Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa
File:                     58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa (raw, json)
Hash identifier:          niFsJ5hvNbPsGmiTUVOzXkgG2pevx9etAXPxpPJJjL8=
Subject key identifier:   AE:6B:46:98:25:94:D5:3F:4E:9F:D9:37:F8:F0:C1:EF:95:96:3D:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18A20DD3D7C9F0FEDB8833B7784AB59542CD302A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa
Signing time:             Fri 11 Jul 2025 00:52:04 +0000
ROA not before:           Fri 11 Jul 2025 00:52:04 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a2:0d:d3:d7:c9:f0:fe:db:88:33:b7:78:4a:b5:95:42:cd:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:52:04 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=800c8359b16a6604e4f19855ce7f3fdec1e8003d7dac668bc88a289963576e53, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:cc:58:b1:51:54:a4:18:43:3d:d8:59:1e:
                    40:cf:7d:bb:db:47:7e:77:48:bd:cb:84:79:b5:8c:
                    14:f1:19:5d:09:aa:5e:25:0a:35:c1:e1:d7:eb:9d:
                    d6:82:d7:51:6c:42:1a:a8:f1:9e:bf:05:37:ef:0b:
                    79:96:8c:80:be:c1:82:99:67:c9:65:ef:51:87:0f:
                    2f:8f:df:e6:e8:72:97:88:25:5e:4a:ed:3b:e4:54:
                    e0:c6:4c:a6:3b:01:77:08:01:b3:f8:04:b1:6b:73:
                    c0:78:a8:28:7a:75:24:87:4e:48:57:6c:ed:9e:20:
                    1a:49:5e:60:67:47:88:d6:70:a2:87:a0:73:67:85:
                    19:07:af:4e:84:88:9d:05:7d:7e:b1:1f:1d:a2:cf:
                    14:b1:51:a5:d5:b7:f6:d7:48:d1:ad:ef:be:bf:ec:
                    55:48:e0:a1:1b:51:31:46:9b:e2:4e:d0:12:e2:d4:
                    18:8b:5d:cb:1c:ca:4a:38:f0:6a:76:c0:8d:cb:76:
                    1f:06:e2:c9:4c:e1:e6:1e:cd:0b:b0:66:f4:73:8c:
                    bd:d4:b4:be:83:a0:b6:36:61:08:75:3b:8d:bf:ea:
                    be:e9:5d:6c:f9:d6:19:56:1c:28:66:2e:12:15:d1:
                    be:bf:73:ab:9c:43:6e:1d:6c:d7:0c:c5:a4:73:36:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:46:98:25:94:D5:3F:4E:9F:D9:37:F8:F0:C1:EF:95:96:3D:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58e4dc97-a40d-44ef-a2a3-05f990aa85ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:9d:0b:0b:70:e8:8d:2a:d6:8e:e8:fa:b0:39:e5:36:3b:bc:
         84:d1:38:c1:05:50:94:f6:93:cd:65:6e:23:a4:2e:1b:67:75:
         68:f4:a2:0d:e1:a6:e2:09:a7:fc:38:f6:0c:cf:67:04:76:70:
         5c:01:23:84:12:55:fa:cb:c6:8b:10:83:36:d4:46:e8:40:40:
         59:08:b6:cb:79:2e:93:4b:74:a4:01:92:49:e0:7a:84:8f:e1:
         3e:72:2d:18:7c:22:cd:98:0c:08:24:be:53:e9:ac:fe:ff:c9:
         1f:df:7b:24:79:17:7f:06:36:a7:4c:e6:f9:45:68:66:6b:4f:
         b8:e9:96:23:5b:fe:75:bf:cc:69:ec:13:3e:d0:28:35:0e:72:
         90:ea:1a:21:7a:93:af:53:ed:a6:98:bf:0f:29:62:9a:ee:a6:
         10:1f:fd:56:21:70:af:2f:1a:51:b6:d7:1b:89:95:0a:a7:cd:
         2f:09:21:59:b2:34:61:b6:36:76:b4:73:83:a6:8d:ed:dd:be:
         32:cb:30:d3:aa:c5:56:e3:08:bb:4b:bd:e0:02:56:50:9d:ad:
         68:6e:20:f0:0a:ef:a4:ba:10:45:b1:51:cc:eb:cc:6d:d0:88:
         27:f7:b0:27:bc:6c:23:ef:87:7d:cd:05:23:23:a4:45:36:c6:
         af:7e:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:57 2025 by rpki-client