Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52248f94-30ea-4ecd-abe4-da5a8409a81b.roa
File:                     52248f94-30ea-4ecd-abe4-da5a8409a81b.roa (raw, json)
Hash identifier:          KStLUcONgwf6sAsjGvgwBSgXgDTSrEQcOqnOEuYKgsQ=
Subject key identifier:   57:F6:B7:5C:3A:86:E9:AF:67:09:4A:15:A3:A3:AF:99:31:1D:3F:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E8463672AB24ED467676A584046B0325FE0B368
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52248f94-30ea-4ecd-abe4-da5a8409a81b.roa
Signing time:             Wed 02 Jul 2025 00:41:25 +0000
ROA not before:           Wed 02 Jul 2025 00:41:25 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:84:63:67:2a:b2:4e:d4:67:67:6a:58:40:46:b0:32:5f:e0:b3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:41:25 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=bc6e8241d323efb11ff7c5905a6f8ef167dcdf7c18d3e3cc43105759f40c2b46, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:09:0f:fc:93:70:1e:74:ba:14:a3:07:b9:
                    3a:43:0a:78:82:8a:ef:13:90:4c:d3:79:61:db:10:
                    06:70:d3:0f:eb:42:46:96:b8:de:81:b2:de:96:82:
                    dc:81:29:cb:ff:f3:75:cb:fb:f6:ab:61:b5:8d:83:
                    07:05:08:7f:38:8f:03:95:89:16:ea:e4:90:62:2d:
                    d2:b0:9f:82:20:cb:e6:78:4e:5b:e0:57:f7:36:a0:
                    55:1f:47:2f:56:ff:c6:9b:25:c6:90:b3:1c:e9:3b:
                    10:c4:d8:64:63:1d:b8:9f:9f:a7:3c:d2:6f:8d:7b:
                    7d:09:bd:17:db:5a:33:8a:08:df:7d:b4:24:ce:27:
                    18:d3:a1:ef:05:c6:d3:07:bd:f3:3f:06:5f:dc:a6:
                    bf:1d:9d:08:81:f4:c8:68:df:72:12:98:f7:f5:10:
                    35:4e:6a:4a:28:a6:e0:90:41:f6:84:ed:6c:4f:29:
                    1f:67:ca:bd:af:9a:ae:2d:45:b5:92:39:70:6f:83:
                    54:dc:20:2a:f3:7d:e9:c5:8e:13:c7:e5:d7:c9:17:
                    99:d4:ad:92:c4:aa:be:1a:93:fb:d2:61:80:96:37:
                    6a:a8:8d:1b:31:a7:17:43:08:6b:ed:a3:5e:f6:7a:
                    9b:9c:e2:bd:ac:c2:f8:21:43:9d:4c:b0:11:e7:93:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:B7:5C:3A:86:E9:AF:67:09:4A:15:A3:A3:AF:99:31:1D:3F:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52248f94-30ea-4ecd-abe4-da5a8409a81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:e3:5c:f1:69:3a:06:d5:5c:f9:8b:2c:1c:aa:31:2f:9b:
         8a:25:c1:ff:7c:9e:85:57:b6:e5:d6:ae:b1:8c:21:b3:50:3e:
         d9:41:ed:43:e4:f2:16:74:be:7e:08:64:b3:49:b7:6c:06:5e:
         c8:25:53:11:26:3e:89:de:f8:2d:f5:88:82:a9:03:8a:86:9a:
         97:2f:4e:fa:31:c1:f9:ee:b5:81:a0:22:f9:94:dc:57:b8:34:
         ee:41:11:67:11:45:41:7d:1e:15:69:78:91:98:c3:a7:4a:2a:
         5b:a0:1c:82:20:2f:91:c1:2f:53:1f:04:df:6a:9b:00:fb:ee:
         90:53:73:35:03:aa:4d:b1:e8:b0:f3:e1:3a:64:3f:85:9a:c5:
         c6:4a:27:7c:a7:c2:7e:21:46:cf:ee:70:8e:bc:7b:de:38:d8:
         ef:c9:96:8f:58:7c:76:93:27:f3:cc:60:d5:02:db:f7:b5:99:
         57:1a:6a:28:88:2a:26:97:12:ff:c6:6c:01:00:bd:cb:63:a6:
         66:2c:fd:ed:00:e2:73:11:4a:2e:3c:75:02:12:7c:8e:ae:93:
         03:31:9b:91:e7:51:c8:21:b3:08:89:05:26:32:e9:79:1d:71:
         f9:b6:d1:05:3a:f0:f5:b8:df:7e:51:5e:2d:24:24:4f:e2:e9:
         e5:ae:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:40:06 2025 by rpki-client