Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa346539-ccae-457c-905d-9a4a3ea91dd1.roa
File:                     aa346539-ccae-457c-905d-9a4a3ea91dd1.roa (raw, json)
Hash identifier:          bdLz2pOucmyRHih6WSdiQCqlLsUoGz2SLMTbkhBUVwQ=
Subject key identifier:   D9:85:23:7E:33:1A:8E:B0:F8:DA:3A:7A:9D:C7:D6:0A:5D:94:C5:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E7B0431F4385A8AFBEFD486B3730E41D40C9F9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa346539-ccae-457c-905d-9a4a3ea91dd1.roa
Signing time:             Tue 03 Jun 2025 00:21:36 +0000
ROA not before:           Tue 03 Jun 2025 00:21:36 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:04:31:f4:38:5a:8a:fb:ef:d4:86:b3:73:0e:41:d4:0c:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:21:36 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=bba30768e12a1d0b447e7d27a94a1f570488b222f94ac7587b0f6a0fc0ac9633, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:0b:c1:4d:e1:fe:f9:0f:b6:3d:32:a6:0c:
                    80:f9:2e:b7:7c:95:c3:ec:ec:f5:f6:70:20:71:7e:
                    b8:15:5d:08:b4:07:e5:6a:c6:fa:26:e0:c6:54:a2:
                    22:ce:26:42:b0:0b:a6:5a:f2:8e:bb:28:7b:2b:ca:
                    9d:0d:c8:ad:fb:22:b7:a3:8a:8f:f4:89:b2:e2:88:
                    50:6f:6a:63:8d:8f:fd:4f:9c:d6:78:af:3b:a8:72:
                    8e:fd:e1:94:d4:0d:2e:c3:eb:79:76:4d:d2:2f:f5:
                    68:d7:e7:9b:23:db:11:0d:de:66:99:b1:32:77:dc:
                    7f:63:ce:21:97:2f:91:52:ee:0c:e9:c9:cb:a9:5a:
                    aa:01:eb:53:07:62:ab:75:6e:89:fb:44:10:b7:34:
                    3c:48:09:d3:56:b0:db:03:cb:a2:46:68:8a:df:7d:
                    7d:77:64:2f:eb:19:28:1c:e6:10:67:86:30:9b:11:
                    56:83:fa:e6:73:29:30:97:05:84:d7:72:ed:62:df:
                    97:34:ad:78:2e:09:4d:ed:a0:c7:1d:0f:c0:42:b3:
                    c0:ec:02:28:3c:0a:20:1b:e5:48:a8:46:87:7c:2d:
                    88:d9:c2:f3:45:f0:e8:27:5b:b6:4f:a7:25:66:3e:
                    6e:b9:1e:7a:20:b3:53:41:5e:e9:91:a9:3c:cf:ed:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:85:23:7E:33:1A:8E:B0:F8:DA:3A:7A:9D:C7:D6:0A:5D:94:C5:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa346539-ccae-457c-905d-9a4a3ea91dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5e:ce:0b:58:56:d8:a2:d0:d3:a8:e4:0d:8d:de:da:ab:c4:c6:
         bb:e4:7e:68:ac:af:3b:c1:1c:de:8a:6b:1c:8a:49:d2:e1:08:
         b9:fe:33:72:fc:d4:ef:c7:67:50:52:2d:88:2b:8e:03:4c:cf:
         11:00:3b:a9:51:6e:47:ce:47:a8:8d:f5:69:d5:9f:c3:0c:7e:
         7f:f8:d2:68:83:6b:b9:c9:2e:3b:e5:b1:db:90:a2:18:dc:2e:
         9c:8e:6d:79:a9:f7:e7:4c:e2:b3:3d:b3:3a:71:f3:3a:d5:97:
         0e:27:71:3e:05:5c:1d:b7:da:5e:64:f9:4f:13:50:12:3b:a5:
         7a:87:f8:75:1e:cd:2e:1d:d1:76:28:06:ed:ed:90:5c:97:df:
         b9:fc:93:19:94:53:f7:64:8f:f9:9e:38:79:02:7f:c6:71:24:
         66:19:6f:7c:24:20:1e:73:89:a3:d6:47:70:2a:c7:c3:71:9c:
         e5:5d:a8:94:31:44:53:45:aa:e7:09:7f:66:4a:67:b2:0a:7f:
         d2:6d:9e:e2:89:c3:0f:88:1a:de:21:94:d1:bb:25:4c:1b:87:
         8b:be:d4:ae:28:ff:f7:f4:84:d9:98:8e:83:4c:1c:b9:39:6c:
         95:a5:a4:5d:45:1f:98:8e:e9:0c:db:1c:c9:d0:f6:2a:4a:2b:
         28:57:64:a5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfnsEMfQ4Wor779SGs3MOQdQMn58wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAyMTM2WhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYmEzMDc2OGUxMmExZDBiNDQ3ZTdkMjdhOTRhMWY1NzA0
ODhiMjIyZjk0YWM3NTg3YjBmNmEwZmMwYWM5NjMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmDwvBTeH++Q+2PTKmDID5Lrd8lcPs7PX2cCBxfrgVXQi0
B+Vqxvom4MZUoiLOJkKwC6Za8o67KHsryp0NyK37Irejio/0ibLiiFBvamONj/1P
nNZ4rzuoco794ZTUDS7D63l2TdIv9WjX55sj2xEN3maZsTJ33H9jziGXL5FS7gzp
ycupWqoB61MHYqt1bon7RBC3NDxICdNWsNsDy6JGaIrffX13ZC/rGSgc5hBnhjCb
EVaD+uZzKTCXBYTXcu1i35c0rXguCU3toMcdD8BCs8DsAig8CiAb5UioRod8LYjZ
wvNF8OgnW7ZPpyVmPm65Hnogs1NBXumRqTzP7aj3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU2YUjfjMajrD42jp6ncfWCl2UxdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FhMzQ2NTM5LWNjYWUtNDU3Yy05MDVkLTlhNGEzZWE5MWRkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwG4SDANBgkqhkiG9w0BAQsFAAOCAQEAXs4LWFbYotDTqOQNjd7aq8TGu+R+
aKyvO8Ec3oprHIpJ0uEIuf4zcvzU78dnUFItiCuOA0zPEQA7qVFuR85HqI31adWf
wwx+f/jSaINruckuO+Wx25CiGNwunI5tean350zisz2zOnHzOtWXDidxPgVcHbfa
XmT5TxNQEjuleof4dR7NLh3RdigG7e2QXJffufyTGZRT92SP+Z44eQJ/xnEkZhlv
fCQgHnOJo9ZHcCrHw3Gc5V2olDFEU0Wq5wl/Zkpnsgp/0m2e4onDD4ga3iGU0bsl
TBuHi77Urij/9/SE2ZiOg0wcuTlslaWkXUUfmI7pDNscydD2KkorKFdkpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:29 2025 by rpki-client