Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
File:                     7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa (raw, json)
Hash identifier:          qoqu/+mGmkuC9Aak4uXIwNvX6z6bgOX16/usxy/ZYpU=
Subject key identifier:   FF:15:F1:4B:6D:29:7F:86:78:60:4C:A2:34:24:86:4A:3D:5C:61:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       059380407A7A3FE24AA3A9D1FEAA6D6AA8D45F25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
Signing time:             Fri 30 May 2025 00:00:23 +0000
ROA not before:           Fri 30 May 2025 00:00:23 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.255.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:93:80:40:7a:7a:3f:e2:4a:a3:a9:d1:fe:aa:6d:6a:a8:d4:5f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:00:23 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=b25b15758490341d360b82aaa9f6068415640b5b04904bd48659d7a211f59e86, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:b8:96:5f:4e:92:f8:05:0a:85:5f:97:52:
                    66:2f:f0:aa:7a:27:82:f9:a2:06:ec:38:73:c9:8b:
                    d1:0d:4a:d4:96:d0:46:a6:5e:40:34:50:67:c2:1f:
                    ef:2e:1c:45:89:2f:24:73:fb:07:1b:20:a4:bb:77:
                    dd:44:1e:95:a4:50:ea:8a:c3:5b:b7:16:35:7f:17:
                    f1:69:dd:a5:d7:ab:8a:ac:7e:84:ac:b2:f2:1a:fb:
                    5f:7a:6b:5b:13:d8:9f:ab:ba:55:cd:75:27:d9:f3:
                    8b:a9:05:41:da:18:6f:6e:67:77:84:14:bb:f7:d2:
                    e1:97:a9:cf:86:ae:de:26:40:d9:eb:17:ce:69:55:
                    61:1e:df:77:09:2c:6d:5b:cd:a9:70:1e:81:dd:a5:
                    a6:af:f9:47:10:7d:0f:2e:b2:a2:12:e4:68:b1:18:
                    1c:bd:f3:77:5a:ae:e8:91:d0:0f:83:cb:5a:8d:e5:
                    36:0e:a4:68:6d:b0:e6:3c:04:c9:4c:f3:de:9a:48:
                    16:dd:21:b3:95:db:43:70:9c:76:20:d3:c4:a3:67:
                    47:53:87:5a:ee:20:75:0d:83:4e:16:e1:0d:f5:f7:
                    00:74:00:13:c1:01:07:12:eb:1f:d1:4f:be:c3:81:
                    33:0d:66:36:82:e2:a8:94:03:21:82:d4:98:34:68:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:15:F1:4B:6D:29:7F:86:78:60:4C:A2:34:24:86:4A:3D:5C:61:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:83:7d:4e:8b:e7:e3:75:98:85:3c:21:da:0b:71:64:8c:0e:
         db:08:ce:0b:5d:21:ad:ef:9b:09:cd:d0:f6:82:76:5b:ec:31:
         a5:57:69:44:ea:7c:61:87:13:56:a3:2d:99:a1:3b:b8:50:fc:
         6d:e1:b0:1c:0f:b7:2e:4b:83:be:69:aa:1c:af:4c:fc:42:95:
         96:5e:d5:98:bb:4e:e4:e9:67:97:ca:d4:77:d6:30:bf:b0:9d:
         c7:aa:5f:38:4d:e8:a9:ef:1f:db:4b:ca:dd:0b:17:df:94:0a:
         c4:c3:b2:1c:d7:06:11:ac:6b:41:af:88:17:6a:ce:de:67:05:
         7d:a0:12:40:23:45:e4:07:e3:c7:34:d8:9a:22:ea:cc:0e:e9:
         a6:9f:25:fc:ea:2b:dd:1b:9e:07:20:d8:88:8c:98:67:80:13:
         20:9e:6e:1e:57:79:92:e5:ff:b9:43:35:9c:ac:8b:15:19:87:
         11:64:57:ad:37:03:7f:22:d7:f7:4f:f3:b5:0e:c2:77:5b:01:
         da:64:5b:76:f2:f6:c6:0a:29:8e:46:7d:71:77:91:71:57:04:
         57:70:d8:e8:92:e8:3b:56:9e:54:4e:5a:b1:46:2e:4a:d3:4c:
         c8:d3:00:9c:06:f5:0a:b5:73:99:72:ee:83:c0:cc:37:82:a8:
         10:1b:c7:e3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBZOAQHp6P+JKo6nR/qptaqjUXyUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAwMDIzWhcNMjUwNzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMjViMTU3NTg0OTAzNDFkMzYwYjgyYWFhOWY2MDY4NDE1
NjQwYjViMDQ5MDRiZDQ4NjU5ZDdhMjExZjU5ZTg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCdriWX06S+AUKhV+XUmYv8Kp6J4L5ogbsOHPJi9ENStSW
0EamXkA0UGfCH+8uHEWJLyRz+wcbIKS7d91EHpWkUOqKw1u3FjV/F/Fp3aXXq4qs
foSssvIa+196a1sT2J+rulXNdSfZ84upBUHaGG9uZ3eEFLv30uGXqc+Grt4mQNnr
F85pVWEe33cJLG1bzalwHoHdpaav+UcQfQ8usqIS5GixGBy983daruiR0A+Dy1qN
5TYOpGhtsOY8BMlM896aSBbdIbOV20NwnHYg08SjZ0dTh1ruIHUNg04W4Q319wB0
ABPBAQcS6x/RT77DgTMNZjaC4qiUAyGC1Jg0aAElAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/xXxS20pf4Z4YEyiNCSGSj1cYc4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdjMGQxN2JlLTI1NmMtNGQyNi04M2JhLWIzYWU2OGFlZWY2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABo/zgwDQYJKoZIhvcNAQELBQADggEBABaDfU6L5+N1mIU8IdoLcWSMDtsI
zgtdIa3vmwnN0PaCdlvsMaVXaUTqfGGHE1ajLZmhO7hQ/G3hsBwPty5Lg75pqhyv
TPxClZZe1Zi7TuTpZ5fK1HfWML+wnceqXzhN6KnvH9tLyt0LF9+UCsTDshzXBhGs
a0GviBdqzt5nBX2gEkAjReQH48c02Joi6swO6aafJfzqK90bngcg2IiMmGeAEyCe
bh5XeZLl/7lDNZysixUZhxFkV603A38i1/dP87UOwndbAdpkW3by9sYKKY5GfXF3
kXFXBFdw2OiS6DtWnlROWrFGLkrTTMjTAJwG9Qq1c5ly7oPAzDeCqBAbx+M=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:26 2025 by rpki-client