Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa
File:                     c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa (raw, json)
Hash identifier:          1WqHQ/8aUJgf50eYi2Mxh+mlr2dQQmGjja6gPe3AdM8=
Subject key identifier:   92:27:AB:79:57:23:9B:FA:98:28:2C:23:27:CF:4D:D2:E9:E5:0E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       516253852B9C8C36A8FC977554832ACC973A8C5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa
Signing time:             Sat 14 Jun 2025 00:51:50 +0000
ROA not before:           Sat 14 Jun 2025 00:51:50 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.124.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:62:53:85:2b:9c:8c:36:a8:fc:97:75:54:83:2a:cc:97:3a:8c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:51:50 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=69e537b3b454073fa4a4bd7f136a72376ebe9e0752ef9396962570b9cddd582f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:7e:92:61:4c:ad:02:2c:c6:d7:a1:c3:44:
                    b6:3e:62:d8:0c:a2:ec:02:e0:6d:04:42:37:f6:04:
                    66:33:0b:a7:9e:d4:3a:15:50:5a:05:cc:7a:7a:df:
                    86:f6:6e:72:ba:6c:76:af:37:bb:8d:f3:d3:68:eb:
                    de:11:08:6a:91:09:80:ff:fd:c6:b1:9a:50:ab:af:
                    58:d8:48:8c:2d:f4:34:73:9c:6a:b2:31:3e:15:fa:
                    b3:7a:5a:1c:41:cd:de:5e:f9:06:52:af:d3:93:5d:
                    36:18:25:94:be:6c:47:04:1b:dd:27:8b:9e:83:2b:
                    c3:1d:4f:f5:69:df:aa:b5:d2:ae:50:11:22:79:4d:
                    0b:8e:68:2b:a8:d6:c2:45:15:b0:37:2f:23:3c:eb:
                    b7:da:6b:65:ee:bc:2d:a4:ae:ca:cc:e1:4b:9e:79:
                    47:25:f9:00:8e:c4:3c:3e:04:89:34:a6:ba:8a:eb:
                    d1:e4:4c:7a:5f:9e:57:e9:28:b1:64:b6:86:54:3a:
                    f8:7e:5b:92:0f:db:54:d0:e3:dd:c3:ed:a5:91:a5:
                    a2:68:c8:23:2b:c7:71:f1:7c:5d:74:90:07:36:dc:
                    cd:f3:13:e3:c3:98:1f:35:6e:c4:56:74:81:4d:f4:
                    c3:16:0e:49:f2:1d:16:d2:32:17:ae:6e:3b:da:35:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:AB:79:57:23:9B:FA:98:28:2C:23:27:CF:4D:D2:E9:E5:0E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:c7:fb:b9:85:65:2f:94:a3:78:b9:76:66:d4:76:03:06:
         79:6a:b6:3e:28:76:29:1a:91:58:36:45:d6:89:36:cf:2d:a6:
         3d:a7:05:07:82:25:3e:bc:68:c8:92:15:d9:8c:70:b1:90:69:
         f0:50:26:c2:28:17:e4:0a:55:d5:f0:13:18:19:05:d4:d2:d6:
         34:ed:08:75:87:ce:29:26:2c:3c:b3:71:c9:35:80:cf:c9:7d:
         02:15:af:9e:62:ff:bd:9f:8b:e4:f7:b6:f4:74:90:a9:bc:45:
         6f:5f:b4:a0:f7:aa:d3:e6:5f:82:d9:b5:b2:82:3d:32:dc:4a:
         8b:6a:9a:ea:d1:9e:04:a8:b7:c5:bb:28:19:d4:3d:bb:44:84:
         06:15:ca:cb:c2:0e:29:ec:8a:53:3b:70:ae:52:2a:90:1c:8d:
         ce:66:8f:08:aa:19:c4:8b:44:fb:94:66:3d:23:fc:72:5b:6a:
         d4:01:5d:66:30:c2:08:d7:b3:be:4c:8b:3a:48:2c:03:c7:a7:
         bf:3a:eb:d9:e6:a2:7c:98:da:07:f5:81:1f:a3:38:eb:09:77:
         b9:08:85:1d:24:b3:96:a5:c4:11:c8:69:c4:11:68:78:b6:4f:
         ff:ad:fe:ae:d5:17:67:40:2c:d4:37:5f:c2:ae:32:c2:6b:0a:
         4d:8b:ee:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUUWJThSucjDao/Jd1VIMqzJc6jFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA1MTUwWhcNMjUwNzE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWU1MzdiM2I0NTQwNzNmYTRhNGJkN2YxMzZhNzIzNzZl
YmU5ZTA3NTJlZjkzOTY5NjI1NzBiOWNkZGQ1ODJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrS36SYUytAizG16HDRLY+YtgMouwC4G0EQjf2BGYzC6ee
1DoVUFoFzHp634b2bnK6bHavN7uN89No694RCGqRCYD//caxmlCrr1jYSIwt9DRz
nGqyMT4V+rN6WhxBzd5e+QZSr9OTXTYYJZS+bEcEG90ni56DK8MdT/Vp36q10q5Q
ESJ5TQuOaCuo1sJFFbA3LyM867faa2XuvC2krsrM4UueeUcl+QCOxDw+BIk0prqK
69HkTHpfnlfpKLFktoZUOvh+W5IP21TQ493D7aWRpaJoyCMrx3HxfF10kAc23M3z
E+PDmB81bsRWdIFN9MMWDknyHRbSMheubjvaNWy5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkiereVcjm/qYKCwjJ89N0unlDhQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MzYzRhYmIxLTQ0ZjMtNDhkZS05NTgzLWVkNGYzNzBkZGQ3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4fDANBgkqhkiG9w0BAQsFAAOCAQEAtarH+7mFZS+Uo3i5dmbUdgMGeWq2
Pih2KRqRWDZF1ok2zy2mPacFB4IlPrxoyJIV2YxwsZBp8FAmwigX5ApV1fATGBkF
1NLWNO0IdYfOKSYsPLNxyTWAz8l9AhWvnmL/vZ+L5Pe29HSQqbxFb1+0oPeq0+Zf
gtm1soI9MtxKi2qa6tGeBKi3xbsoGdQ9u0SEBhXKy8IOKeyKUztwrlIqkByNzmaP
CKoZxItE+5RmPSP8cltq1AFdZjDCCNezvkyLOkgsA8envzrr2eaifJjaB/WBH6M4
6wl3uQiFHSSzlqXEEchpxBFoeLZP/63+rtUXZ0As1Ddfwq4ywmsKTYvuVg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:22:11 2025 by rpki-client