Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa
File:                     c7066401-6e27-443a-a174-bf22e8ce1b76.roa (raw, json)
Hash identifier:          xEsvzTEtmihuA43gscnMW+GsYGZx3JNCjq3M+9X1sAI=
Subject key identifier:   74:87:53:F9:26:D3:90:95:A1:5D:FF:8F:87:7B:11:DA:3D:BB:E4:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74F0B06FFC901F220B532D3347C513F73497E102
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa
Signing time:             Tue 03 Jun 2025 00:11:29 +0000
ROA not before:           Tue 03 Jun 2025 00:11:29 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f0:b0:6f:fc:90:1f:22:0b:53:2d:33:47:c5:13:f7:34:97:e1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:11:29 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=302156b421ac90d1f00aec8060cb557ed8df56b8fe30ac1fe3d41589bbd60ab7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:c1:ad:8e:80:cd:82:9f:20:af:4e:ed:67:
                    e4:b6:b6:18:28:43:89:50:88:76:57:96:27:4f:e0:
                    86:a3:74:0d:b7:fd:6d:f0:35:44:00:2a:01:5d:56:
                    f4:b9:45:f8:12:0d:f2:a7:4a:b2:88:c7:11:c5:42:
                    ba:4f:f1:22:f5:4b:1a:c1:95:a7:25:06:48:d0:e2:
                    53:00:aa:cc:ea:e2:97:b9:06:07:84:b8:95:da:ed:
                    47:b8:ef:f7:98:53:a4:9e:2d:a5:3e:e0:c1:7d:ee:
                    51:55:f6:43:02:5d:f8:ba:05:8e:76:1d:17:6e:2d:
                    08:bc:30:0f:c7:ae:29:06:dd:2f:f4:5a:21:66:51:
                    74:59:79:35:44:e7:db:42:b0:8c:20:bc:34:f8:0f:
                    a1:2f:ae:a1:96:15:a7:ae:79:0f:42:10:08:20:37:
                    07:aa:f5:86:89:d1:c8:20:8c:3e:3a:61:1a:7b:bb:
                    d3:9c:3d:e4:70:2d:2f:d0:2d:ee:61:93:ad:d3:e6:
                    95:69:fe:17:35:b8:98:82:1f:fe:ae:a1:2e:fc:de:
                    dc:6d:f3:a6:76:48:24:5d:16:0e:f1:40:57:42:b3:
                    f9:71:9a:18:73:95:72:fe:a1:b6:df:15:58:77:28:
                    13:97:44:30:ff:06:87:8a:be:42:18:65:59:19:7d:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:53:F9:26:D3:90:95:A1:5D:FF:8F:87:7B:11:DA:3D:BB:E4:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:12:dc:72:01:a5:1e:26:ae:67:0f:97:23:03:fb:81:f5:d6:
         6d:29:11:11:36:7d:91:b5:4d:b5:ab:e0:f2:33:13:32:1f:ca:
         4d:de:da:79:5c:57:8e:7e:41:48:f9:4f:e9:62:3f:2c:0b:13:
         67:1e:2d:bf:5b:99:c2:7e:da:f6:c7:bd:29:fb:dd:61:1f:8c:
         1b:d6:4e:78:ca:75:9c:e8:de:0f:21:77:9a:fb:5c:b6:ce:52:
         be:d1:f9:69:64:3f:a5:1c:ae:96:03:08:ef:b7:22:e5:3b:27:
         e5:25:5f:bd:c4:1a:13:4f:7b:bd:e8:1b:21:f2:56:53:58:5c:
         4f:78:3a:dc:70:c5:58:fc:44:ba:b8:64:25:a6:73:d4:f6:eb:
         e7:55:68:c9:66:5e:ea:f2:03:31:40:19:07:7a:8c:b1:7a:d2:
         13:07:7b:aa:bc:be:47:7d:b8:c6:b6:60:ec:e2:be:6c:ef:b6:
         5a:74:e9:39:bf:13:a8:ab:ef:18:93:e3:66:ab:dd:ed:bb:5a:
         17:f5:82:cb:1b:9c:e8:35:59:92:aa:e6:3d:1e:22:b9:cf:22:
         8f:d4:c0:95:35:20:66:a6:3b:0e:83:11:2f:c4:49:b2:75:d2:
         e4:bd:54:8f:f2:6c:6c:60:ce:9a:6e:98:00:9a:85:93:9a:df:
         60:b6:ce:04
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdPCwb/yQHyILUy0zR8UT9zSX4QIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAxMTI5WhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDIxNTZiNDIxYWM5MGQxZjAwYWVjODA2MGNiNTU3ZWQ4
ZGY1NmI4ZmUzMGFjMWZlM2Q0MTU4OWJiZDYwYWI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMLcGtjoDNgp8gr07tZ+S2thgoQ4lQiHZXlidP4IajdA23
/W3wNUQAKgFdVvS5RfgSDfKnSrKIxxHFQrpP8SL1SxrBlaclBkjQ4lMAqszq4pe5
BgeEuJXa7Ue47/eYU6SeLaU+4MF97lFV9kMCXfi6BY52HRduLQi8MA/HrikG3S/0
WiFmUXRZeTVE59tCsIwgvDT4D6EvrqGWFaeueQ9CEAggNweq9YaJ0cggjD46YRp7
u9OcPeRwLS/QLe5hk63T5pVp/hc1uJiCH/6uoS783txt86Z2SCRdFg7xQFdCs/lx
mhhzlXL+obbfFVh3KBOXRDD/BoeKvkIYZVkZfRoHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdIdT+SbTkJWhXf+Ph3sR2j275AYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3MDY2NDAxLTZlMjctNDQzYS1hMTc0LWJmMjJlOGNlMWI3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4SFAwDQYJKoZIhvcNAQELBQADggEBABYS3HIBpR4mrmcPlyMD+4H11m0p
ERE2fZG1TbWr4PIzEzIfyk3e2nlcV45+QUj5T+liPywLE2ceLb9bmcJ+2vbHvSn7
3WEfjBvWTnjKdZzo3g8hd5r7XLbOUr7R+WlkP6UcrpYDCO+3IuU7J+UlX73EGhNP
e73oGyHyVlNYXE94OtxwxVj8RLq4ZCWmc9T26+dVaMlmXuryAzFAGQd6jLF60hMH
e6q8vkd9uMa2YOzivmzvtlp06Tm/E6ir7xiT42ar3e27Whf1gssbnOg1WZKq5j0e
IrnPIo/UwJU1IGamOw6DES/ESbJ10uS9VI/ybGxgzppumACahZOa32C2zgQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:58:32 2025 by rpki-client