Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa
File:                     f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa (raw, json)
Hash identifier:          eUmAupoVNnCcm6Ds4ZFqJq8hvNsrYF/28FHH5Zh9mRo=
Subject key identifier:   F3:4B:E2:93:F3:8D:A4:2B:47:CE:85:0E:72:C6:F5:CE:BD:4C:C3:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28B8D787BEF9D945594A11D51C7AFFF3514BD22E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa
Signing time:             Wed 04 Jun 2025 00:21:17 +0000
ROA not before:           Wed 04 Jun 2025 00:21:17 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.53.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b8:d7:87:be:f9:d9:45:59:4a:11:d5:1c:7a:ff:f3:51:4b:d2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:21:17 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=453c1aae44edbfe502bf9cd88ea7e8f5c5d58407c652fca0c4368fa3b5cd4455, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:62:b6:21:64:49:4b:e1:c4:ba:18:dd:76:
                    9d:61:e9:49:3c:ea:55:92:37:31:fc:9f:00:56:72:
                    60:d7:ec:4d:a7:04:f3:6c:a7:ff:91:a6:af:b9:3d:
                    ca:16:fc:4d:4d:0b:ec:15:94:d2:57:8a:37:50:81:
                    56:26:cd:17:49:68:fd:c3:d6:50:a7:64:40:fc:cd:
                    93:f2:8d:83:e6:04:79:0d:47:87:71:eb:cc:6f:2e:
                    aa:c8:ad:52:f4:de:e1:d8:85:bb:66:32:2b:98:16:
                    71:09:26:10:32:28:de:91:2b:38:fa:6e:4b:be:0d:
                    4e:ae:cd:6f:20:b3:ed:06:e6:59:57:d9:74:d7:44:
                    f0:e6:fe:ec:dc:95:64:27:d1:c0:9f:a8:f2:be:ef:
                    e3:65:8b:63:14:80:ef:6d:5a:f8:4f:94:0a:d8:fd:
                    bb:82:5e:68:8e:97:86:2f:bf:4c:0a:8b:cc:a4:00:
                    57:5b:ce:8b:5a:40:f8:cf:63:6a:75:66:29:c5:e8:
                    b3:5a:d9:7c:a4:16:3b:01:f6:29:c7:03:53:37:48:
                    13:38:4c:f2:d3:ea:e9:6c:50:93:26:63:ed:4b:d0:
                    67:7b:eb:33:fd:cf:d4:06:18:d0:14:7d:fe:8e:73:
                    a7:db:03:3b:68:ea:34:92:a7:e4:a2:ae:a6:be:bf:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:E2:93:F3:8D:A4:2B:47:CE:85:0E:72:C6:F5:CE:BD:4C:C3:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6be303f-6b48-4c2b-a9e6-b4a5db34818d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:a7:2f:3e:9f:58:9a:a2:5a:b2:ee:ed:67:df:0b:6e:48:3d:
         1b:fa:82:df:3e:d0:1e:b9:cf:0b:7b:19:ec:b6:b2:ac:cc:73:
         cd:11:64:15:bc:0f:e1:3c:32:ad:ee:83:21:e4:11:0f:6b:3f:
         c9:bd:0e:1a:f0:d0:6b:69:3b:fa:6b:87:93:4e:01:2d:72:cd:
         04:84:18:6a:05:f4:4a:53:c8:14:5f:38:be:8c:6c:5a:56:dc:
         42:bd:e4:f9:22:aa:c7:10:f9:9a:01:0b:ab:ad:e3:b1:9e:68:
         05:9c:d8:27:25:72:30:f9:4f:ce:b6:00:08:8a:53:91:ea:ea:
         4a:6e:f7:cd:18:66:7b:b5:74:38:15:a4:75:f9:15:e0:73:23:
         c9:3f:89:86:64:1e:3d:dc:6f:65:c3:c6:8d:a9:60:c2:f0:5a:
         58:4d:12:e0:4e:e9:a4:3c:96:da:26:5f:7b:c7:77:79:e9:cc:
         c6:a9:05:96:77:9c:f0:48:2a:f3:52:05:e8:71:de:38:d6:c1:
         bd:ab:d7:20:54:bb:b1:1f:c8:ea:4f:22:c0:06:56:6a:62:31:
         71:24:91:05:3d:bc:04:dd:41:aa:f7:6c:c6:fc:5f:81:7a:07:
         42:c3:06:21:91:63:76:20:fc:b6:c2:41:87:d0:b8:ae:75:fb:
         2b:bc:fd:93
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKLjXh7752UVZShHVHHr/81FL0i4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAyMTE3WhcNMjUwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTNjMWFhZTQ0ZWRiZmU1MDJiZjljZDg4ZWE3ZThmNWM1
ZDU4NDA3YzY1MmZjYTBjNDM2OGZhM2I1Y2Q0NDU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDANGK2IWRJS+HEuhjddp1h6Uk86lWSNzH8nwBWcmDX7E2n
BPNsp/+Rpq+5PcoW/E1NC+wVlNJXijdQgVYmzRdJaP3D1lCnZED8zZPyjYPmBHkN
R4dx68xvLqrIrVL03uHYhbtmMiuYFnEJJhAyKN6RKzj6bku+DU6uzW8gs+0G5llX
2XTXRPDm/uzclWQn0cCfqPK+7+Nli2MUgO9tWvhPlArY/buCXmiOl4Yvv0wKi8yk
AFdbzotaQPjPY2p1ZinF6LNa2XykFjsB9inHA1M3SBM4TPLT6ulsUJMmY+1L0Gd7
6zP9z9QGGNAUff6Oc6fbAzto6jSSp+Sirqa+v2i7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU80vik/ONpCtHzoUOcsb1zr1Mw4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2YmUzMDNmLTZiNDgtNGMyYi1hOWU2LWI0YTVkYjM0ODE4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZFNYAwDQYJKoZIhvcNAQELBQADggEBAA6nLz6fWJqiWrLu7WffC25IPRv6
gt8+0B65zwt7Gey2sqzMc80RZBW8D+E8Mq3ugyHkEQ9rP8m9Dhrw0GtpO/prh5NO
AS1yzQSEGGoF9EpTyBRfOL6MbFpW3EK95PkiqscQ+ZoBC6ut47GeaAWc2CclcjD5
T862AAiKU5Hq6kpu980YZnu1dDgVpHX5FeBzI8k/iYZkHj3cb2XDxo2pYMLwWlhN
EuBO6aQ8ltomX3vHd3npzMapBZZ3nPBIKvNSBehx3jjWwb2r1yBUu7EfyOpPIsAG
VmpiMXEkkQU9vATdQar3bMb8X4F6B0LDBiGRY3Yg/LbCQYfQuK51+yu8/ZM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:19 2025 by rpki-client