Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b81d1162-84be-4f6b-a765-21bcb51463bf.roa
File:                     b81d1162-84be-4f6b-a765-21bcb51463bf.roa (raw, json)
Hash identifier:          Q9E5fbQD7f2xHSZ6jEuAbZKt2kt+PPTyfLYuY6oDeMA=
Subject key identifier:   62:3D:2E:BA:16:31:10:8D:5E:4C:15:45:47:0E:96:97:A2:A3:A9:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E97B085465783C664F871B58F537249DE8F4E62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b81d1162-84be-4f6b-a765-21bcb51463bf.roa
Signing time:             Tue 08 Apr 2025 00:41:57 +0000
ROA not before:           Tue 08 Apr 2025 00:41:57 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.47.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:97:b0:85:46:57:83:c6:64:f8:71:b5:8f:53:72:49:de:8f:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:41:57 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=07c4b894f652f95fdaf5972b8d026027dd33e790ac8c4f245f759325ad4ca28a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:75:32:66:fd:fb:67:c2:72:fd:72:60:1f:
                    56:11:16:f8:a2:52:f6:36:c7:b4:e6:c7:9d:c8:53:
                    b2:b4:7c:38:2a:80:85:be:d2:ea:91:f7:11:75:70:
                    ce:fb:1c:d5:f1:7d:a7:6b:17:9b:01:9a:fc:8a:ff:
                    b7:82:96:1f:d1:08:29:eb:64:2c:de:31:05:a2:7b:
                    cc:18:84:c5:76:4b:50:8a:eb:51:3b:66:f7:0c:ab:
                    d6:d0:f9:81:40:79:9e:73:7f:76:1c:2a:17:99:b8:
                    9a:e3:87:4b:f2:ec:75:f3:d4:4b:ba:11:f4:e5:b6:
                    27:d8:a7:55:2d:1e:57:10:73:39:92:ab:e7:26:b3:
                    61:f2:e1:d7:2b:18:7e:e6:b8:c7:fc:f0:0e:03:44:
                    a9:a5:e2:bf:85:07:f6:f6:3a:59:f7:eb:e8:10:c1:
                    9f:43:05:4b:bc:ec:7a:80:39:53:d1:70:05:bc:ff:
                    5c:e7:0f:0c:6f:5c:2d:04:93:6d:f8:3b:ec:b5:49:
                    df:b8:8d:46:28:e2:17:45:b2:97:52:eb:e8:29:bc:
                    fd:87:12:b8:e1:4b:c7:33:d2:3a:19:d7:2d:10:70:
                    39:1b:b9:8e:56:12:f9:59:2c:fa:16:e1:5f:e7:33:
                    53:76:96:3a:74:33:3c:52:d8:8b:e5:69:58:fd:a6:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3D:2E:BA:16:31:10:8D:5E:4C:15:45:47:0E:96:97:A2:A3:A9:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b81d1162-84be-4f6b-a765-21bcb51463bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:68:0a:3e:9a:c5:85:30:a5:74:52:6d:b4:af:b7:f6:0e:88:
         56:16:ac:08:1b:6f:b9:f5:84:6c:34:06:bb:ee:ae:36:38:3a:
         da:12:d1:ba:65:fb:ed:3d:da:9b:17:90:51:12:57:fb:23:2b:
         c7:48:50:80:6b:82:f0:1d:bf:6b:67:8a:fc:23:7d:da:e4:1a:
         e1:12:58:8a:62:de:c4:73:36:80:26:5d:16:82:fc:13:f2:9c:
         46:49:5c:39:69:ea:4b:87:6f:0a:49:38:54:3e:86:61:bd:ba:
         72:e9:a0:11:7e:93:2e:15:c2:4f:e2:bf:af:56:bc:b1:5d:4c:
         97:58:81:fc:51:fc:8b:ff:cc:87:f3:bd:d9:11:5a:c8:57:c1:
         e8:ab:20:81:c5:dd:fe:52:b7:7d:fb:08:d5:7d:d0:7d:f4:6d:
         6d:60:47:a7:eb:c5:51:94:2d:30:f0:5b:10:8f:92:7a:c4:c0:
         b5:a0:f0:22:27:71:e9:d7:9e:7e:f7:a8:67:5c:af:48:6d:9a:
         b4:96:3c:25:f0:f8:5a:f0:40:f1:41:5f:66:0d:90:f8:ba:10:
         e2:91:c3:73:38:f6:c8:13:4b:2b:ba:fe:0d:7f:e1:15:f0:cd:
         dd:0a:72:65:16:f0:66:3b:ea:1a:79:36:0f:a0:82:10:e4:0c:
         06:24:38:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDpewhUZXg8Zk+HG1j1NySd6PTmIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDA0MTU3WhcNMjUwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwN2M0Yjg5NGY2NTJmOTVmZGFmNTk3MmI4ZDAyNjAyN2Rk
MzNlNzkwYWM4YzRmMjQ1Zjc1OTMyNWFkNGNhMjhhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwD3UyZv37Z8Jy/XJgH1YRFviiUvY2x7Tmx53IU7K0fDgq
gIW+0uqR9xF1cM77HNXxfadrF5sBmvyK/7eClh/RCCnrZCzeMQWie8wYhMV2S1CK
61E7ZvcMq9bQ+YFAeZ5zf3YcKheZuJrjh0vy7HXz1Eu6EfTltifYp1UtHlcQczmS
q+cms2Hy4dcrGH7muMf88A4DRKml4r+FB/b2Oln36+gQwZ9DBUu87HqAOVPRcAW8
/1znDwxvXC0Ek234O+y1Sd+4jUYo4hdFspdS6+gpvP2HErjhS8cz0joZ1y0QcDkb
uY5WEvlZLPoW4V/nM1N2ljp0MzxS2IvlaVj9pvW5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYj0uuhYxEI1eTBVFRw6Wl6KjqWUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4MWQxMTYyLTg0YmUtNGY2Yi1hNzY1LTIxYmNiNTE0NjNiZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLLwAwDQYJKoZIhvcNAQELBQADggEBAHBoCj6axYUwpXRSbbSvt/YOiFYW
rAgbb7n1hGw0BrvurjY4OtoS0bpl++092psXkFESV/sjK8dIUIBrgvAdv2tnivwj
fdrkGuESWIpi3sRzNoAmXRaC/BPynEZJXDlp6kuHbwpJOFQ+hmG9unLpoBF+ky4V
wk/iv69WvLFdTJdYgfxR/Iv/zIfzvdkRWshXweirIIHF3f5St337CNV90H30bW1g
R6frxVGULTDwWxCPknrEwLWg8CIncenXnn73qGdcr0htmrSWPCXw+FrwQPFBX2YN
kPi6EOKRw3M49sgTSyu6/g1/4RXwzd0KcmUW8GY76hp5Ng+gghDkDAYkOGM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:02 2025 by rpki-client