Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa
File:                     fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa (raw, json)
Hash identifier:          xe9ZIUs3PJBKXWgfKlpDNcP+8CKUXORDTM7zRmRkexw=
Subject key identifier:   99:54:33:A8:4E:ED:A6:F8:23:F7:EE:35:19:62:FB:F8:FC:C3:94:CF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FD94EC1D91A0DFE1A7195B98200DE33FABF1494
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa
Signing time:             Fri 13 Jun 2025 00:50:32 +0000
ROA not before:           Fri 13 Jun 2025 00:50:32 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        204.236.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d9:4e:c1:d9:1a:0d:fe:1a:71:95:b9:82:00:de:33:fa:bf:14:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:50:32 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=c87c33c7607ebdc5f13fde846d6018d359072e783244b07768ec98128945b8f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:98:8f:20:10:e3:53:dc:d4:6e:a9:3b:3b:
                    09:fe:e8:ba:15:22:c5:e7:74:3b:09:ce:bc:af:b2:
                    3c:c2:e8:ef:6e:85:d6:03:4b:8f:e4:6c:24:1b:d4:
                    e5:e0:f8:94:66:82:98:3b:2d:fa:75:23:c0:51:fe:
                    9c:45:9a:57:e5:51:e3:fa:e0:cd:60:78:2c:77:3d:
                    74:e4:bc:c6:2a:f3:6e:56:73:37:1c:ad:98:9a:6d:
                    b9:30:ed:f5:e4:3b:90:05:1b:2b:79:32:95:1c:53:
                    53:03:1e:1f:27:9f:d8:41:40:ce:ef:18:c4:51:f8:
                    97:4d:e6:5b:b4:4f:4a:cd:69:1e:53:8b:6a:7d:49:
                    ef:b1:1d:99:59:18:3b:1b:f5:27:1b:56:50:13:53:
                    c2:c0:e6:14:b4:4d:b1:3d:ba:a3:12:17:a1:16:2c:
                    c9:aa:64:61:12:4f:c7:3a:40:4e:d0:73:22:fb:8a:
                    9e:8f:65:1e:9b:36:64:fb:a2:75:9f:27:ba:3b:b1:
                    3d:89:8a:20:96:1e:94:5c:04:8f:87:d8:69:5c:55:
                    4f:3a:e3:bf:c2:12:38:a5:91:28:47:74:8b:d0:16:
                    fc:67:7c:ec:f1:27:53:38:a0:45:13:de:5f:c5:5e:
                    c8:2c:42:de:6d:68:df:d3:f8:18:16:ac:23:1c:81:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:54:33:A8:4E:ED:A6:F8:23:F7:EE:35:19:62:FB:F8:FC:C3:94:CF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc810cd8-ce41-47c4-8b86-c9b9a8ae0321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:08:66:59:a5:78:26:41:07:80:26:24:ff:69:77:26:39:
         12:5f:d1:75:fc:ef:e3:b1:b0:2c:07:7f:1a:91:aa:5c:06:0c:
         b4:fa:6e:39:c8:2f:fa:15:49:8b:19:ae:29:a5:01:17:3f:de:
         dc:07:ac:35:ca:8e:4d:a2:7f:97:0f:e7:52:1e:33:09:e2:e7:
         0b:f1:cc:07:dc:52:72:e6:d3:3b:62:6f:ca:3d:1c:f1:bb:c2:
         d4:0a:9f:7c:be:77:37:7f:44:23:9e:96:c2:00:94:d7:d7:e1:
         37:96:28:e1:34:f1:c3:7c:6b:28:1c:81:6b:45:02:b4:f7:36:
         63:aa:44:a3:e4:81:90:fe:80:06:18:e1:bd:85:78:2e:5f:0b:
         7a:0b:82:c2:7c:34:20:81:23:22:43:31:f1:ed:38:0f:e1:e3:
         14:f4:f8:81:1f:3f:ae:fa:da:7c:d6:e5:84:39:49:83:74:78:
         bf:b9:41:77:0d:a7:8e:f8:3e:d5:91:9c:26:56:22:85:93:53:
         53:e5:f8:4d:48:84:8c:8d:84:80:5e:93:1c:ba:45:a5:f0:19:
         04:44:11:16:fe:6a:97:27:ed:16:18:3e:1b:74:70:2c:5d:3b:
         2a:a3:7c:11:72:b7:c4:39:6d:06:e1:d7:a7:9a:c2:ab:6c:e5:
         82:fc:86:65
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP9lOwdkaDf4acZW5ggDeM/q/FJQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA1MDMyWhcNMjUwNzE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjODdjMzNjNzYwN2ViZGM1ZjEzZmRlODQ2ZDYwMThkMzU5
MDcyZTc4MzI0NGIwNzc2OGVjOTgxMjg5NDViOGY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLwZiPIBDjU9zUbqk7Own+6LoVIsXndDsJzryvsjzC6O9u
hdYDS4/kbCQb1OXg+JRmgpg7Lfp1I8BR/pxFmlflUeP64M1geCx3PXTkvMYq825W
czccrZiabbkw7fXkO5AFGyt5MpUcU1MDHh8nn9hBQM7vGMRR+JdN5lu0T0rNaR5T
i2p9Se+xHZlZGDsb9ScbVlATU8LA5hS0TbE9uqMSF6EWLMmqZGEST8c6QE7QcyL7
ip6PZR6bNmT7onWfJ7o7sT2JiiCWHpRcBI+H2GlcVU8647/CEjilkShHdIvQFvxn
fOzxJ1M4oEUT3l/FXsgsQt5taN/T+BgWrCMcgXdZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmVQzqE7tpvgj9+41GWL7+PzDlM8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZjODEwY2Q4LWNlNDEtNDdjNC04Yjg2LWM5YjlhOGFlMDMyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADM7NgwDQYJKoZIhvcNAQELBQADggEBAD1jCGZZpXgmQQeAJiT/aXcmORJf
0XX87+OxsCwHfxqRqlwGDLT6bjnIL/oVSYsZrimlARc/3twHrDXKjk2if5cP51Ie
Mwni5wvxzAfcUnLm0ztib8o9HPG7wtQKn3y+dzd/RCOelsIAlNfX4TeWKOE08cN8
aygcgWtFArT3NmOqRKPkgZD+gAYY4b2FeC5fC3oLgsJ8NCCBIyJDMfHtOA/h4xT0
+IEfP6762nzW5YQ5SYN0eL+5QXcNp474PtWRnCZWIoWTU1Pl+E1IhIyNhIBekxy6
RaXwGQREERb+apcn7RYYPht0cCxdOyqjfBFyt8Q5bQbh16eawqts5YL8hmU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:44 2025 by rpki-client