Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074c1d81-3bbe-47ac-8bec-c54dccaaf547.roa
File:                     074c1d81-3bbe-47ac-8bec-c54dccaaf547.roa (raw, json)
Hash identifier:          exsKPpP3puIgCZHqPqK6V7J7p4GZYRWVTAXh8b5GKxo=
Subject key identifier:   AA:D3:AE:51:4F:F6:ED:23:9C:62:00:37:A2:24:E7:B4:E4:D9:B5:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EAEC1DBE2820A5C2D83B2BFAE0A8169D09BA6E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074c1d81-3bbe-47ac-8bec-c54dccaaf547.roa
Signing time:             Fri 11 Jul 2025 00:41:21 +0000
ROA not before:           Fri 11 Jul 2025 00:41:21 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        63.180.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ae:c1:db:e2:82:0a:5c:2d:83:b2:bf:ae:0a:81:69:d0:9b:a6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:41:21 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=295a0c693016058f3308ff4c144336f627573a56330acc52d683fd3f962d01e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:bc:84:2a:d1:67:c7:9f:95:1b:ea:e5:ab:
                    b0:26:fd:70:c6:7f:bb:b5:c7:4a:cc:f7:51:3f:b3:
                    03:24:01:09:13:9f:f1:c4:56:93:08:3c:f8:b7:31:
                    c4:fb:bc:a3:e4:06:e4:7a:b0:9a:9c:15:d1:b2:fc:
                    de:78:70:f0:99:1d:6d:f2:78:83:93:d8:b2:9c:ab:
                    1b:c1:73:b6:22:87:33:26:bc:d5:a1:8c:e9:c3:2d:
                    c8:78:a4:3c:ed:21:85:e9:b1:b8:05:51:b8:a9:3e:
                    d4:c1:d4:d7:b2:a3:7d:a0:e4:13:36:72:0f:4e:c7:
                    8c:85:2b:04:19:3c:ae:17:f3:9b:21:cd:e0:77:b8:
                    fd:b1:9e:4a:e5:5e:57:a1:a6:56:6f:2d:b8:c4:94:
                    79:3d:7b:86:3d:de:4f:d1:ac:3b:e8:95:71:b5:05:
                    1b:48:84:bf:1b:0b:4c:b9:04:65:b1:4e:6e:93:b4:
                    ef:08:fd:e6:f1:29:ec:bc:41:6f:59:58:f9:df:d4:
                    3d:fd:26:b1:0e:71:83:ff:fe:a3:90:51:48:77:58:
                    01:fd:17:12:05:24:bc:18:40:a1:1c:15:87:d5:84:
                    36:19:dd:c8:f9:8a:29:b3:32:c9:a8:46:0d:29:00:
                    a7:20:75:7d:8b:f7:f4:b2:e8:ca:54:ae:4c:af:b5:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D3:AE:51:4F:F6:ED:23:9C:62:00:37:A2:24:E7:B4:E4:D9:B5:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074c1d81-3bbe-47ac-8bec-c54dccaaf547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:5f:79:e0:93:87:2e:69:5c:72:c3:e8:83:53:d0:a8:9c:
         7f:76:4f:3e:19:6d:3e:2c:69:f3:85:3d:4a:d3:a2:12:64:08:
         c1:8c:37:01:49:f8:53:54:b8:6f:64:e6:cf:cb:70:7b:b0:24:
         e6:98:5b:ff:9a:00:82:e3:81:22:33:7a:da:2a:d8:d8:82:4c:
         a2:b7:4e:6c:6f:48:2f:54:d9:82:f0:58:b1:5e:14:4a:b3:00:
         13:eb:58:6c:b5:0c:26:99:61:c6:23:13:d4:9e:2f:0a:5c:6f:
         1b:0c:d0:34:4a:31:b1:b0:dc:8f:d1:b1:0b:0f:d3:a3:5d:28:
         cd:28:b4:f1:01:7d:52:11:f4:69:09:2f:52:f5:e1:63:d7:93:
         ad:d7:37:21:51:40:de:43:b2:33:c1:af:2d:24:f3:0c:3b:43:
         06:5b:e7:3b:b8:0f:c8:76:3b:5e:d2:ef:f2:77:19:65:e6:d2:
         19:b6:3b:39:a7:8c:c6:71:db:d6:f9:33:46:69:a4:b0:be:bd:
         e4:1f:b2:56:7c:c8:66:82:c8:f7:a1:34:44:db:1c:e9:15:58:
         51:e0:75:0a:ca:64:9c:02:5a:f2:46:e4:b4:cd:0f:b6:f0:c4:
         6f:3f:23:8c:a2:73:ed:c0:02:f4:ad:8f:4a:fb:94:79:98:0f:
         8c:9c:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:07:00 2025 by rpki-client