Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a580a5ae-e412-4ea7-9bfb-45a573f15e9b.roa
File:                     a580a5ae-e412-4ea7-9bfb-45a573f15e9b.roa (raw, json)
Hash identifier:          Jbozp9olhtM/kDQEr+5Y7XxTnw273kXF3B6tEajR9/o=
Subject key identifier:   2C:72:A3:AA:C2:43:23:17:4F:94:23:DB:10:7A:95:2D:46:9A:62:05
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69C3201AB6BAF6666081746B5D42874D63E0F382
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a580a5ae-e412-4ea7-9bfb-45a573f15e9b.roa
Signing time:             Tue 05 Aug 2025 17:52:04 +0000
ROA not before:           Tue 05 Aug 2025 17:52:04 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        92.192.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:20:1a:b6:ba:f6:66:60:81:74:6b:5d:42:87:4d:63:e0:f3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 17:52:04 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=d7498851b6bba4ab186bbf492080134383ba440b88d65bffcf7dfc4627410901, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:8f:45:4a:c9:cf:f2:d6:39:30:ca:97:d4:
                    c9:da:ab:d7:d0:21:ac:5b:3e:17:4b:36:4d:c5:b1:
                    49:6f:92:aa:f6:74:b1:e7:10:0a:88:2a:8c:a0:0a:
                    d2:89:6c:40:32:7b:10:13:88:e8:ea:71:c9:85:bc:
                    39:ea:56:04:a0:df:05:36:90:f0:6f:e9:2d:b0:94:
                    8d:16:41:45:14:cc:ed:ba:7c:66:06:b0:fb:44:6c:
                    4e:b6:21:d4:d8:04:72:4e:20:1a:da:fb:4d:e8:73:
                    c2:06:99:31:7d:41:9e:ab:e7:70:9b:71:63:ef:19:
                    a1:72:6d:a2:5a:88:23:e7:8a:d1:2e:ec:14:23:8b:
                    80:5e:e0:54:c6:d4:dc:13:30:94:f7:44:4b:ff:f7:
                    7d:89:87:e3:ca:f5:c6:b2:41:fd:63:44:b2:2c:39:
                    be:aa:ee:e1:0e:a4:36:f6:26:0e:05:b0:89:32:6a:
                    09:63:41:26:67:f6:10:03:0f:af:82:4b:6e:57:bc:
                    5a:86:26:a5:89:01:de:c2:3a:3a:37:16:ec:45:65:
                    04:09:0f:31:20:e5:12:35:40:f9:85:53:a2:de:d3:
                    08:92:b8:60:92:a6:90:88:73:ae:d4:a0:bf:40:95:
                    0d:e7:a4:10:98:bf:e0:72:4e:87:7e:67:93:ff:ec:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:72:A3:AA:C2:43:23:17:4F:94:23:DB:10:7A:95:2D:46:9A:62:05
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a580a5ae-e412-4ea7-9bfb-45a573f15e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:ec:8b:4d:2b:ef:52:70:18:e0:48:44:1d:6d:90:bf:58:
         11:0f:69:50:38:ad:ec:d4:06:ef:12:d3:13:ad:39:b7:fb:0d:
         c7:4b:ff:cd:61:38:f5:b3:51:73:e8:f5:01:9f:8d:77:08:19:
         46:58:fa:ab:90:7b:c3:91:ad:66:88:1c:3c:2c:c0:15:0e:a5:
         c8:6c:a3:17:30:4f:06:65:6f:3d:49:cb:d9:a3:94:4c:ac:af:
         3a:94:89:77:dd:2b:2a:42:4e:08:e7:78:95:d4:94:6a:03:54:
         cf:0d:3b:16:b2:e8:08:fc:6c:ba:a9:30:37:1f:4f:09:de:54:
         74:28:9b:68:ae:ce:d8:5b:9a:34:98:76:41:01:5c:87:e2:dc:
         b6:05:c0:13:8e:2b:cc:bb:ec:98:bd:87:b0:24:0a:3b:b6:f4:
         8b:df:a3:f6:4c:49:40:56:7f:0e:b7:c2:1a:35:dc:5d:57:0e:
         e8:b3:0e:2b:b7:2a:31:b0:f2:92:77:d2:01:22:05:64:07:a5:
         98:23:2c:55:ab:8f:90:b4:8c:c7:e6:40:18:53:45:bf:69:7a:
         fc:3d:8d:50:3e:e9:6e:1b:89:14:31:b4:db:ba:6e:f7:a9:8b:
         e8:6a:02:d3:bb:6b:15:2a:f8:c3:3d:33:78:90:d6:ba:89:4f:
         0b:46:1e:ea
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUacMgGra69mZggXRrXUKHTWPg84IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MTc1MjA0WhcNMjUwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzQ5ODg1MWI2YmJhNGFiMTg2YmJmNDkyMDgwMTM0Mzgz
YmE0NDBiODhkNjViZmZjZjdkZmM0NjI3NDEwOTAxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCe3Y9FSsnP8tY5MMqX1Mnaq9fQIaxbPhdLNk3FsUlvkqr2
dLHnEAqIKoygCtKJbEAyexATiOjqccmFvDnqVgSg3wU2kPBv6S2wlI0WQUUUzO26
fGYGsPtEbE62IdTYBHJOIBra+03oc8IGmTF9QZ6r53CbcWPvGaFybaJaiCPnitEu
7BQji4Be4FTG1NwTMJT3REv/932Jh+PK9cayQf1jRLIsOb6q7uEOpDb2Jg4FsIky
agljQSZn9hADD6+CS25XvFqGJqWJAd7COjo3FuxFZQQJDzEg5RI1QPmFU6Le0wiS
uGCSppCIc67UoL9AlQ3npBCYv+ByTod+Z5P/7OFpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQULHKjqsJDIxdPlCPbEHqVLUaaYgUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1ODBhNWFlLWU0MTItNGVhNy05YmZiLTQ1YTU3M2YxNWU5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBcwDANBgkqhkiG9w0BAQsFAAOCAQEAvATsi00r71JwGOBIRB1tkL9YEQ9p
UDit7NQG7xLTE605t/sNx0v/zWE49bNRc+j1AZ+NdwgZRlj6q5B7w5GtZogcPCzA
FQ6lyGyjFzBPBmVvPUnL2aOUTKyvOpSJd90rKkJOCOd4ldSUagNUzw07FrLoCPxs
uqkwNx9PCd5UdCibaK7O2FuaNJh2QQFch+LctgXAE44rzLvsmL2HsCQKO7b0i9+j
9kxJQFZ/DrfCGjXcXVcO6LMOK7cqMbDyknfSASIFZAelmCMsVauPkLSMx+ZAGFNF
v2l6/D2NUD7pbhuJFDG027pu96mL6GoC07trFSr4wz0zeJDWuolPC0Ye6g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:51 2025 by rpki-client