Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d32d1e22-993d-4ec7-ac95-98f30ee5cdb9.roa
File:                     d32d1e22-993d-4ec7-ac95-98f30ee5cdb9.roa (raw, json)
Hash identifier:          SlRu6I+OypkU0KPG1j+7IgFBbk4BMwQj9KQyxAsrhBY=
Subject key identifier:   FB:E4:73:94:63:1E:2D:A6:A0:5B:C8:8F:FC:42:28:1D:CE:71:7F:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A91961BB3BB8311DF1F43D30E98380DFD553E71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d32d1e22-993d-4ec7-ac95-98f30ee5cdb9.roa
Signing time:             Tue 10 Jun 2025 16:01:18 +0000
ROA not before:           Tue 10 Jun 2025 16:01:18 +0000
ROA not after:            Tue 15 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:91:96:1b:b3:bb:83:11:df:1f:43:d3:0e:98:38:0d:fd:55:3e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 10 16:01:18 2025 GMT
            Not After : Jul 15 23:59:59 2025 GMT
        Subject: serialNumber=a962eff72260f87c2339213544c44ca53ecd6079e542853edaab3eb1529fae16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:f1:ec:a0:e0:42:fc:6b:7b:c0:de:3c:d5:
                    ba:e2:9d:7b:d0:a5:fe:79:12:38:bb:85:14:d3:10:
                    e5:9b:11:fa:20:70:7e:6d:dc:e0:a7:52:e5:8c:ce:
                    d3:a9:9d:6d:93:53:ce:87:b3:12:f1:58:9d:71:fa:
                    09:37:85:d2:d6:23:ac:29:66:93:73:26:b6:af:1e:
                    9e:7e:98:01:07:02:9d:4c:e9:1b:f3:6c:4c:25:de:
                    63:df:d4:2c:00:0f:3b:3d:2e:22:9a:b6:84:31:c8:
                    a6:40:f6:b6:0b:d7:95:17:23:4f:48:1e:6a:d5:76:
                    4d:40:1f:6c:2d:81:0c:18:b6:ab:6b:91:6a:68:99:
                    fd:fe:ce:10:e3:b7:aa:21:12:bb:21:49:26:eb:0c:
                    f1:33:44:3f:66:f7:b9:a2:18:72:5c:05:66:63:7b:
                    11:94:52:65:0c:a3:7b:cd:18:bf:0a:74:47:d8:4b:
                    21:0c:3a:6b:a8:c3:fc:88:0b:ce:87:88:2d:ce:f3:
                    3f:37:d5:d6:af:73:25:d9:89:76:90:c7:d3:05:c4:
                    b9:0c:3f:90:8e:55:95:26:81:3a:fb:eb:dd:b5:db:
                    31:c3:7f:0f:42:d1:68:d5:d2:0a:47:ce:39:02:8e:
                    52:65:7e:0c:50:58:37:a4:60:36:ac:8c:23:ed:49:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E4:73:94:63:1E:2D:A6:A0:5B:C8:8F:FC:42:28:1D:CE:71:7F:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d32d1e22-993d-4ec7-ac95-98f30ee5cdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:28:62:0c:2e:99:9c:72:bb:fa:91:b6:f4:95:17:15:27:0b:
         95:fe:f0:3c:22:cd:9c:75:ea:3b:4d:1b:53:5c:44:56:53:ae:
         bd:4f:a2:95:55:32:7c:a1:30:e1:6e:2b:c1:9c:0b:48:4c:c0:
         92:8b:e5:6c:13:d8:12:88:c2:e3:b4:e7:e2:a4:80:34:80:b5:
         1e:51:15:54:4f:e2:f5:bc:1e:a2:dc:ec:f6:8f:80:07:73:16:
         4c:ef:25:88:3f:8b:0f:a6:95:87:0d:36:19:e4:cf:ff:bd:13:
         d9:23:d6:4c:07:6d:f6:d1:9e:ad:3f:c0:56:31:14:21:25:d1:
         26:91:9e:87:6b:c9:a3:85:2c:38:74:a1:39:1d:92:8b:8b:16:
         18:d6:f3:02:87:61:7d:a6:75:ce:43:2e:a2:02:f1:75:54:37:
         08:f7:89:df:d6:cc:8c:86:00:eb:e2:98:6e:4e:68:a0:6d:d9:
         62:2b:5c:00:bc:31:31:4e:ed:fd:86:31:91:d9:e9:a0:03:7b:
         12:44:c5:bc:8d:79:b7:a9:81:5a:e5:92:64:ab:65:a5:8e:33:
         a9:e1:b8:fe:f8:f4:35:dc:f3:04:95:de:18:b5:ed:f6:94:39:
         20:0f:65:6c:a2:1f:fa:40:4a:16:2e:b6:16:6d:3c:91:81:5a:
         96:f3:0d:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWpGWG7O7gxHfH0PTDpg4Df1VPnEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYwMTE4WhcNMjUwNzE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOTYyZWZmNzIyNjBmODdjMjMzOTIxMzU0NGM0NGNhNTNl
Y2Q2MDc5ZTU0Mjg1M2VkYWFiM2ViMTUyOWZhZTE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDP/vHsoOBC/Gt7wN481brinXvQpf55Eji7hRTTEOWbEfog
cH5t3OCnUuWMztOpnW2TU86HsxLxWJ1x+gk3hdLWI6wpZpNzJravHp5+mAEHAp1M
6RvzbEwl3mPf1CwADzs9LiKatoQxyKZA9rYL15UXI09IHmrVdk1AH2wtgQwYtqtr
kWpomf3+zhDjt6ohErshSSbrDPEzRD9m97miGHJcBWZjexGUUmUMo3vNGL8KdEfY
SyEMOmuow/yIC86HiC3O8z831davcyXZiXaQx9MFxLkMP5COVZUmgTr769212zHD
fw9C0WjV0gpHzjkCjlJlfgxQWDekYDasjCPtSReTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU++RzlGMeLaagW8iP/EIoHc5xf5swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzMmQxZTIyLTk5M2QtNGVjNy1hYzk1LTk4ZjMwZWU1Y2RiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGIEgAwDQYJKoZIhvcNAQELBQADggEBAGMoYgwumZxyu/qRtvSVFxUnC5X+
8DwizZx16jtNG1NcRFZTrr1PopVVMnyhMOFuK8GcC0hMwJKL5WwT2BKIwuO05+Kk
gDSAtR5RFVRP4vW8HqLc7PaPgAdzFkzvJYg/iw+mlYcNNhnkz/+9E9kj1kwHbfbR
nq0/wFYxFCEl0SaRnodryaOFLDh0oTkdkouLFhjW8wKHYX2mdc5DLqIC8XVUNwj3
id/WzIyGAOvimG5OaKBt2WIrXAC8MTFO7f2GMZHZ6aADexJExbyNebepgVrlkmSr
ZaWOM6nhuP749DXc8wSV3hi17faUOSAPZWyiH/pAShYuthZtPJGBWpbzDdM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:48 2025 by rpki-client