Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa
File:                     065ce18a-b778-4c3d-b667-f9a997960b12.roa (raw, json)
Hash identifier:          MeND/Gmnj0vQIdQ6crVepdO36fkUDFhKgux+cTbn7DE=
Subject key identifier:   21:30:9D:F6:92:1F:58:D9:8F:A4:01:7E:9F:AA:31:3A:B5:A7:83:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34EC9DE1E9FC6551C5C01B9680EC9292B2AE271C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa
Signing time:             Mon 14 Jul 2025 15:01:58 +0000
ROA not before:           Mon 14 Jul 2025 15:01:58 +0000
ROA not after:            Mon 18 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:9d:e1:e9:fc:65:51:c5:c0:1b:96:80:ec:92:92:b2:ae:27:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 14 15:01:58 2025 GMT
            Not After : Aug 18 23:59:59 2025 GMT
        Subject: serialNumber=d26be2dacb0bd92a4de05e834e6f28058bda1c978ad2ac6440d425ed0d53a790, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:f2:f2:3b:f0:6c:e3:be:aa:47:ed:5e:6d:
                    46:fc:52:94:3f:e1:fc:92:db:ff:34:65:0c:c4:49:
                    1a:c3:fb:08:c1:3f:f2:65:71:41:46:5d:5c:da:37:
                    cc:ed:d6:02:7c:89:71:ef:6c:bf:28:32:3f:b3:f1:
                    6a:69:f0:41:75:54:34:49:41:73:1d:5f:d8:07:51:
                    60:93:4a:24:62:d1:9f:af:59:95:4a:b5:ce:c3:5e:
                    6b:5a:30:44:a7:47:f1:b7:c0:4d:5f:06:17:8f:5f:
                    bd:26:d8:39:c3:2b:7e:12:07:19:52:a1:ed:a8:30:
                    5b:78:94:19:0d:f0:2e:45:df:d3:e3:07:32:15:67:
                    eb:8a:f3:ea:e2:6a:ce:e3:8b:7c:77:39:e8:c9:53:
                    1f:d6:6d:f9:54:97:84:92:a8:82:6b:b8:46:34:ee:
                    09:8f:50:e9:22:a0:32:69:29:be:6d:80:22:71:df:
                    9a:23:f6:15:76:1b:5a:82:0f:ad:0b:38:39:a4:4f:
                    b9:0a:2a:ce:4e:f1:e2:ac:94:39:ea:83:01:52:43:
                    1b:08:9f:42:ab:33:a0:5b:91:fc:1c:3d:4b:4c:ad:
                    e9:9f:76:32:08:8d:a8:38:53:73:92:7a:b8:9d:8e:
                    57:f3:c9:5d:3b:2b:90:70:35:e7:56:ad:0f:3c:a3:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:9D:F6:92:1F:58:D9:8F:A4:01:7E:9F:AA:31:3A:B5:A7:83:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/065ce18a-b778-4c3d-b667-f9a997960b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.143.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:b5:9e:07:9e:50:84:0a:1d:1d:b5:bf:2d:87:7a:22:20:
         54:bb:e3:2c:7e:2d:74:d8:8c:50:cf:c1:53:45:ac:87:95:c9:
         cd:f9:2e:97:e0:70:26:5a:cd:c4:78:17:37:92:d5:71:9d:a8:
         e1:2a:ec:9f:60:18:75:63:07:68:85:de:bb:4b:67:69:9f:65:
         2b:8a:fd:d4:dd:fa:7f:2b:ba:f7:fa:c5:ef:22:93:a4:77:d6:
         f2:f4:39:a5:99:ad:70:36:c8:a6:0c:26:02:ef:1c:0d:7f:2b:
         0b:ad:99:ef:7c:60:33:87:4f:c4:50:64:a1:40:35:14:15:bf:
         b0:00:be:38:c4:28:fb:29:ea:98:7d:57:6e:46:96:3c:da:6a:
         7c:5d:01:b7:2c:59:01:82:b1:38:e8:e0:75:0e:69:bb:7d:9f:
         2c:69:04:48:7e:c6:2d:56:9b:68:60:39:c2:4c:df:c8:33:64:
         bf:12:bc:d4:b9:23:0d:02:a6:3c:a5:3c:01:c9:79:7c:28:1b:
         15:3c:1c:5e:34:ad:16:ff:d2:db:c6:c1:e5:64:b1:1f:ce:e1:
         60:a9:58:5c:e3:dd:cc:52:a4:ab:62:f2:ad:bf:a1:b8:f1:20:
         86:d1:41:b5:08:05:59:d4:0c:f7:a0:f5:60:6e:21:8f:4d:a5:
         c4:45:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:35 2025 by rpki-client