Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa
File:                     4b847893-4aea-442a-b81c-619bfedf3ca5.roa (raw, json)
Hash identifier:          mbJTVmVFxypsmvEg+0tWcZ/7B2U5Fx8hrQTzzpgvtHk=
Subject key identifier:   6D:1C:CF:E0:45:07:AC:23:E2:F7:CD:04:EC:A5:C8:C3:1D:4E:38:B7
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       72EDCD210B2A5867D204BD7CDE2EC47EDAACF917
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa
Signing time:             Fri 30 May 2025 00:00:03 +0000
ROA not before:           Fri 30 May 2025 00:00:03 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        206.55.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ed:cd:21:0b:2a:58:67:d2:04:bd:7c:de:2e:c4:7e:da:ac:f9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 30 00:00:03 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=540b7fb72467d299d60d35d1ab615614e02299ccc8704c00f7c0c78f7610720d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:45:9b:51:33:a7:5f:8f:80:3c:37:7f:7e:
                    f5:74:db:85:7f:86:50:e0:95:5c:73:62:db:d6:55:
                    43:56:bd:1b:a9:b2:6e:3c:8c:a6:d9:a4:76:09:ed:
                    85:a2:9e:b1:2a:34:7a:3c:4a:54:9f:62:86:f2:39:
                    5d:06:03:39:6e:92:75:61:c0:b2:ca:00:8f:99:1f:
                    a1:4d:67:f7:22:ed:25:90:4a:30:f7:97:60:e0:9b:
                    65:79:52:96:4f:f7:cb:3b:c2:dc:4e:b4:f2:20:95:
                    7a:dd:48:60:12:b6:bf:16:b7:3e:94:a5:de:27:1c:
                    c3:3d:9b:e3:b1:52:f4:59:a9:8e:60:41:78:b3:3d:
                    d3:4c:61:ab:3c:2d:7a:b7:8b:04:40:4e:04:e7:f7:
                    39:37:ae:18:1b:99:f7:88:4b:fc:8a:5d:b9:35:56:
                    ac:99:3c:f1:35:db:99:1a:2c:68:41:90:9b:a6:27:
                    63:9a:37:87:18:5c:c2:25:d5:2b:e6:08:f8:2e:af:
                    f4:20:d4:b9:f5:7f:41:d9:a7:ea:cb:d5:e0:a9:a5:
                    1e:2d:1f:2c:8c:2d:01:42:11:df:88:8e:23:90:aa:
                    52:f2:87:52:55:31:7a:d4:c6:0c:7a:d7:11:24:15:
                    f8:dd:1c:ed:19:43:55:3e:56:a9:6d:9a:ba:72:32:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1C:CF:E0:45:07:AC:23:E2:F7:CD:04:EC:A5:C8:C3:1D:4E:38:B7
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:28:8c:3f:67:27:ff:14:36:66:ec:47:47:fb:ff:4c:9f:
         90:7b:35:18:e4:25:b7:da:37:e8:80:e3:d2:28:7d:61:f8:90:
         a4:d8:e6:44:ff:65:cf:e5:a0:96:9d:22:ed:87:f9:1a:67:ee:
         f0:47:75:2e:29:fd:9e:53:f4:63:6a:0c:cf:7c:bb:b8:f2:97:
         5d:f6:d7:43:d5:4d:43:cb:81:2d:52:50:df:2b:df:d2:4d:cf:
         a8:65:6e:fa:59:04:85:d1:28:bb:97:d6:3a:34:ee:5c:78:f3:
         46:cb:9e:04:56:7f:17:3e:1d:98:e7:ad:bf:be:9c:a3:ef:62:
         31:e5:cb:00:6e:db:47:a9:bd:04:d7:2c:2d:7a:98:40:9a:18:
         34:29:5b:12:6e:02:df:d4:ab:52:e4:05:28:c8:b7:0b:77:b9:
         4b:86:ea:09:08:6d:d5:35:48:94:b1:b0:b2:60:15:82:2e:80:
         9e:58:78:1b:34:b5:1b:11:df:d4:f9:25:38:15:73:08:7e:ee:
         5b:36:09:70:f3:71:59:b9:2c:99:c8:ec:a1:4c:d3:d6:a4:98:
         47:85:ff:00:79:0c:89:3d:68:a7:1e:1a:94:d1:ab:ff:ed:b5:
         ab:2c:dd:15:5f:2a:ef:ce:c9:c2:e0:29:a8:26:09:fc:cf:07:
         0b:ca:13:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcu3NIQsqWGfSBL183i7Eftqs+RcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMwMDAwMDAzWhcNMjUwNzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDBiN2ZiNzI0NjdkMjk5ZDYwZDM1ZDFhYjYxNTYxNGUw
MjI5OWNjYzg3MDRjMDBmN2MwYzc4Zjc2MTA3MjBkMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYqkWbUTOnX4+APDd/fvV024V/hlDglVxzYtvWVUNWvRup
sm48jKbZpHYJ7YWinrEqNHo8SlSfYobyOV0GAzluknVhwLLKAI+ZH6FNZ/ci7SWQ
SjD3l2Dgm2V5UpZP98s7wtxOtPIglXrdSGAStr8Wtz6Upd4nHMM9m+OxUvRZqY5g
QXizPdNMYas8LXq3iwRATgTn9zk3rhgbmfeIS/yKXbk1VqyZPPE125kaLGhBkJum
J2OaN4cYXMIl1SvmCPgur/Qg1Ln1f0HZp+rL1eCppR4tHyyMLQFCEd+IjiOQqlLy
h1JVMXrUxgx61xEkFfjdHO0ZQ1U+VqltmrpyMr4FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbRzP4EUHrCPi980E7KXIwx1OOLcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzRiODQ3ODkzLTRhZWEtNDQyYS1iODFjLTYxOWJmZWRmM2NhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADON4EwDQYJKoZIhvcNAQELBQADggEBAEngKIw/Zyf/FDZm7EdH+/9Mn5B7
NRjkJbfaN+iA49IofWH4kKTY5kT/Zc/loJadIu2H+Rpn7vBHdS4p/Z5T9GNqDM98
u7jyl13210PVTUPLgS1SUN8r39JNz6hlbvpZBIXRKLuX1jo07lx480bLngRWfxc+
HZjnrb++nKPvYjHlywBu20epvQTXLC16mECaGDQpWxJuAt/Uq1LkBSjItwt3uUuG
6gkIbdU1SJSxsLJgFYIugJ5YeBs0tRsR39T5JTgVcwh+7ls2CXDzcVm5LJnI7KFM
09akmEeF/wB5DIk9aKceGpTRq//ttass3RVfKu/OycLgKagmCfzPBwvKE7I=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:00 2025 by rpki-client