Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
File:                     b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa (raw, json)
Hash identifier:          RfEICqvCYjH2U3xy10qb/QI9Y95pvx1EOl1dIlE4aOM=
Subject key identifier:   D9:78:5A:8B:59:CC:31:1F:58:8C:94:F5:47:C2:60:4A:55:D7:36:6F
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       4B9A16AD85D4406C30CCF4D20ADB4B4D9A8CA7E9
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
Signing time:             Tue 20 May 2025 15:31:03 +0000
ROA not before:           Tue 20 May 2025 15:31:03 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9a:16:ad:85:d4:40:6c:30:cc:f4:d2:0a:db:4b:4d:9a:8c:a7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: May 20 15:31:03 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=e823f411643970bd9f5164da8a1ad89412cf0b50eb92314d5cc5fee984c2e90d, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:d8:98:82:fc:16:87:76:03:a5:25:5b:6d:
                    76:c3:49:1f:b3:40:da:0f:57:a4:b8:a4:54:e0:1c:
                    73:9f:35:66:ec:20:72:73:43:fd:1d:76:f9:1f:90:
                    a9:c4:db:15:c4:eb:5f:91:ce:c6:9d:0a:64:bb:40:
                    3c:7a:8e:44:8b:c3:eb:23:e7:da:84:25:44:d2:ee:
                    4e:28:5e:18:81:e0:81:6d:99:2a:b3:91:72:09:2e:
                    d1:4d:e9:30:50:41:ab:a0:b6:93:78:7c:b7:b8:ca:
                    c4:92:53:7a:b3:b1:8d:4d:22:96:d2:f9:62:78:21:
                    36:8b:d9:4d:22:3f:99:bf:23:8c:84:9b:38:d8:f7:
                    0e:e1:38:63:81:d6:40:67:99:06:31:2c:b1:32:a8:
                    9e:2b:c3:9b:66:23:b0:7b:39:2f:e4:80:26:fa:e6:
                    01:4e:d2:87:72:29:2f:1f:9f:78:81:e9:0b:e7:82:
                    a2:e5:48:31:7a:77:07:41:72:c1:c2:7c:17:2d:25:
                    73:a5:c0:eb:72:e8:6b:63:5a:d0:65:5f:c9:f6:c0:
                    80:2e:1b:ef:b5:00:1d:4c:27:e1:77:20:82:27:dc:
                    1e:46:4d:55:15:1c:f4:95:71:a3:db:34:6c:6c:d8:
                    02:82:40:58:87:4f:06:dc:af:08:61:46:ab:3c:60:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:5A:8B:59:CC:31:1F:58:8C:94:F5:47:C2:60:4A:55:D7:36:6F
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:e6:37:0c:0e:cb:b6:f3:4e:f2:b2:7e:43:05:0d:29:06:
         c8:4b:44:98:d3:cd:38:c3:d9:ed:98:a7:0b:b8:e8:22:fc:ef:
         86:57:18:74:04:f3:f2:04:63:72:43:46:af:ba:9f:d4:59:08:
         80:e6:7d:bb:69:e9:d0:f1:56:24:6f:9f:0c:ed:58:2d:d2:5c:
         5a:1b:5a:bb:09:d1:d0:c6:3a:9d:a0:07:7a:e4:43:30:3b:b8:
         2c:de:95:38:19:09:5d:9c:1b:2a:bf:6e:6a:4e:5c:02:02:ae:
         cc:31:7b:db:be:07:c3:32:cd:61:b2:ed:97:d6:a1:93:2e:f6:
         ca:51:2f:ba:24:7f:90:ef:2c:38:f1:cc:6c:77:db:78:a7:1c:
         49:42:44:0c:36:39:84:50:24:6f:34:cd:19:f7:b2:8c:2c:d3:
         db:e6:a8:25:0b:c9:38:1e:e0:71:65:6a:b5:8a:35:9d:ae:bd:
         dc:1a:3a:c1:c7:fe:5c:ee:f9:6a:be:9e:36:b3:68:81:d2:b4:
         7d:ac:04:42:6e:86:59:4a:7d:f1:96:d3:16:c8:ee:5a:9e:1e:
         1b:81:2d:9f:53:99:a2:e5:9a:f8:03:bc:72:71:48:33:bb:10:
         12:5c:56:d8:b3:f6:8c:c9:4a:e0:c5:11:ea:91:03:5c:ef:f8:
         21:25:91:90
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUS5oWrYXUQGwwzPTSCttLTZqMp+kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNTIwMTUzMTAzWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlODIzZjQxMTY0Mzk3MGJkOWY1MTY0ZGE4YTFhZDg5NDEy
Y2YwYjUwZWI5MjMxNGQ1Y2M1ZmVlOTg0YzJlOTBkMS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxttiYgvwWh3YDpSVbbXbDSR+zQNoPV6S4pFTgHHOfNWbs
IHJzQ/0ddvkfkKnE2xXE61+RzsadCmS7QDx6jkSLw+sj59qEJUTS7k4oXhiB4IFt
mSqzkXIJLtFN6TBQQaugtpN4fLe4ysSSU3qzsY1NIpbS+WJ4ITaL2U0iP5m/I4yE
mzjY9w7hOGOB1kBnmQYxLLEyqJ4rw5tmI7B7OS/kgCb65gFO0odyKS8fn3iB6Qvn
gqLlSDF6dwdBcsHCfBctJXOlwOty6GtjWtBlX8n2wIAuG++1AB1MJ+F3IIIn3B5G
TVUVHPSVcaPbNGxs2AKCQFiHTwbcrwhhRqs8YJWLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2Xhai1nMMR9YjJT1R8JgSlXXNm8wHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1L2I1MTBiOWRiLTc1YjEtNDk1Ny1iZjdmLWYwNWM5NzJjMGJmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABgfwkwDQYJKoZIhvcNAQELBQADggEBAB6Y5jcMDsu2807ysn5DBQ0pBshL
RJjTzTjD2e2Ypwu46CL874ZXGHQE8/IEY3JDRq+6n9RZCIDmfbtp6dDxViRvnwzt
WC3SXFobWrsJ0dDGOp2gB3rkQzA7uCzelTgZCV2cGyq/bmpOXAICrswxe9u+B8My
zWGy7ZfWoZMu9spRL7okf5DvLDjxzGx323inHElCRAw2OYRQJG80zRn3sows09vm
qCULyTge4HFlarWKNZ2uvdwaOsHH/lzu+Wq+njazaIHStH2sBEJuhllKffGW0xbI
7lqeHhuBLZ9TmaLlmvgDvHJxSDO7EBJcVtiz9ozJSuDFEeqRA1zv+CElkZA=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:57 2025 by rpki-client