Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
File:                     e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json)
Hash identifier:          RLb1YvFsYzUHRUNEyQLogXbfmgoBQyHJz06NEceh71w=
Subject key identifier:   53:DE:9C:AB:54:7D:2B:20:EC:86:2D:3F:8A:D0:B8:16:D8:87:2D:C0
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       75EA73E282C9BD03D856473AB8443DB1BF8356DC
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
Signing time:             Mon 04 Aug 2025 17:40:19 +0000
ROA not before:           Mon 04 Aug 2025 17:40:19 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:73:e2:82:c9:bd:03:d8:56:47:3a:b8:44:3d:b1:bf:83:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Aug  4 17:40:19 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=fd78e528e55ee32e65c9d4849aa8fab0869b7335e3627098d8d1f3d70fe9915a, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:fd:6c:86:dd:a9:2d:c5:d6:34:b7:7b:e2:
                    f5:62:ed:0f:8b:c9:1a:b7:b8:0e:1f:ee:dc:8b:a6:
                    47:be:08:f1:14:d7:97:5a:a3:b4:a0:65:94:7f:70:
                    95:ef:06:17:17:ce:52:77:b6:9e:be:be:12:0d:e6:
                    ec:ae:3d:d0:c7:db:44:3f:f7:c5:2a:8d:47:60:1e:
                    d1:33:37:8d:7d:b4:5c:67:27:e5:a4:5b:e0:d7:b7:
                    32:32:e9:e4:89:53:ac:1b:1d:3f:46:b2:c8:3a:d4:
                    71:4b:e4:01:95:d8:da:67:4e:b9:35:47:de:d7:5a:
                    0e:8e:80:74:ef:4c:94:f5:54:e1:f6:21:2f:42:32:
                    68:0d:e2:83:19:20:df:20:82:d1:6f:9b:ce:8d:1a:
                    2c:33:98:8a:a6:77:74:5f:d9:10:17:b3:b1:fd:03:
                    75:ad:89:b8:2e:46:aa:c5:38:04:7b:f0:c7:14:0f:
                    02:55:02:8c:9d:9b:3b:c7:0c:9b:74:93:6e:93:22:
                    11:79:7c:b7:bf:eb:de:23:9d:c0:bb:89:b1:1e:94:
                    58:f8:f2:ac:21:70:78:1f:15:5c:5a:8f:65:72:b8:
                    17:2b:57:a4:b5:52:6e:08:60:46:ff:67:03:6f:50:
                    67:7f:7e:24:fb:e6:75:2b:c7:e8:76:a9:cb:29:61:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:9C:AB:54:7D:2B:20:EC:86:2D:3F:8A:D0:B8:16:D8:87:2D:C0
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:a1:29:08:2b:db:58:5d:c1:52:49:0c:0a:62:87:e9:4e:
         f7:5d:09:56:04:a0:6d:38:38:55:49:3a:05:2e:d5:ec:95:2b:
         89:ff:50:fc:88:55:b9:16:33:e0:41:0d:48:b8:a2:e2:85:65:
         b7:68:ca:9f:1e:49:ef:dc:27:ca:9a:2e:c7:fb:8f:e4:65:60:
         47:e2:ca:2e:45:a7:21:22:2d:cd:d6:5d:6c:02:8d:e3:d6:ba:
         c3:ad:5c:fc:a5:dc:4d:1f:07:be:4a:0a:25:dd:74:ad:04:64:
         d2:57:a4:4f:6b:ce:4d:4a:5d:84:bb:33:6b:b6:3b:1d:31:8d:
         59:ca:9e:4a:71:33:f5:a9:fc:91:6b:d8:08:3a:9b:45:8d:24:
         da:05:a2:ba:f5:47:44:40:1c:fb:8c:a9:4d:e3:29:47:07:22:
         ff:8d:b1:8c:16:58:67:b0:39:c2:26:55:16:b5:12:0d:23:1f:
         9d:b9:50:f3:39:6d:2a:8a:3e:3e:1c:62:99:3c:d8:9e:0e:fe:
         c2:a9:01:b8:0b:ee:3f:cb:41:5a:31:6e:50:64:2c:6a:37:65:
         67:87:f4:6d:5e:fe:d3:3b:c3:4f:c7:44:24:5c:19:6c:bb:09:
         0c:67:91:20:fe:e2:eb:3e:b7:c4:84:0e:65:fa:94:0f:87:62:
         e0:67:26:60
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdepz4oLJvQPYVkc6uEQ9sb+DVtwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy
MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwODA0MTc0MDE5WhcNMjUwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDc4ZTUyOGU1NWVlMzJlNjVjOWQ0ODQ5YWE4ZmFiMDg2
OWI3MzM1ZTM2MjcwOThkOGQxZjNkNzBmZTk5MTVhMS0wKwYDVQQDEyQ3MWMzODc2
ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzh/1sht2pLcXWNLd74vVi7Q+LyRq3uA4f7tyLpke+CPEU
15dao7SgZZR/cJXvBhcXzlJ3tp6+vhIN5uyuPdDH20Q/98UqjUdgHtEzN419tFxn
J+WkW+DXtzIy6eSJU6wbHT9Gssg61HFL5AGV2NpnTrk1R97XWg6OgHTvTJT1VOH2
IS9CMmgN4oMZIN8ggtFvm86NGiwzmIqmd3Rf2RAXs7H9A3WtibguRqrFOAR78McU
DwJVAoydmzvHDJt0k26TIhF5fLe/694jncC7ibEelFj48qwhcHgfFVxaj2VyuBcr
V6S1Um4IYEb/ZwNvUGd/fiT75nUrx+h2qcspYUIdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUU96cq1R9KyDshi0/itC4FtiHLcAwHwYDVR0jBBgwFoAU/iLg9yLMTwYM
WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y
MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3
ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4
NmYwYjE1OTRjL2UzYzg0NmIxLWZiMDAtNGNiNy04MjNkLTNhNThiZWRkNjY1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm
LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4qbAwDQYJKoZIhvcNAQELBQADggEBAHk6oSkIK9tYXcFSSQwKYofpTvdd
CVYEoG04OFVJOgUu1eyVK4n/UPyIVbkWM+BBDUi4ouKFZbdoyp8eSe/cJ8qaLsf7
j+RlYEfiyi5FpyEiLc3WXWwCjePWusOtXPyl3E0fB75KCiXddK0EZNJXpE9rzk1K
XYS7M2u2Ox0xjVnKnkpxM/Wp/JFr2Ag6m0WNJNoForr1R0RAHPuMqU3jKUcHIv+N
sYwWWGewOcImVRa1Eg0jH525UPM5bSqKPj4cYpk82J4O/sKpAbgL7j/LQVoxblBk
LGo3ZWeH9G1e/tM7w0/HRCRcGWy7CQxnkSD+4us+t8SEDmX6lA+HYuBnJmA=
-----END CERTIFICATE-----
Generated at Tue Aug 5 22:55:01 2025 by rpki-client