Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa
File:                     361d86fa-1e11-495f-8021-5b0f95bb1974.roa (raw, json)
Hash identifier:          7sE15nSjPwoWDjMtTT+iyYFIQ/YRTrv/uuuOvY+81qU=
Subject key identifier:   03:7A:E3:73:B6:FD:34:69:D2:17:13:17:1B:24:11:18:FC:70:D3:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52AE79610AF354D06B43D5DB71263B8C257DFD10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa
Signing time:             Tue 05 Aug 2025 23:51:58 +0000
ROA not before:           Tue 05 Aug 2025 23:51:58 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.150.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ae:79:61:0a:f3:54:d0:6b:43:d5:db:71:26:3b:8c:25:7d:fd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 23:51:58 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=c3e5083ac9d94240d16c8128bc50258f6387c8e66aa73d2236551a931091e458, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:33:75:cf:5d:2d:32:9c:80:26:27:d3:8d:
                    1e:b0:ed:58:2e:59:28:07:40:8f:80:70:f4:29:99:
                    64:86:c4:4f:db:10:bc:f2:35:e4:0a:45:16:1f:a1:
                    a4:84:2a:34:7c:74:f5:20:be:a4:fd:fc:2b:26:a6:
                    b5:f0:73:5e:07:8a:e3:88:00:be:fd:d0:68:1d:b1:
                    c4:53:38:0e:e3:ca:d9:df:3f:2f:40:4e:9e:5b:1a:
                    d9:d3:1f:f7:a8:9b:9e:5a:a0:78:2c:16:36:33:ec:
                    ea:18:0d:2d:0a:78:d9:82:0a:85:88:5c:5d:aa:5d:
                    1b:8f:29:0c:e8:9e:c0:be:0d:31:65:a3:82:57:1f:
                    94:dd:5d:05:e6:a0:94:c8:9c:9f:22:4a:0b:26:53:
                    19:ee:0d:c0:fe:b3:3b:21:2a:5c:c5:74:29:d1:68:
                    3d:83:94:61:c8:39:dd:29:8b:fd:8a:fd:1e:37:4d:
                    80:b4:e6:05:ef:c7:58:ec:ba:7d:77:38:9a:7f:09:
                    bc:27:ce:da:55:06:70:d3:18:bf:88:13:14:1c:8b:
                    a6:3e:39:77:27:49:c2:4b:a6:12:f6:b3:2c:ef:35:
                    f1:d0:b8:98:50:67:a7:3d:fd:25:49:66:7e:48:b5:
                    31:c5:7d:c0:c5:4c:0a:df:85:38:fa:7d:5d:13:14:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7A:E3:73:B6:FD:34:69:D2:17:13:17:1B:24:11:18:FC:70:D3:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:87:33:a2:51:78:85:a8:63:47:1e:7a:fd:e2:ab:52:40:
         9e:0c:96:87:e3:b0:11:c2:f2:7e:13:d7:51:a8:80:61:9b:c0:
         37:d2:09:a4:13:36:21:6a:02:ab:92:14:08:89:66:73:48:05:
         81:10:06:e0:44:6f:74:ef:7a:29:da:8c:2b:7d:f1:42:77:a9:
         36:21:92:b1:c0:eb:3e:88:ff:df:9c:1a:12:0e:14:cf:aa:92:
         8a:03:2c:b2:e6:7b:91:33:53:22:5a:bc:d9:a4:19:44:a1:06:
         2f:f0:b2:75:93:c2:b5:f8:76:39:fd:03:16:17:44:a4:ff:92:
         8a:24:94:1f:71:08:ab:b7:28:6f:21:63:f9:09:33:ed:90:2e:
         47:93:15:a4:89:51:80:db:d9:6a:96:f9:9a:95:83:8c:ce:70:
         95:32:24:bc:4e:bf:52:e2:90:92:10:67:0e:af:4e:42:03:7b:
         9a:b3:88:d1:21:8e:10:62:f9:4f:e6:b2:df:67:ba:b2:92:09:
         88:bb:35:f2:6d:34:d0:08:28:04:4d:10:52:51:22:af:ed:b6:
         a9:38:92:9d:7f:c7:89:9f:1f:8b:ef:c0:55:f5:55:71:66:db:
         7c:9d:43:fa:89:ec:71:b6:77:19:60:37:7a:c2:ee:d3:82:34:
         5e:8b:07:e0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUUq55YQrzVNBrQ9XbcSY7jCV9/RAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MjM1MTU4WhcNMjUwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjM2U1MDgzYWM5ZDk0MjQwZDE2YzgxMjhiYzUwMjU4ZjYz
ODdjOGU2NmFhNzNkMjIzNjU1MWE5MzEwOTFlNDU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjTzN1z10tMpyAJifTjR6w7VguWSgHQI+AcPQpmWSGxE/b
ELzyNeQKRRYfoaSEKjR8dPUgvqT9/CsmprXwc14HiuOIAL790GgdscRTOA7jytnf
Py9ATp5bGtnTH/eom55aoHgsFjYz7OoYDS0KeNmCCoWIXF2qXRuPKQzonsC+DTFl
o4JXH5TdXQXmoJTInJ8iSgsmUxnuDcD+szshKlzFdCnRaD2DlGHIOd0pi/2K/R43
TYC05gXvx1jsun13OJp/CbwnztpVBnDTGL+IExQci6Y+OXcnScJLphL2syzvNfHQ
uJhQZ6c9/SVJZn5ItTHFfcDFTArfhTj6fV0TFHeRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUA3rjc7b9NGnSFxMXGyQRGPxw02cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2MWQ4NmZhLTFlMTEtNDk1Zi04MDIxLTViMGY5NWJiMTk3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEAn66HM6JReIWoY0ceev3iq1JAngyW
h+OwEcLyfhPXUaiAYZvAN9IJpBM2IWoCq5IUCIlmc0gFgRAG4ERvdO96KdqMK33x
QnepNiGSscDrPoj/35waEg4Uz6qSigMssuZ7kTNTIlq82aQZRKEGL/CydZPCtfh2
Of0DFhdEpP+SiiSUH3EIq7cobyFj+Qkz7ZAuR5MVpIlRgNvZapb5mpWDjM5wlTIk
vE6/UuKQkhBnDq9OQgN7mrOI0SGOEGL5T+ay32e6spIJiLs18m000AgoBE0QUlEi
r+22qTiSnX/HiZ8fi+/AVfVVcWbbfJ1D+onscbZ3GWA3esLu04I0XosH4A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:14 2025 by rpki-client