Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa
File:                     7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json)
Hash identifier:          uLK330kG3KGmn+69F1VTinH6cqvMQL1svTKkwq9vxsw=
Subject key identifier:   7E:DE:4B:09:7F:E3:02:3C:85:88:F3:5E:88:4A:69:A8:4F:8B:0E:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53902B4886483814AAF0F395E893FC1667F9BC5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa
Signing time:             Mon 04 Aug 2025 15:41:56 +0000
ROA not before:           Mon 04 Aug 2025 15:41:56 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.23.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:2b:48:86:48:38:14:aa:f0:f3:95:e8:93:fc:16:67:f9:bc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 15:41:56 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=f1f0c27c110d34cc4a8bdd23625ba884b70e6f743a1d486bf5e975dd868c0620, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:c5:51:3c:5f:ce:a6:78:8c:8a:5e:62:8d:
                    8d:eb:4f:a9:6b:2e:d7:ba:94:57:fe:8d:48:8e:85:
                    03:6f:94:3f:30:22:79:0f:1f:99:15:08:5e:c5:9a:
                    33:44:67:fe:11:24:c6:11:db:6e:9f:30:14:ec:8e:
                    42:6b:c3:03:61:7c:88:65:cb:1e:c0:fc:2e:4f:15:
                    e8:42:11:79:53:41:de:4f:6f:6c:80:d6:d4:be:7e:
                    95:5d:cf:58:46:5d:27:9d:8c:00:e9:0e:15:4c:72:
                    ae:7b:d9:e0:e9:99:22:db:a2:36:d9:b6:1e:7a:9b:
                    23:81:36:5e:b2:a1:a4:76:5a:b9:aa:2a:78:d2:05:
                    3c:76:0d:59:43:8b:90:d8:cc:41:5d:45:f6:74:db:
                    c6:7b:19:12:ae:ef:24:5a:6e:f6:03:b6:05:06:78:
                    75:87:6b:ff:a9:37:75:a1:6c:01:e3:ef:ba:2c:fd:
                    61:14:55:89:57:eb:ca:8b:37:d6:32:36:41:f5:16:
                    bf:21:65:f3:00:21:51:52:e6:38:96:c5:0f:bb:69:
                    15:33:87:10:53:2a:2a:dc:8b:21:8f:c2:c2:76:18:
                    ed:f6:2c:81:df:e5:41:d6:fd:1c:32:14:78:b2:e7:
                    32:69:f1:7a:9a:3e:79:bc:83:93:b6:41:06:70:44:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:4B:09:7F:E3:02:3C:85:88:F3:5E:88:4A:69:A8:4F:8B:0E:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.23.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         36:c2:ef:0c:e4:06:71:3b:74:0a:7d:60:7f:9c:96:07:0d:32:
         bf:8e:82:ce:c3:a8:ab:14:bc:7b:45:68:66:ea:56:fc:aa:40:
         7e:fa:e7:18:a9:c0:05:45:15:e3:45:df:6b:0e:62:0b:a2:3b:
         dc:9d:b9:13:5d:76:ff:28:01:a1:88:5e:b3:d7:12:d5:75:ea:
         13:3c:93:a6:3d:57:48:74:47:e7:fe:99:07:05:a3:84:12:55:
         a5:80:b7:f5:0e:31:ee:0f:0b:e9:04:be:53:3c:31:e6:79:13:
         10:d5:f9:a7:e4:ca:b4:ed:e7:5d:6b:09:44:6c:e6:9e:c6:9c:
         af:93:6a:e9:db:79:fc:da:d8:db:d6:6a:f5:9e:64:79:3e:e8:
         5c:ef:09:ee:b0:fb:d3:0f:07:e7:2e:7e:98:d3:80:36:e7:ff:
         c0:fe:c6:70:72:5a:f9:74:9e:e5:23:38:41:98:67:18:00:bd:
         c1:47:55:1a:05:66:c6:68:f8:f3:85:d2:c5:61:76:d6:93:66:
         95:c9:9d:82:ee:c9:71:5b:d9:d8:fb:98:cc:cd:43:45:82:a6:
         98:59:7a:da:99:80:4f:2d:70:29:a8:af:95:7d:fc:2a:62:29:
         35:ef:a1:83:8f:c9:09:ec:4e:59:6d:77:2d:8c:52:b0:71:bb:
         f7:b4:ab:04
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU5ArSIZIOBSq8POV6JP8Fmf5vFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU0MTU2WhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMWYwYzI3YzExMGQzNGNjNGE4YmRkMjM2MjViYTg4NGI3
MGU2Zjc0M2ExZDQ4NmJmNWU5NzVkZDg2OGMwNjIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWSsVRPF/OpniMil5ijY3rT6lrLte6lFf+jUiOhQNvlD8w
InkPH5kVCF7FmjNEZ/4RJMYR226fMBTsjkJrwwNhfIhlyx7A/C5PFehCEXlTQd5P
b2yA1tS+fpVdz1hGXSedjADpDhVMcq572eDpmSLbojbZth56myOBNl6yoaR2Wrmq
KnjSBTx2DVlDi5DYzEFdRfZ028Z7GRKu7yRabvYDtgUGeHWHa/+pN3WhbAHj77os
/WEUVYlX68qLN9YyNkH1Fr8hZfMAIVFS5jiWxQ+7aRUzhxBTKirciyGPwsJ2GO32
LIHf5UHW/RwyFHiy5zJp8XqaPnm8g5O2QQZwRL43AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUft5LCX/jAjyFiPNeiEppqE+LDggwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBADbC7wzkBnE7dAp9YH+clgcNMr+O
gs7DqKsUvHtFaGbqVvyqQH765xipwAVFFeNF32sOYguiO9yduRNddv8oAaGIXrPX
EtV16hM8k6Y9V0h0R+f+mQcFo4QSVaWAt/UOMe4PC+kEvlM8MeZ5ExDV+afkyrTt
511rCURs5p7GnK+Taunbefza2NvWavWeZHk+6FzvCe6w+9MPB+cufpjTgDbn/8D+
xnByWvl0nuUjOEGYZxgAvcFHVRoFZsZo+POF0sVhdtaTZpXJnYLuyXFb2dj7mMzN
Q0WCpphZetqZgE8tcCmor5V9/CpiKTXvoYOPyQnsTlltdy2MUrBxu/e0qwQ=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:59 2025 by rpki-client