Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa
File:                     e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa (raw, json)
Hash identifier:          W6jH5UuHK3UxYINP2m1fT3xb0epArASoh5nvYGxUzDU=
Subject key identifier:   02:7A:6D:D8:D7:C4:C4:20:F6:37:C1:4D:A3:A7:60:99:64:5C:10:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       125A8E3C7DE71D4C114FA2E722DB1CD3385D6085
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa
Signing time:             Wed 16 Jul 2025 00:01:02 +0000
ROA not before:           Wed 16 Jul 2025 00:01:02 +0000
ROA not after:            Wed 20 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        135.159.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5a:8e:3c:7d:e7:1d:4c:11:4f:a2:e7:22:db:1c:d3:38:5d:60:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:01:02 2025 GMT
            Not After : Aug 20 23:59:59 2025 GMT
        Subject: serialNumber=163563689f0bb30e4022f23249ace9c0182d19232b65491a790585b7aa9c5ddc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:10:3a:ec:e6:f6:67:b6:cd:dc:18:fb:c3:
                    8b:ed:25:41:cb:0e:03:3c:be:42:df:a3:0f:5e:4b:
                    c2:b9:0b:b2:c6:f5:78:82:b1:74:f0:3b:e6:4c:9c:
                    77:c5:e0:ac:9a:9a:af:0e:8e:a2:10:62:53:1d:ee:
                    ff:92:b4:72:ee:39:ed:fd:22:57:c3:24:c8:e8:de:
                    63:ca:93:d5:61:42:5d:07:e2:63:26:a5:5a:d9:41:
                    c5:82:0a:8a:4d:0b:4c:9c:f6:bf:a0:d8:60:b9:a3:
                    70:23:2a:5f:e9:fd:eb:5e:08:0e:6c:66:7d:25:a4:
                    ad:6b:84:bb:11:44:ab:b3:28:8c:a3:a5:fa:7c:4e:
                    cf:bc:a4:94:59:c9:2f:db:40:6f:d1:28:3e:d7:58:
                    12:56:0f:ff:1c:c1:d6:cc:cb:ba:7a:9b:9c:11:57:
                    7c:df:3a:11:99:12:50:b6:f2:d1:83:38:9c:82:1c:
                    5c:be:4c:3d:34:64:a4:e1:c0:30:95:35:3a:6b:f8:
                    0e:df:d1:d8:5c:aa:cd:b3:4b:03:d5:84:11:7c:22:
                    83:c4:9d:41:ea:66:6f:14:8c:ad:23:71:3a:44:56:
                    00:5c:e4:c3:fc:fd:1d:b0:d4:c8:72:91:08:2c:c9:
                    f1:dc:2d:e8:d7:1a:f4:e3:08:40:00:3a:e1:1b:37:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:6D:D8:D7:C4:C4:20:F6:37:C1:4D:A3:A7:60:99:64:5C:10:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a53505-4c1d-4b62-a854-99ae3e6964ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:37:03:ce:04:71:69:3d:26:0d:fc:32:08:97:e9:98:7b:9f:
         ef:d8:31:fa:32:e1:78:0a:81:9f:02:85:5d:e2:59:85:9a:bd:
         fe:b4:81:3c:d8:e9:01:a8:82:05:0d:4d:9a:32:66:ab:16:c6:
         59:92:cf:67:1d:26:1b:c9:f8:cc:ee:82:49:e5:c1:eb:b8:00:
         f8:10:d9:51:65:1f:18:16:89:3b:f0:31:98:9d:a6:fe:0f:5e:
         b8:f4:ca:b4:ae:a1:c7:b6:02:db:09:6e:bd:21:2d:31:03:a8:
         d9:be:f4:92:65:84:76:63:59:b6:f1:0f:4c:cb:21:4c:51:81:
         59:1a:16:b7:a3:6d:ef:ea:c2:df:3f:b1:2e:7f:8d:91:17:23:
         6d:11:4c:bf:f8:8a:6e:0a:3e:74:a9:1d:d0:ae:71:90:7e:92:
         9d:39:f0:92:e9:49:9a:9e:e4:00:55:14:39:6a:99:ce:f4:d7:
         9e:08:71:12:e9:de:6e:0d:75:67:bb:54:cb:fc:5b:65:d6:0a:
         fd:c8:f6:3b:34:68:22:88:79:b9:2c:92:eb:02:60:d0:be:6a:
         31:d7:95:c9:96:02:d1:13:44:0d:e3:24:6a:b9:8c:38:4e:c9:
         19:2b:c6:44:38:93:14:99:d0:2c:57:09:1c:8c:6f:1c:5d:cb:
         39:82:18:ba
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUElqOPH3nHUwRT6LnItsc0zhdYIUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAwMTAyWhcNMjUwODIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjM1NjM2ODlmMGJiMzBlNDAyMmYyMzI0OWFjZTljMDE4
MmQxOTIzMmI2NTQ5MWE3OTA1ODViN2FhOWM1ZGRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCH9RA67Ob2Z7bN3Bj7w4vtJUHLDgM8vkLfow9eS8K5C7LG
9XiCsXTwO+ZMnHfF4Kyamq8OjqIQYlMd7v+StHLuOe39IlfDJMjo3mPKk9VhQl0H
4mMmpVrZQcWCCopNC0yc9r+g2GC5o3AjKl/p/eteCA5sZn0lpK1rhLsRRKuzKIyj
pfp8Ts+8pJRZyS/bQG/RKD7XWBJWD/8cwdbMy7p6m5wRV3zfOhGZElC28tGDOJyC
HFy+TD00ZKThwDCVNTpr+A7f0dhcqs2zSwPVhBF8IoPEnUHqZm8UjK0jcTpEVgBc
5MP8/R2w1MhykQgsyfHcLejXGvTjCEAAOuEbN37LAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUAnpt2NfExCD2N8FNo6dgmWRcEFwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U5YTUzNTA1LTRjMWQtNGI2Mi1hODU0LTk5YWUzZTY5NjRlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCHnzANBgkqhkiG9w0BAQsFAAOCAQEAIDcDzgRxaT0mDfwyCJfpmHuf79gx
+jLheAqBnwKFXeJZhZq9/rSBPNjpAaiCBQ1NmjJmqxbGWZLPZx0mG8n4zO6CSeXB
67gA+BDZUWUfGBaJO/AxmJ2m/g9euPTKtK6hx7YC2wluvSEtMQOo2b70kmWEdmNZ
tvEPTMshTFGBWRoWt6Nt7+rC3z+xLn+NkRcjbRFMv/iKbgo+dKkd0K5xkH6SnTnw
kulJmp7kAFUUOWqZzvTXnghxEunebg11Z7tUy/xbZdYK/cj2OzRoIoh5uSyS6wJg
0L5qMdeVyZYC0RNEDeMkarmMOE7JGSvGRDiTFJnQLFcJHIxvHF3LOYIYug==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:40:11 2025 by rpki-client