Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa
File:                     5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa (raw, json)
Hash identifier:          Mv4bDxs/B8ubKa9hcn1z2qssagsaqccQ09QWNPjitNk=
Subject key identifier:   6D:1A:09:EE:FC:6B:10:6D:54:B3:45:23:06:04:B8:2C:AB:A6:D8:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1966D6B44F21C702AE566BDD394578D7A1A38DBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa
Signing time:             Wed 04 Jun 2025 00:21:10 +0000
ROA not before:           Wed 04 Jun 2025 00:21:10 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        66.240.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:d6:b4:4f:21:c7:02:ae:56:6b:dd:39:45:78:d7:a1:a3:8d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:21:10 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=baba9dcd6577d894be02d165db14e7e750be3433406a12bc76d2f5be8bf45d77, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:2f:0e:3d:28:f8:ee:19:72:ad:2e:16:eb:
                    86:2a:4e:f5:8c:51:de:1c:fb:a8:d0:46:92:88:d7:
                    1f:f4:e9:7c:68:a0:56:a0:7e:7e:19:0a:ae:c9:e2:
                    2a:c0:a3:62:c1:10:04:36:84:aa:d9:86:17:a7:44:
                    ef:f0:40:6b:5b:13:3e:c2:d2:03:bf:9d:69:bb:91:
                    c4:66:0b:b3:c1:10:66:b5:ef:b4:ca:9a:86:cc:cc:
                    2b:44:1c:78:24:03:cf:0a:b2:84:a4:10:ea:fd:17:
                    17:29:d9:69:24:b4:8f:d7:c7:0c:4e:a7:38:c3:5e:
                    68:2b:aa:f0:10:0a:4a:6d:19:61:63:74:76:fc:8a:
                    0c:52:1f:93:9d:52:6c:21:cb:70:a8:2e:e9:24:ba:
                    c1:79:18:86:c6:3e:df:1e:ef:3a:94:8c:cd:03:bb:
                    f9:1c:57:52:68:07:88:6f:02:7f:68:1e:a6:a2:ec:
                    1b:be:ed:07:6e:96:10:6a:71:74:2f:d9:14:a5:0d:
                    fa:d4:ca:6f:3d:e6:54:fb:05:55:e8:24:0a:0d:bb:
                    48:04:3d:f8:68:1a:84:2f:59:30:44:ac:38:3a:e4:
                    db:f4:ae:8f:e5:79:11:9a:54:b9:42:12:04:9b:da:
                    12:10:01:de:c8:e0:14:67:4a:be:d3:2c:7d:34:c5:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:09:EE:FC:6B:10:6D:54:B3:45:23:06:04:B8:2C:AB:A6:D8:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.240.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:30:e9:b1:20:fb:e1:71:7c:34:60:c4:ba:03:25:80:15:bb:
         8f:a0:bf:8e:0a:e8:a3:ba:cf:49:e3:fd:3b:df:b3:59:ad:21:
         ca:f8:04:26:3e:dc:49:db:f0:fd:8d:17:01:b5:b1:c0:b0:85:
         71:28:86:60:0a:fe:8b:6e:c5:4e:98:1a:8b:0a:5c:2e:4b:46:
         9a:ed:2c:33:e6:42:89:ab:40:27:07:c2:e2:69:50:1f:ea:c4:
         df:07:0a:9d:1f:f3:95:61:ac:77:57:28:ed:ba:da:61:ff:f2:
         33:79:bc:77:95:42:94:e6:1b:e7:f8:95:3e:4b:56:15:16:26:
         06:4a:48:1b:5e:74:92:44:b2:14:7a:a2:ce:84:1a:30:2e:60:
         de:d2:62:64:97:23:e8:26:fc:c5:16:d2:05:ec:69:82:d0:61:
         60:d3:07:df:56:54:98:20:53:ab:14:a9:fa:3e:28:b2:00:9f:
         e4:f5:96:30:d7:54:36:93:c8:dd:a0:55:87:fb:f1:27:ce:12:
         10:e0:44:fc:5f:f2:65:c1:d9:73:0c:4e:73:a5:2d:73:59:d2:
         b6:1a:f1:24:57:5c:90:2f:0a:18:b6:68:c4:58:63:fd:9f:26:
         a7:31:73:55:39:53:c6:52:7b:12:05:6f:e2:19:5e:38:5d:03:
         a9:7a:3b:53
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGWbWtE8hxwKuVmvdOUV416Gjjb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAyMTEwWhcNMjUwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYWJhOWRjZDY1NzdkODk0YmUwMmQxNjVkYjE0ZTdlNzUw
YmUzNDMzNDA2YTEyYmM3NmQyZjViZThiZjQ1ZDc3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDly8OPSj47hlyrS4W64YqTvWMUd4c+6jQRpKI1x/06Xxo
oFagfn4ZCq7J4irAo2LBEAQ2hKrZhhenRO/wQGtbEz7C0gO/nWm7kcRmC7PBEGa1
77TKmobMzCtEHHgkA88KsoSkEOr9Fxcp2WkktI/XxwxOpzjDXmgrqvAQCkptGWFj
dHb8igxSH5OdUmwhy3CoLukkusF5GIbGPt8e7zqUjM0Du/kcV1JoB4hvAn9oHqai
7Bu+7QdulhBqcXQv2RSlDfrUym895lT7BVXoJAoNu0gEPfhoGoQvWTBErDg65Nv0
ro/leRGaVLlCEgSb2hIQAd7I4BRnSr7TLH00xU3HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbRoJ7vxrEG1Us0UjBgS4LKum2IEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkNTBkYWU5LWEyZjYtNDJkMS1hMjNlLTlmMzYxYzNmZWQyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZC8EAwDQYJKoZIhvcNAQELBQADggEBABIw6bEg++FxfDRgxLoDJYAVu4+g
v44K6KO6z0nj/Tvfs1mtIcr4BCY+3Enb8P2NFwG1scCwhXEohmAK/otuxU6YGosK
XC5LRprtLDPmQomrQCcHwuJpUB/qxN8HCp0f85VhrHdXKO262mH/8jN5vHeVQpTm
G+f4lT5LVhUWJgZKSBtedJJEshR6os6EGjAuYN7SYmSXI+gm/MUW0gXsaYLQYWDT
B99WVJggU6sUqfo+KLIAn+T1ljDXVDaTyN2gVYf78SfOEhDgRPxf8mXB2XMMTnOl
LXNZ0rYa8SRXXJAvChi2aMRYY/2fJqcxc1U5U8ZSexIFb+IZXjhdA6l6O1M=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:22:07 2025 by rpki-client