Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa
File:                     25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa (raw, json)
Hash identifier:          mSYudH8+E1TLzTnvwZdxlUEHTojG5xwdUJW0DVgTvrU=
Subject key identifier:   76:DC:50:85:81:40:88:B5:B2:F4:48:BD:B8:56:AD:B1:B3:B7:C1:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C4AB7D1934F582BA35620F2A7C63EDBEDD18BAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa
Signing time:             Wed 09 Jul 2025 15:00:14 +0000
ROA not before:           Wed 09 Jul 2025 15:00:14 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.15.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4a:b7:d1:93:4f:58:2b:a3:56:20:f2:a7:c6:3e:db:ed:d1:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  9 15:00:14 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=2989b4ee50160ce3841b5cb097d30e2cb2ff6b6774ba4d1ddba4223e64194a70, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:2d:a4:ff:78:51:4a:7e:fd:1c:25:1c:eb:
                    3d:a1:e5:43:8c:d4:15:f8:6d:6f:78:b4:57:e4:52:
                    f0:d8:26:7a:10:7a:cd:31:0c:d7:73:ff:5e:e9:08:
                    d4:54:d2:54:6c:2c:d6:c2:ff:fe:00:d1:ed:56:4b:
                    a7:dd:cc:2c:b3:48:ae:f4:ff:22:df:f5:ec:6a:33:
                    e7:e3:d5:a4:f8:45:bb:01:a0:f4:20:f4:3a:35:11:
                    f7:fa:0b:5a:06:de:79:48:96:30:15:ff:f5:fc:08:
                    e0:08:5d:af:a9:4d:7e:47:41:48:4c:aa:be:61:0d:
                    13:93:5a:31:a9:3b:98:81:c6:f5:f4:66:1f:0a:39:
                    b9:02:1b:e2:19:c2:94:eb:c2:c6:98:35:ff:d0:6f:
                    42:42:88:ab:6f:67:4b:f5:71:2b:31:6a:88:7d:38:
                    a6:13:0d:e3:54:2f:a1:c3:a1:73:01:34:03:48:ee:
                    b5:90:d8:62:05:d5:ec:b7:2a:06:cf:ba:17:79:a1:
                    47:f7:cb:75:d6:a8:89:6c:0c:56:a8:69:6c:3b:93:
                    4f:72:06:bb:c9:5a:8b:b5:50:01:28:dd:f2:0c:21:
                    8d:d7:bd:ce:5f:16:44:a5:80:d2:10:e8:37:7e:94:
                    79:d1:88:b8:c9:52:27:3d:37:2c:9c:21:36:8e:46:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:50:85:81:40:88:B5:B2:F4:48:BD:B8:56:AD:B1:B3:B7:C1:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25948a2b-e584-4f1c-b0bf-a7f467c73fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:ed:a6:d6:b7:bb:07:02:26:d8:4b:5a:f1:06:de:fc:6c:c5:
         0d:fb:4b:79:a4:8a:9c:cf:6a:09:d8:4b:25:bb:ac:27:f4:93:
         d3:5f:92:4e:1b:b7:df:57:a0:38:5d:34:a2:86:69:b8:0d:2e:
         4c:4d:3e:46:78:4c:8b:cf:d9:b6:7f:87:e9:66:b6:4c:8c:dd:
         38:d0:32:f1:d2:1f:55:9a:89:17:3c:d7:bb:35:a3:6f:21:8c:
         f9:d2:36:5c:30:26:10:84:90:03:00:71:ea:19:f9:2d:ff:7e:
         4e:8c:eb:4e:d1:ee:19:99:ab:31:f0:c1:c2:fc:87:69:bf:75:
         a8:2f:cb:28:50:92:a4:87:02:04:36:fa:82:0b:83:92:3e:5f:
         87:f6:b0:10:8f:be:62:21:c2:6a:de:7f:b3:1f:71:05:4a:1f:
         8f:26:d0:86:4f:1e:f5:84:ad:f8:e9:6d:1f:ba:6c:fd:d7:e5:
         a5:4f:fe:25:84:38:57:d9:df:25:5b:c9:f1:eb:89:fc:5c:ee:
         73:48:61:bf:df:9d:23:a4:6d:b0:cc:92:c5:f9:ab:24:84:d8:
         58:d2:71:4b:30:dd:86:42:13:2e:a6:f9:17:ac:69:cd:37:51:
         ec:65:2b:c9:73:10:b9:51:63:94:39:57:04:dc:84:1f:ee:4a:
         55:f7:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:04 2025 by rpki-client