Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa
File:                     690a6427-0431-4128-b562-6a43d052c2a9.roa (raw, json)
Hash identifier:          QJ6C+7NDPd4Llc1iW779IDN1JZPCkQ+ceg76TpbvtO4=
Subject key identifier:   44:0B:1A:A2:CE:88:4A:FD:18:8F:E0:26:63:7A:48:34:72:9A:F1:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59EBEDA13D9098B0ED7FAB14B5784798772F3E66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa
Signing time:             Sat 14 Jun 2025 00:21:50 +0000
ROA not before:           Sat 14 Jun 2025 00:21:50 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.23.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:eb:ed:a1:3d:90:98:b0:ed:7f:ab:14:b5:78:47:98:77:2f:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:21:50 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=6262ca3d6a690147f94af3ddaad1f435886f89e1664ef344f32f552c104dbd06, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:26:82:69:0f:b6:d6:a9:1f:74:26:f9:bd:
                    13:ad:22:2b:c5:83:f1:1e:76:ab:48:ca:e5:81:a1:
                    28:a3:fb:85:71:d3:bf:0b:04:21:d5:4c:86:b5:bc:
                    78:b2:ab:55:7d:f2:cd:b2:a8:74:d6:e7:b9:c9:42:
                    7f:75:a5:f8:34:48:70:9e:d3:8a:c5:20:19:e4:f6:
                    22:5c:93:eb:24:c8:33:2d:a5:4b:a4:00:d2:d9:a7:
                    76:54:9e:96:66:b1:4b:b5:62:53:17:96:ec:e0:5f:
                    4a:6d:98:a9:5a:71:cd:1d:77:a8:5c:23:08:ed:ad:
                    ae:a9:9c:6f:b1:60:5b:68:03:22:ff:d0:1a:aa:66:
                    0e:6a:0b:0c:5e:70:f5:69:93:76:f9:06:e0:b1:36:
                    13:59:fd:a0:c7:e3:fa:3d:e6:13:23:d9:b7:83:4a:
                    db:09:a4:da:30:8f:4d:a1:d8:f8:77:20:a6:0c:a5:
                    0f:4b:a9:dd:ff:2e:aa:7e:34:11:d2:d3:47:e3:5b:
                    ca:b7:96:5f:ad:58:90:c5:e1:04:9f:85:9d:5b:10:
                    ef:c6:32:de:77:ad:3f:60:ed:8c:96:22:0e:ec:0d:
                    fc:f5:ee:a2:b1:3f:9b:94:a1:1c:3b:a1:ed:1b:6f:
                    0a:8c:ab:13:c7:fa:78:03:7c:42:39:90:4a:47:63:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:1A:A2:CE:88:4A:FD:18:8F:E0:26:63:7A:48:34:72:9A:F1:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.23.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:79:a4:73:21:6a:af:19:fc:06:b1:15:b1:27:7a:e3:2a:2c:
         57:77:a0:f5:82:cc:ef:d4:b1:34:66:a7:aa:88:ee:76:2a:c8:
         92:3b:2a:ca:31:66:ef:71:85:a2:47:e9:6d:cd:38:d6:73:8a:
         91:7e:ee:f9:67:c9:a5:2a:21:1e:85:dc:40:7a:ef:ce:26:89:
         f9:d2:f0:1b:cc:fb:27:ce:8e:35:ce:ac:76:75:98:51:fc:f7:
         97:98:dc:ee:99:1c:33:a7:52:aa:7b:1e:d0:0c:15:01:f2:34:
         fc:8e:e5:1c:96:33:20:22:13:a1:ce:a6:a1:49:d3:48:88:de:
         86:83:e3:7c:cc:ca:6e:13:ec:79:ec:8d:19:a9:c3:f2:4b:67:
         99:7d:03:50:f9:41:f4:8a:4c:82:53:50:f4:60:2c:05:89:d4:
         eb:ca:98:c4:41:ed:a1:8c:2b:61:99:c5:43:23:a0:f8:53:71:
         5c:e2:6c:9e:c8:2b:5a:fd:72:ec:13:c3:59:9f:de:a2:e4:b9:
         b3:06:15:94:88:1c:d8:47:af:5f:8c:dc:65:34:45:d8:fc:3c:
         cc:d7:52:3c:d9:62:12:e8:75:12:b2:23:34:94:46:67:46:e4:
         f8:ec:87:c7:70:79:82:9f:66:d0:67:85:80:a6:d9:0e:2d:7a:
         7b:c0:2d:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWevtoT2QmLDtf6sUtXhHmHcvPmYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAyMTUwWhcNMjUwNzE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjYyY2EzZDZhNjkwMTQ3Zjk0YWYzZGRhYWQxZjQzNTg4
NmY4OWUxNjY0ZWYzNDRmMzJmNTUyYzEwNGRiZDA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWqiaCaQ+21qkfdCb5vROtIivFg/EedqtIyuWBoSij+4Vx
078LBCHVTIa1vHiyq1V98s2yqHTW57nJQn91pfg0SHCe04rFIBnk9iJck+skyDMt
pUukANLZp3ZUnpZmsUu1YlMXluzgX0ptmKlacc0dd6hcIwjtra6pnG+xYFtoAyL/
0BqqZg5qCwxecPVpk3b5BuCxNhNZ/aDH4/o95hMj2beDStsJpNowj02h2Ph3IKYM
pQ9Lqd3/Lqp+NBHS00fjW8q3ll+tWJDF4QSfhZ1bEO/GMt53rT9g7YyWIg7sDfz1
7qKxP5uUoRw7oe0bbwqMqxPH+ngDfEI5kEpHY/v9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURAsaos6ISv0Yj+AmY3pINHKa8UkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY5MGE2NDI3LTA0MzEtNDEyOC1iNTYyLTZhNDNkMDUyYzJhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIXF0gwDQYJKoZIhvcNAQELBQADggEBACJ5pHMhaq8Z/AaxFbEneuMqLFd3
oPWCzO/UsTRmp6qI7nYqyJI7KsoxZu9xhaJH6W3NONZzipF+7vlnyaUqIR6F3EB6
784mifnS8BvM+yfOjjXOrHZ1mFH895eY3O6ZHDOnUqp7HtAMFQHyNPyO5RyWMyAi
E6HOpqFJ00iI3oaD43zMym4T7HnsjRmpw/JLZ5l9A1D5QfSKTIJTUPRgLAWJ1OvK
mMRB7aGMK2GZxUMjoPhTcVzibJ7IK1r9cuwTw1mf3qLkubMGFZSIHNhHr1+M3GU0
Rdj8PMzXUjzZYhLodRKyIzSURmdG5Pjsh8dweYKfZtBnhYCm2Q4tenvALZ8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:04 2025 by rpki-client