Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa
File:                     a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa (raw, json)
Hash identifier:          5dT/TKDgWJb73WCuNTn08ldfmGGzUlU/9MmKXUMRxIc=
Subject key identifier:   98:CC:55:97:75:C5:19:F6:63:C1:F2:D7:62:B1:62:D2:ED:C2:EF:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D281371A782C66B27F465C2AD18B711B89335D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa
Signing time:             Wed 06 Aug 2025 15:06:59 +0000
ROA not before:           Wed 06 Aug 2025 15:06:59 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        182.24.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:28:13:71:a7:82:c6:6b:27:f4:65:c2:ad:18:b7:11:b8:93:35:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 15:06:59 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=73f1a9d844c8d0d793e0bc9e5bc2d8ff2cf8be552d48c052be699259421bc3a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:ae:ff:2e:98:f8:83:06:47:ca:9c:3d:ee:
                    f9:8b:ef:69:c5:28:42:05:f7:79:d8:d6:52:ea:6f:
                    28:8d:7a:cf:27:c1:bd:59:6b:e4:dd:f8:e3:fe:f2:
                    a8:08:05:2c:b9:6c:bf:82:97:07:18:23:1b:6b:0c:
                    a3:15:87:ac:e2:01:d9:67:86:97:83:90:e8:69:30:
                    5d:4d:c4:80:a5:4a:0e:88:55:98:71:eb:56:77:60:
                    45:fa:ed:da:e4:b1:3e:d0:13:62:6d:4a:cb:b2:8b:
                    02:09:cf:02:ff:51:29:25:da:16:2e:2b:e2:48:ab:
                    dd:f1:3b:5b:42:e2:32:2e:56:16:f4:62:bf:4d:d2:
                    a4:76:28:44:bb:36:61:0d:fb:58:2c:5f:2f:b5:3e:
                    18:bc:e4:3c:23:5e:1a:fb:6b:be:59:1a:d0:85:e7:
                    82:7c:af:19:3e:81:f8:3b:3b:62:71:30:3c:45:bb:
                    db:3e:df:97:84:f8:49:4b:71:34:cd:f2:f1:ed:25:
                    bc:45:40:b2:bc:81:98:f7:d2:f0:b5:c6:0b:34:ab:
                    27:45:d0:16:9c:f1:54:72:5d:14:af:42:66:75:13:
                    28:9c:77:f0:2a:7f:e9:4b:a3:18:b5:92:18:f9:87:
                    d3:6d:6a:e8:0a:ea:ad:e7:05:3a:a1:a4:c8:03:e5:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CC:55:97:75:C5:19:F6:63:C1:F2:D7:62:B1:62:D2:ED:C2:EF:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:bb:16:75:1c:7e:a1:c0:f8:78:d8:98:4b:68:09:65:a9:
         bb:f8:ad:0d:84:ef:5c:41:8b:31:cd:90:c1:97:9c:95:fb:bf:
         16:03:f2:75:f5:f6:47:5d:5e:2e:5e:3d:aa:5c:53:12:62:93:
         9c:3e:78:14:14:0f:54:da:1e:b0:71:b7:a6:4e:a7:cd:b4:c6:
         a1:6e:8d:70:c9:58:4c:1d:3b:b7:cc:ec:7b:01:fd:a0:56:3e:
         08:51:d3:88:3b:b6:7a:33:83:93:04:86:b1:97:18:85:a9:7c:
         7e:97:9b:70:62:23:02:ad:05:f2:cd:e3:87:67:9e:13:86:17:
         22:4c:f0:d9:cb:8d:24:bc:ea:18:a0:fe:6b:e4:e4:ea:9c:dd:
         3e:69:4e:3d:af:7b:12:e0:4a:33:a7:5e:a5:b4:82:5c:e5:c3:
         07:6f:10:e6:04:bd:39:c6:64:59:67:ba:18:43:ad:6e:19:dd:
         94:71:d7:3a:05:9b:2e:68:cb:7e:14:47:ea:a8:62:19:a2:7a:
         4a:9a:2b:e1:a4:7e:52:46:9b:31:7a:da:d3:7d:e1:49:43:ae:
         e8:4d:5c:18:ca:72:07:e5:51:d6:8b:21:f7:6a:3b:fb:c4:a7:
         f8:75:fb:32:17:db:e9:a9:1d:d3:27:77:fc:29:c2:0c:b3:28:
         7a:d0:11:1c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPSgTcaeCxmsn9GXCrRi3EbiTNdEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MTUwNjU5WhcNMjUwOTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3M2YxYTlkODQ0YzhkMGQ3OTNlMGJjOWU1YmMyZDhmZjJj
ZjhiZTU1MmQ0OGMwNTJiZTY5OTI1OTQyMWJjM2EwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrA67/Lpj4gwZHypw97vmL72nFKEIF93nY1lLqbyiNes8n
wb1Za+Td+OP+8qgIBSy5bL+ClwcYIxtrDKMVh6ziAdlnhpeDkOhpMF1NxIClSg6I
VZhx61Z3YEX67drksT7QE2JtSsuyiwIJzwL/USkl2hYuK+JIq93xO1tC4jIuVhb0
Yr9N0qR2KES7NmEN+1gsXy+1Phi85DwjXhr7a75ZGtCF54J8rxk+gfg7O2JxMDxF
u9s+35eE+ElLcTTN8vHtJbxFQLK8gZj30vC1xgs0qydF0Bac8VRyXRSvQmZ1Eyic
d/Aqf+lLoxi1khj5h9NtaugK6q3nBTqhpMgD5ZWxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmMxVl3XFGfZjwfLXYrFi0u3C734wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ExZjRmZTJhLTdmYWUtNGU1Mi1hOTI5LTIxNmQzY2RiOTZlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwK2GDANBgkqhkiG9w0BAQsFAAOCAQEAhbu7FnUcfqHA+HjYmEtoCWWpu/it
DYTvXEGLMc2QwZeclfu/FgPydfX2R11eLl49qlxTEmKTnD54FBQPVNoesHG3pk6n
zbTGoW6NcMlYTB07t8zsewH9oFY+CFHTiDu2ejODkwSGsZcYhal8fpebcGIjAq0F
8s3jh2eeE4YXIkzw2cuNJLzqGKD+a+Tk6pzdPmlOPa97EuBKM6depbSCXOXDB28Q
5gS9OcZkWWe6GEOtbhndlHHXOgWbLmjLfhRH6qhiGaJ6Spor4aR+UkabMXra033h
SUOu6E1cGMpyB+VR1osh92o7+8Sn+HX7Mhfb6akd0yd3/CnCDLMoetARHA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:57 2025 by rpki-client