Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
File:                     603d26d7-c121-42e1-817f-ef0a806e3d69.roa (raw, json)
Hash identifier:          HI1pqJDZXbysbmdjei0MgY9rK8SRThsusaSYipLYLnw=
Subject key identifier:   0B:49:3D:6B:86:52:86:EE:92:48:F0:22:E4:50:95:AA:84:BB:10:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12FC5590D74DB5EF11EDF68A9D600A09EAD4A805
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
Signing time:             Fri 13 Jun 2025 00:50:31 +0000
ROA not before:           Fri 13 Jun 2025 00:50:31 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        185.212.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fc:55:90:d7:4d:b5:ef:11:ed:f6:8a:9d:60:0a:09:ea:d4:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:50:31 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=aa50725c66c2098e015299168533b1a262f2a56d3d1a2badad3b904a3c08a7a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:1c:7e:92:8d:84:c0:4f:2d:bf:a6:08:2d:
                    25:99:aa:4e:3e:f8:4a:15:fd:8f:d2:17:d2:68:cf:
                    71:4e:60:8c:23:74:5d:80:01:95:20:b5:d3:7a:3e:
                    53:2b:ac:59:af:a0:74:71:75:ba:fa:c1:4f:03:4d:
                    ae:9c:89:be:a3:73:d9:a4:4d:7c:b9:9f:e1:b1:b7:
                    d0:bb:4d:0f:a5:d3:f0:c1:23:3d:07:93:e8:17:56:
                    4b:ef:88:f7:32:86:e2:ef:12:14:9b:be:c9:04:1f:
                    6d:29:3a:5c:be:43:dc:c4:ae:6a:5a:c8:05:c9:6a:
                    ab:12:1c:84:21:47:69:d6:03:46:9c:25:37:9b:59:
                    7f:96:7b:b5:da:2c:84:ac:d2:5d:4e:3b:e2:32:32:
                    e4:be:ae:a8:cd:6f:8e:db:50:cf:bf:45:c1:3e:e7:
                    8d:a4:c9:13:46:2a:d7:cd:d9:c4:a6:dc:5e:35:c6:
                    cf:72:33:05:a5:98:69:0d:70:aa:3b:b5:1c:c2:46:
                    46:23:bc:e0:18:32:2d:82:71:88:e6:34:14:dd:58:
                    ce:48:9c:e0:5b:60:55:49:a5:74:12:5e:75:d1:71:
                    e0:23:58:9e:6e:14:e8:f7:a2:5c:b3:61:95:e7:a2:
                    5e:45:8e:a0:ab:50:57:e7:38:ec:50:1b:a3:bb:9c:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:3D:6B:86:52:86:EE:92:48:F0:22:E4:50:95:AA:84:BB:10:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:ee:4b:a4:af:e9:76:fa:6c:08:69:9d:b9:d0:d2:eb:29:7b:
         67:b6:4b:ec:9d:17:c8:a6:fc:ff:7b:89:04:cb:49:15:7c:40:
         1f:dd:58:31:8a:6a:32:6f:62:bf:b8:c2:ee:4b:ba:65:48:24:
         9b:fc:8d:8c:55:58:8a:72:5d:09:0b:b1:58:34:9b:5c:db:5c:
         af:eb:ad:da:83:62:60:88:1e:38:31:e0:fe:60:d3:9d:c5:b4:
         3f:33:5c:72:08:45:e9:5a:75:63:c5:59:56:02:2f:ee:1c:1d:
         49:9e:78:f6:f1:f0:b0:a0:d5:78:16:c9:4f:99:7b:39:0f:e7:
         7c:c3:85:61:96:a7:d7:5f:4e:d3:9c:91:2b:f6:7a:66:cb:05:
         4a:a4:76:15:8e:70:99:b7:50:be:a0:d9:4c:27:82:bb:f1:cc:
         d1:bb:e5:5e:f4:d6:9e:da:47:f2:f8:56:77:c6:4e:32:39:be:
         75:a6:ba:53:e1:06:1f:bd:e4:b9:2e:8e:4b:c4:24:f9:8d:47:
         31:6e:23:b1:e9:a7:7e:78:89:6b:62:a1:98:65:7f:ac:d1:ad:
         a5:71:b4:23:d3:57:5c:3e:4b:01:36:55:b8:ee:e4:a6:90:0d:
         60:39:8c:3a:ee:6c:42:8c:ae:96:f7:2f:52:29:2b:e4:37:18:
         fc:8c:b3:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEvxVkNdNte8R7faKnWAKCerUqAUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA1MDMxWhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTUwNzI1YzY2YzIwOThlMDE1Mjk5MTY4NTMzYjFhMjYy
ZjJhNTZkM2QxYTJiYWRhZDNiOTA0YTNjMDhhN2EyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/ahx+ko2EwE8tv6YILSWZqk4++EoV/Y/SF9Joz3FOYIwj
dF2AAZUgtdN6PlMrrFmvoHRxdbr6wU8DTa6cib6jc9mkTXy5n+Gxt9C7TQ+l0/DB
Iz0Hk+gXVkvviPcyhuLvEhSbvskEH20pOly+Q9zErmpayAXJaqsSHIQhR2nWA0ac
JTebWX+We7XaLISs0l1OO+IyMuS+rqjNb47bUM+/RcE+542kyRNGKtfN2cSm3F41
xs9yMwWlmGkNcKo7tRzCRkYjvOAYMi2CcYjmNBTdWM5InOBbYFVJpXQSXnXRceAj
WJ5uFOj3olyzYZXnol5FjqCrUFfnOOxQG6O7nL/zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC0k9a4ZShu6SSPAi5FCVqoS7EH0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYwM2QyNmQ3LWMxMjEtNDJlMS04MTdmLWVmMGE4MDZlM2Q2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK51MgwDQYJKoZIhvcNAQELBQADggEBAMDuS6Sv6Xb6bAhpnbnQ0uspe2e2
S+ydF8im/P97iQTLSRV8QB/dWDGKajJvYr+4wu5LumVIJJv8jYxVWIpyXQkLsVg0
m1zbXK/rrdqDYmCIHjgx4P5g053FtD8zXHIIReladWPFWVYCL+4cHUmeePbx8LCg
1XgWyU+ZezkP53zDhWGWp9dfTtOckSv2embLBUqkdhWOcJm3UL6g2UwngrvxzNG7
5V701p7aR/L4VnfGTjI5vnWmulPhBh+95LkujkvEJPmNRzFuI7Hpp354iWtioZhl
f6zRraVxtCPTV1w+SwE2Vbju5KaQDWA5jDrubEKMrpb3L1IpK+Q3GPyMs/w=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:45:38 2025 by rpki-client