0:76:95:9b:d0:
                    7b:ea:81:1c:2c:ee:05:da:7d:55:d6:9c:ff:8e:89:
                    83:52:17:d1:a8:e5:ec:16:df:cb:de:59:e0:90:f8:
                    17:5f:b4:49:ce:31:34:50:56:18:02:e3:f2:94:be:
                    f9:40:23:30:6b:17:4b:d3:82:7f:ce:f5:c3:35:2c:
                    03:02:c6:8c:da:34:05:58:f3:5c:34:e8:5c:7a:97:
                    c0:f5:dc:e2:95:25:bc:96:ea:a9:ad:ed:49:cf:7e:
                    79:28:fa:c8:d3:49:62:a2:00:9f:ef:e2:05:01:e3:
                    d8:55:e9:47:ef:3b:2f:3b:44:4c:74:ad:36:a3:d2:
                    b2:67:8d:79:04:df:4a:ba:97:e3:b4:ff:6a:3b:a7:
                    e2:6a:8b:92:9d:21:d7:22:93:f2:80:d1:11:2c:0e:
                    05:a4:69:b5:e7:ac:01:15:7c:19:cd:a6:5d:d9:4d:
                    a0:9a:15:fd:6a:f9:f4:4e:11:c4:32:3e:83:94:4c:
                    4f:a8:ac:3b:41:57:b5:18:6a:7f:6a:3a:60:5a:c1:
                    fc:1a:1b:ac:7b:00:bb:9b:c9:27:ec:2e:5f:87:84:
                    50:5c:34:29:e6:63:5f:4d:6c:86:b5:09:ce:cc:dd:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:DA:81:BF:7E:08:EA:FC:3B:5F:9B:FB:9F:1F:E5:F8:60:B1:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4a5c37-6429-4730-82fb-4ab5c589cd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:e6:21:29:54:b9:b3:f5:06:fb:42:3e:c9:c7:93:4a:0c:
         b1:ee:86:93:17:af:d6:c3:c4:37:27:52:3a:db:cf:e9:a6:f4:
         e3:3a:44:9f:e7:90:01:c5:97:b7:91:12:31:a7:94:da:09:b1:
         cb:6f:11:ae:ad:9c:23:de:65:62:c0:52:da:88:f7:47:cf:6c:
         22:99:36:48:cf:a0:ce:e9:4b:e6:08:47:79:42:b2:d7:41:d8:
         fa:bb:52:d4:6a:42:f3:41:fe:64:63:04:d6:c5:2f:4a:0a:f7:
         a8:de:45:ed:d9:31:0c:29:ee:11:42:e5:c2:5a:31:34:21:21:
         b3:a0:b7:fa:95:95:b9:96:b3:1b:08:43:ce:70:4f:16:af:90:
         ed:ac:57:de:f1:ae:52:9f:74:5e:1a:21:ed:c7:ad:7f:3f:8f:
         fa:bc:cb:af:3f:4a:bc:15:e7:ba:b9:cc:b3:09:9e:09:27:af:
         8d:27:04:83:e6:57:5e:29:d6:9b:9e:f4:8a:ab:d2:b4:59:c1:
         58:ee:7d:99:30:db:e0:a2:75:a4:95:32:58:e3:44:76:aa:f9:
         11:29:75:59:af:28:57:ac:90:b7:a3:43:c3:77:16:a4:53:44:
         41:c7:56:d4:85:b1:82:9b:17:25:21:3e:b9:be:a4:0e:3b:10:
         70:c0:7b:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL73o1v6CHPuVKYtR5gB2vHEwksQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAwMTM0WhcNMjUwNzE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNmM5N2ZhZWQxYmI2MzFmZGFmZjVlYzU3MWIxM2ZhNDE5
Y2QxNTYzNmJhNjExNDZmMjgxZmM4ZWFlNWM1NmJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrqv0evfRjuLLzZh35PJCWcqUykYEsT4LQdpWb0HvqgRws
7gXafVXWnP+OiYNSF9Go5ewW38veWeCQ+BdftEnOMTRQVhgC4/KUvvlAIzBrF0vT
gn/O9cM1LAMCxozaNAVY81w06Fx6l8D13OKVJbyW6qmt7UnPfnko+sjTSWKiAJ/v
4gUB49hV6UfvOy87REx0rTaj0rJnjXkE30q6l+O0/2o7p+Jqi5KdIdcik/KA0REs
DgWkabXnrAEVfBnNpl3ZTaCaFf1q+fROEcQyPoOUTE+orDtBV7UYan9qOmBawfwa
G6x7ALubySfsLl+HhFBcNCnmY19NbIa1Cc7M3VaxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1S7agb9+COr8O1+b+58f5fhgseowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhNGE1YzM3LTY0MjktNDczMC04MmZiLTRhYjVjNTg5Y2Q3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKdrwQwDQYJKoZIhvcNAQELBQADggEBADLh5iEpVLmz9Qb7Qj7Jx5NKDLHu
hpMXr9bDxDcnUjrbz+mm9OM6RJ/nkAHFl7eREjGnlNoJsctvEa6tnCPeZWLAUtqI
90fPbCKZNkjPoM7pS+YIR3lCstdB2Pq7UtRqQvNB/mRjBNbFL0oK96jeRe3ZMQwp
7hFC5cJaMTQhIbOgt/qVlbmWsxsIQ85wTxavkO2sV97xrlKfdF4aIe3HrX8/j/q8
y68/SrwV57q5zLMJngknr40nBIPmV14p1pue9Iqr0rRZwVjufZkw2+CidaSVMljj
RHaq+REpdVmvKFeskLejQ8N3FqRTREHHVtSFsYKbFyUhPrm+pA47EHDAe90=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:51:49 2025 by rpki-client