Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa
File:                     75da3273-1141-407e-8be6-2c12ada7102b.roa (raw, json)
Hash identifier:          VszPeAOI4nOzWGY6FPSTp3mnu10gDro8MhVNPTZT4HY=
Subject key identifier:   6D:DC:13:F8:5D:57:6C:54:C7:21:BB:92:69:EC:9E:D5:67:1F:CB:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D823BC241BF1F269985A2E1C15A38A309F27C3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa
Signing time:             Fri 11 Jul 2025 00:50:25 +0000
ROA not before:           Fri 11 Jul 2025 00:50:25 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        82.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:3b:c2:41:bf:1f:26:99:85:a2:e1:c1:5a:38:a3:09:f2:7c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:50:25 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=693c0569236e0b9cf3b3cc65b84a8d721fd07a23ec1f8dba9d76ccc16efa70df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:90:cb:67:22:c5:f6:46:af:ad:07:8e:19:
                    bb:14:76:bb:33:40:e9:97:89:2a:5b:ac:03:fd:0e:
                    f3:2e:8c:8b:50:d0:4e:8c:a0:47:ea:69:29:1f:98:
                    ce:99:4c:a5:e0:db:53:9f:54:0d:3a:33:3b:ef:ba:
                    d6:71:45:98:be:97:4e:3d:a3:02:a3:00:6f:a4:e8:
                    74:e8:66:da:bf:24:d0:59:3f:14:a7:79:9a:ed:50:
                    b0:af:b7:be:ca:49:a6:0a:12:f2:51:17:11:07:9a:
                    9c:97:df:96:af:4c:a7:9f:1f:6a:cf:10:6f:97:3e:
                    18:b6:79:98:96:6d:dd:47:88:08:12:c7:14:f8:7e:
                    21:94:8e:f5:88:56:3c:5b:9d:e0:4d:5a:2d:83:25:
                    ad:63:c3:f4:e5:56:32:78:2d:db:dd:fd:66:d7:64:
                    b2:ac:5d:a9:4d:e2:b4:eb:b8:ee:15:eb:ce:dd:e0:
                    67:74:d8:73:7a:08:5e:bc:3c:c9:c3:24:90:f3:11:
                    87:84:28:6b:52:0f:60:42:0d:33:c4:1e:f7:58:de:
                    3d:b9:65:d0:26:49:03:bd:df:6b:60:7e:bc:9b:b9:
                    e9:5c:05:7c:d8:5c:d1:8a:0a:b2:0c:f1:35:9b:f1:
                    c4:90:dd:9f:9a:a6:9b:47:b3:93:48:e7:03:85:93:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DC:13:F8:5D:57:6C:54:C7:21:BB:92:69:EC:9E:D5:67:1F:CB:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75da3273-1141-407e-8be6-2c12ada7102b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:78:c8:85:66:35:79:27:02:42:84:b0:21:18:53:fb:2c:
         c3:c4:bd:fc:96:94:ae:ba:8e:a9:fa:d2:52:87:33:8c:e2:3f:
         fe:a5:cf:e8:d9:6f:e3:c9:03:58:33:75:93:a4:d4:d3:6f:23:
         64:cc:a0:bb:98:60:12:38:f2:5b:59:5d:df:7f:2e:38:e4:51:
         ee:97:5e:bf:b1:5f:06:5f:49:11:a6:07:55:b5:53:61:07:ae:
         f6:61:22:34:12:47:22:99:2b:68:03:64:00:f5:f4:49:4f:ad:
         55:5b:9a:a9:33:23:02:31:72:5d:78:29:d3:27:59:91:0f:8a:
         8a:db:a2:29:52:45:2e:36:d8:ea:db:2e:cf:9f:06:9d:c8:4e:
         5a:32:1c:69:94:b3:6a:6c:95:dd:13:55:ef:61:6d:01:5e:a2:
         33:18:c0:81:a0:88:ca:b4:4b:0e:c8:ab:0b:c5:12:1b:dd:72:
         7c:0c:45:51:61:47:5f:f9:e4:e1:26:a9:87:b2:02:6b:fa:9f:
         fd:d7:29:53:22:42:f0:3f:09:fe:75:7d:a3:aa:f5:81:5d:96:
         f3:af:e6:f5:91:a2:9e:c0:fc:20:f5:a1:7e:0d:65:82:ae:01:
         d3:b3:1c:30:34:eb:3b:7a:1e:f7:83:70:5e:42:69:ee:f5:a9:
         35:49:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:21:22 2025 by rpki-client