Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa
File:                     6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa (raw, json)
Hash identifier:          wjHjeCAT2eQNdafirlj7daoRlCQoe4GJrGQEKbb5Ipo=
Subject key identifier:   63:D7:EC:30:AD:2A:76:F5:AD:6D:89:7A:FB:4F:BE:4C:CE:D5:22:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1455C6D7007A8FDFDDEA948070022C4F634A7B54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa
Signing time:             Mon 04 Aug 2025 18:22:01 +0000
ROA not before:           Mon 04 Aug 2025 18:22:01 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:55:c6:d7:00:7a:8f:df:dd:ea:94:80:70:02:2c:4f:63:4a:7b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 18:22:01 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=b602497706d46b41593e25b6ea5ee312fc808b192a54d4d7245465f2f26169d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:72:ce:83:a0:37:7b:65:f1:b6:e3:86:21:
                    3f:77:84:81:40:13:4a:a8:45:bb:5e:ce:fc:98:35:
                    c0:eb:fe:0f:b5:ed:76:41:8b:b5:6e:33:71:f3:6f:
                    ea:5d:7d:d2:39:a4:af:e7:3c:60:49:0a:73:bf:1d:
                    36:dd:0d:de:94:73:76:6d:f6:84:36:e7:ba:d4:1e:
                    6b:d1:14:7e:f8:cf:66:86:d0:b1:a4:a2:2b:72:82:
                    ab:04:c4:19:1b:b8:f6:d7:69:6f:86:6d:da:dc:61:
                    77:9e:01:b0:11:2a:f4:f7:d3:09:f6:ae:d2:2f:0b:
                    02:ee:99:76:e1:7b:52:75:c8:e4:66:b5:be:3b:0d:
                    9b:5a:35:f6:f8:37:9a:7c:c3:56:a7:c1:73:63:b2:
                    12:6e:fd:db:27:5b:57:e3:99:ae:04:a0:b6:84:20:
                    44:2c:1e:ad:73:6d:14:02:ff:97:47:d8:16:7d:bb:
                    d1:f1:3d:56:31:df:d0:7b:c0:79:30:f0:8f:a3:40:
                    d0:a8:b3:c1:10:fb:31:15:e2:bd:31:d2:97:92:97:
                    b1:a6:d2:20:4c:64:4a:db:97:43:e8:16:5b:df:6c:
                    b7:31:63:dc:50:64:c8:dc:5a:8e:bb:9a:c9:99:97:
                    86:3e:08:cd:9e:7a:99:2f:c8:90:1a:32:24:e7:b6:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:EC:30:AD:2A:76:F5:AD:6D:89:7A:FB:4F:BE:4C:CE:D5:22:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e77088b-94f8-432b-9c1b-c0ec5a7ed02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:67:53:2c:1d:98:32:32:d2:ca:44:b9:5f:13:31:e1:1a:
         24:f8:e5:6d:29:7d:1c:e9:95:8f:91:fe:be:9a:a1:f6:ee:3e:
         0a:d7:b5:35:5a:de:b6:be:4a:de:86:f2:31:58:f6:c4:20:e9:
         f0:d4:0f:0c:13:e8:9e:e4:62:92:88:b0:25:6b:3f:60:30:03:
         09:11:cf:b9:58:51:1b:85:d1:1c:8a:1c:68:10:e5:89:ec:4c:
         2f:2a:e8:f0:65:1d:33:36:56:8c:b5:e6:32:6b:45:01:10:10:
         4f:3b:3f:e8:47:de:9b:05:c7:0b:4c:50:57:23:a2:05:59:ef:
         92:97:3b:26:0a:8c:33:f5:91:94:51:a8:65:c7:68:90:4a:75:
         78:18:2a:fa:87:17:fd:1e:ba:6d:a3:69:dc:1c:63:31:0e:d8:
         51:37:30:ed:aa:1f:41:3a:c5:4a:e8:85:7a:f3:38:df:98:c0:
         02:9a:88:f7:d3:0f:cd:19:44:57:02:44:c9:56:f4:e7:51:ad:
         ce:2a:20:c0:8d:32:15:19:98:59:01:68:61:83:17:c6:77:e1:
         91:3a:82:ce:58:a0:f5:59:e4:8c:4f:cc:b4:85:92:28:a8:5d:
         2a:3e:33:b7:ca:56:63:a1:b8:62:56:a0:24:31:bd:e6:f3:39:
         06:eb:fe:87
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFFXG1wB6j9/d6pSAcAIsT2NKe1QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTgyMjAxWhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjAyNDk3NzA2ZDQ2YjQxNTkzZTI1YjZlYTVlZTMxMmZj
ODA4YjE5MmE1NGQ0ZDcyNDU0NjVmMmYyNjE2OWQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpqnLOg6A3e2XxtuOGIT93hIFAE0qoRbtezvyYNcDr/g+1
7XZBi7VuM3Hzb+pdfdI5pK/nPGBJCnO/HTbdDd6Uc3Zt9oQ257rUHmvRFH74z2aG
0LGkoitygqsExBkbuPbXaW+GbdrcYXeeAbARKvT30wn2rtIvCwLumXbhe1J1yORm
tb47DZtaNfb4N5p8w1anwXNjshJu/dsnW1fjma4EoLaEIEQsHq1zbRQC/5dH2BZ9
u9HxPVYx39B7wHkw8I+jQNCos8EQ+zEV4r0x0peSl7Gm0iBMZErbl0PoFlvfbLcx
Y9xQZMjcWo67msmZl4Y+CM2eepkvyJAaMiTntqOPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUY9fsMK0qdvWtbYl6+0++TM7VIpcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlNzcwODhiLTk0ZjgtNDMyYi05YzFiLWMwZWM1YTdlZDAyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCN5jANBgkqhkiG9w0BAQsFAAOCAQEATTFnUywdmDIy0spEuV8TMeEaJPjl
bSl9HOmVj5H+vpqh9u4+Cte1NVretr5K3obyMVj2xCDp8NQPDBPonuRikoiwJWs/
YDADCRHPuVhRG4XRHIocaBDliexMLyro8GUdMzZWjLXmMmtFARAQTzs/6EfemwXH
C0xQVyOiBVnvkpc7JgqMM/WRlFGoZcdokEp1eBgq+ocX/R66baNp3BxjMQ7YUTcw
7aofQTrFSuiFevM435jAApqI99MPzRlEVwJEyVb051GtziogwI0yFRmYWQFoYYMX
xnfhkTqCzlig9VnkjE/MtIWSKKhdKj4zt8pWY6G4YlagJDG95vM5Buv+hw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:45 2025 by rpki-client