Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5479b9ca-074b-4540-9c9c-ad3d807995aa.roa
File:                     5479b9ca-074b-4540-9c9c-ad3d807995aa.roa (raw, json)
Hash identifier:          8VtmOcfGIzdeqdbE2+mryRHzhpMxMM8SeH54+tCqOnk=
Subject key identifier:   FC:D7:C7:33:35:CB:0B:32:5A:A0:FB:6D:9B:73:C7:9E:AF:68:B1:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75CC8D9EAD5AF7BA9927E87ECDD4CB55619A7DB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5479b9ca-074b-4540-9c9c-ad3d807995aa.roa
Signing time:             Wed 09 Jul 2025 00:42:12 +0000
ROA not before:           Wed 09 Jul 2025 00:42:12 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.173.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cc:8d:9e:ad:5a:f7:ba:99:27:e8:7e:cd:d4:cb:55:61:9a:7d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  9 00:42:12 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=c01f8e1fd966825f47e77a0b47928aa4ab04feeefc32b966af94e85a47af86ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:67:55:75:16:ef:a1:10:f4:dd:ee:5b:3d:
                    93:76:aa:fa:b9:a7:5c:b9:10:44:c1:d6:36:7b:50:
                    96:b5:93:91:b5:af:2f:a0:5e:bb:a0:38:2e:89:26:
                    1f:b6:11:99:a8:6b:47:bf:42:18:58:19:73:11:a3:
                    fd:0c:1b:89:89:11:d3:a1:9d:7f:80:45:cc:37:f0:
                    25:9d:a9:aa:78:79:7c:60:bc:cc:7b:8a:06:08:d2:
                    22:f5:75:1c:3f:fb:39:2d:3f:22:06:cc:e6:ba:22:
                    95:15:28:6a:ae:b2:a3:23:81:40:27:a9:91:8b:27:
                    3c:17:6c:d7:2e:ea:20:c1:e5:e8:c0:60:79:c9:4b:
                    8f:d6:4a:13:10:02:b3:dd:78:e7:cc:17:5a:1c:d5:
                    a6:22:d6:d7:f5:07:24:ff:32:c5:71:7e:f7:14:f2:
                    8a:79:c3:07:63:e8:d4:c9:7e:fb:b4:b1:90:2c:80:
                    8d:68:15:24:4e:fa:2a:51:9b:21:b3:ab:e6:54:4a:
                    d1:df:a1:81:ce:0b:ca:6e:51:09:b1:41:97:a7:63:
                    c4:fa:c3:86:a2:a0:36:c7:06:70:99:b6:26:a0:02:
                    42:af:8f:0b:d5:1b:e8:5a:b7:e7:95:fa:3b:38:3d:
                    55:ce:e7:96:97:32:0b:a2:fd:6f:9f:4b:9c:58:e0:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:C7:33:35:CB:0B:32:5A:A0:FB:6D:9B:73:C7:9E:AF:68:B1:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5479b9ca-074b-4540-9c9c-ad3d807995aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:86:4c:f5:13:cd:dc:87:b2:16:03:d6:0f:7d:87:ed:aa:
         d4:a0:70:25:3f:c3:6d:ee:fd:63:86:58:ab:f5:0e:67:ba:01:
         62:83:ee:39:bf:a8:6b:df:8b:2a:ca:14:1f:c3:92:43:19:99:
         92:8d:cf:c0:f7:83:fd:cb:9c:b2:34:bc:4c:7a:90:6f:63:e0:
         8e:f2:49:e9:e1:d3:61:a5:2d:b9:0b:36:54:73:bf:8e:80:73:
         93:20:f9:5b:1b:c5:42:fa:10:01:82:05:78:f7:0d:c5:a9:ba:
         f6:cf:67:4c:16:05:83:ac:57:ab:d2:d3:2d:11:93:06:53:0c:
         ff:e8:1c:23:f1:b9:2a:b9:4a:bc:f5:e4:ec:23:63:24:86:fc:
         63:7a:c0:90:45:22:3a:b1:88:b0:43:75:8f:89:26:04:ec:c6:
         46:99:51:04:3b:98:72:7d:6a:23:88:ae:51:31:1b:66:48:5a:
         33:c7:99:83:72:49:3a:75:fa:33:4f:02:08:cc:1d:63:70:21:
         e9:6a:dd:ee:9d:16:ad:b4:bb:43:e9:31:de:4f:56:43:f6:b9:
         8e:e8:93:3f:96:33:bb:0d:ae:d8:da:49:5e:d2:9f:b3:8f:34:
         be:b0:27:e0:c9:d3:16:21:da:d0:b5:b1:27:16:79:54:fd:8f:
         7f:e0:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:28 2025 by rpki-client