Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa
File:                     cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa (raw, json)
Hash identifier:          t23NcbJUD50OS7AR7ZK6WFocaMWNsLnaUwnRgi0Xv6o=
Subject key identifier:   13:10:E6:A1:56:6E:D5:68:65:95:D0:83:86:65:79:11:EC:0E:CA:98
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0D048F077E6E0315EEB4E34B8D0E18C81D1503CF
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa
Signing time:             Thu 05 Jun 2025 14:37:17 +0000
ROA not before:           Thu 05 Jun 2025 14:37:17 +0000
ROA not after:            Thu 10 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:04:8f:07:7e:6e:03:15:ee:b4:e3:4b:8d:0e:18:c8:1d:15:03:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jun  5 14:37:17 2025 GMT
            Not After : Jul 10 23:59:59 2025 GMT
        Subject: serialNumber=17c5a8cf561c0fbc8151c7b115387bf646090f2c753e16d4f1866f1d975e7a6a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:4e:d2:e5:e6:71:27:b7:ec:a9:17:77:32:
                    c4:ac:0d:f2:b7:61:21:5e:45:32:8e:24:33:65:94:
                    9c:c9:e2:9d:91:d5:e7:66:7b:96:6c:6c:2a:a7:9a:
                    83:6d:6e:e8:0c:4c:fe:f2:b8:26:cd:6c:5a:77:6d:
                    73:50:7c:56:be:90:31:3d:49:0a:29:21:8e:a0:2f:
                    67:f0:00:37:ac:24:1e:9d:97:40:50:5b:be:7c:a2:
                    d2:ae:6c:a5:c0:b2:e1:e2:0b:54:9d:56:59:a2:fb:
                    3b:04:29:c0:5a:22:15:95:64:eb:c9:3a:18:76:42:
                    97:14:96:9c:24:00:0b:68:f6:88:83:b4:28:09:7d:
                    f9:ed:b1:6a:15:e3:d5:17:8a:c6:31:92:94:de:17:
                    a7:40:fe:8a:5d:fd:0e:6c:a6:de:52:73:0d:6f:e1:
                    f8:72:77:7e:45:01:aa:98:ab:8d:82:00:16:d5:dc:
                    5a:46:5b:4a:cc:33:d1:25:a3:4b:78:b7:59:99:a4:
                    4e:41:62:83:7b:d7:cb:2a:59:22:e4:56:a1:9b:a7:
                    ba:f0:5b:9c:43:68:d4:73:6f:15:c0:e8:cc:47:f6:
                    08:fc:94:61:3b:4f:e5:f2:70:90:8e:58:9f:b2:1a:
                    93:da:1c:f0:a3:17:77:d7:e4:21:c7:79:da:ef:b8:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:10:E6:A1:56:6E:D5:68:65:95:D0:83:86:65:79:11:EC:0E:CA:98
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cbeb8f06-bf9f-439c-ab1a-d61e5c2b6028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:ca:d9:f2:2b:71:61:a8:7b:9f:74:4a:ba:12:ad:ca:4e:
         b1:91:d4:64:c3:9a:49:a5:83:0b:f3:32:7f:63:05:d8:6a:e9:
         58:3e:dd:b8:fb:e7:2a:3b:7e:b3:b3:89:d1:e7:bf:70:16:4b:
         20:a2:52:e0:7f:1a:01:11:84:e1:b3:81:93:a4:d6:38:fe:ba:
         44:e5:7c:7c:3a:c8:62:3c:bc:2e:f9:b9:b3:a2:81:fd:fd:9d:
         be:8f:b4:1b:d2:17:a1:cc:e6:9e:f0:ec:8a:95:26:01:23:d9:
         8d:b6:9f:27:85:36:70:35:64:1c:7c:70:f2:aa:98:14:3e:70:
         92:b0:e0:c2:fb:7f:4a:71:67:4a:e7:81:b0:31:02:05:42:84:
         16:18:cb:1d:1e:5f:89:79:57:a9:9f:7b:d2:dc:86:52:91:f6:
         da:96:b4:1b:1f:f3:91:ae:7f:82:4e:8b:b8:0f:d8:77:3f:75:
         e9:a4:cb:2d:4d:7f:f8:91:09:8c:5e:f3:c5:1f:15:c7:23:c5:
         64:96:a4:ad:05:b3:76:3d:77:f6:05:a5:9c:68:3d:69:03:86:
         72:19:ed:ec:25:9e:8d:ba:13:f1:63:30:ed:86:f1:31:58:49:
         8c:ac:4a:1d:cc:a1:04:d2:d6:9c:00:b6:3c:8a:a7:21:c0:5b:
         87:d2:96:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDQSPB35uAxXutONLjQ4YyB0VA88wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzE3WhcNMjUwNzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxN2M1YThjZjU2MWMwZmJjODE1MWM3YjExNTM4N2JmNjQ2
MDkwZjJjNzUzZTE2ZDRmMTg2NmYxZDk3NWU3YTZhMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcC07S5eZxJ7fsqRd3MsSsDfK3YSFeRTKOJDNllJzJ4p2R
1edme5ZsbCqnmoNtbugMTP7yuCbNbFp3bXNQfFa+kDE9SQopIY6gL2fwADesJB6d
l0BQW758otKubKXAsuHiC1SdVlmi+zsEKcBaIhWVZOvJOhh2QpcUlpwkAAto9oiD
tCgJffntsWoV49UXisYxkpTeF6dA/opd/Q5spt5Scw1v4fhyd35FAaqYq42CABbV
3FpGW0rMM9Elo0t4t1mZpE5BYoN718sqWSLkVqGbp7rwW5xDaNRzbxXA6MxH9gj8
lGE7T+XycJCOWJ+yGpPaHPCjF3fX5CHHedrvuMr/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUExDmoVZu1WhlldCDhmV5EewOypgwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2NiZWI4ZjA2LWJmOWYtNDM5Yy1hYjFhLWQ2MWU1YzJiNjAyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIjYJAwDQYJKoZIhvcNAQELBQADggEBAEsAytnyK3FhqHufdEq6Eq3KTrGR
1GTDmkmlgwvzMn9jBdhq6Vg+3bj75yo7frOzidHnv3AWSyCiUuB/GgERhOGzgZOk
1jj+ukTlfHw6yGI8vC75ubOigf39nb6PtBvSF6HM5p7w7IqVJgEj2Y22nyeFNnA1
ZBx8cPKqmBQ+cJKw4ML7f0pxZ0rngbAxAgVChBYYyx0eX4l5V6mfe9LchlKR9tqW
tBsf85Guf4JOi7gP2Hc/demkyy1Nf/iRCYxe88UfFccjxWSWpK0Fs3Y9d/YFpZxo
PWkDhnIZ7ewlno26E/FjMO2G8TFYSYysSh3MoQTS1pwAtjyKpyHAW4fSlvw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:31:26 2025 by rpki-client