Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/910b5e0f-d7de-4ca4-984f-9f46c030e4bb.roa
File:                     910b5e0f-d7de-4ca4-984f-9f46c030e4bb.roa (raw, json)
Hash identifier:          faQP4AcGqSnnFmrLaA7ITM4uTeDaQgFrCQiSrZLVJOk=
Subject key identifier:   AB:72:DB:71:95:32:12:8D:72:D9:3D:B8:67:38:F5:09:DB:83:54:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50F801D17CADA20CBD2AFBD3B4C08EC582A4A5A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/910b5e0f-d7de-4ca4-984f-9f46c030e4bb.roa
Signing time:             Fri 11 Jul 2025 00:31:13 +0000
ROA not before:           Fri 11 Jul 2025 00:31:13 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.202.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f8:01:d1:7c:ad:a2:0c:bd:2a:fb:d3:b4:c0:8e:c5:82:a4:a5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:31:13 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=a97ad54de4fd7f84e4d3212a772a81b42774a3c61d47eafeb30597b0a287d61a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:35:6b:4d:b1:5a:43:e7:dd:54:f5:56:3f:
                    9e:7a:8b:b8:ec:03:e0:30:b3:57:30:6d:e9:86:ef:
                    89:7f:11:48:b4:39:54:0e:c1:0a:fe:0d:2b:60:d3:
                    b9:f6:9c:63:97:56:5d:00:b6:d7:e6:10:b3:58:0f:
                    d2:e9:ad:85:88:79:b7:19:76:03:4f:e9:e1:4a:76:
                    15:f0:2d:28:fa:05:e3:3a:16:7c:25:98:10:33:c2:
                    99:89:e3:c4:e5:e8:2b:99:3a:be:34:2b:af:78:e9:
                    b1:66:5c:4d:96:06:51:e9:54:01:ba:9d:34:62:94:
                    88:42:37:0f:75:5e:b2:99:76:76:5f:f4:60:36:53:
                    8a:0a:32:f0:56:c9:e5:cc:a2:c8:b8:ed:fd:d1:9c:
                    f7:22:96:6b:d3:3d:ee:ae:e7:20:16:8c:9a:51:93:
                    21:d1:15:48:20:93:bc:06:45:02:c8:cc:8a:dd:97:
                    0e:1f:fa:86:3e:03:4b:25:9c:31:f3:fb:3e:4f:69:
                    4a:fd:0f:53:a5:df:a5:5b:10:30:ba:bb:b1:99:e1:
                    17:1a:08:ea:ff:51:b9:5b:e0:68:4f:53:47:fc:48:
                    31:60:c8:34:a3:fc:19:93:ce:88:d4:b5:2e:39:66:
                    ac:f3:a2:ea:38:b8:8c:b4:19:7f:47:4b:63:4c:ba:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:DB:71:95:32:12:8D:72:D9:3D:B8:67:38:F5:09:DB:83:54:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/910b5e0f-d7de-4ca4-984f-9f46c030e4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:fe:e4:77:32:14:f9:9c:a4:86:60:ac:56:ba:9c:cc:42:
         5c:db:c6:9e:0c:02:c3:d0:e5:f7:70:51:8f:57:39:04:6e:78:
         73:b5:85:4b:2f:c0:0f:45:34:44:78:60:6c:ee:f9:38:a5:75:
         a4:8d:11:b4:91:2b:dd:e8:78:7d:97:f2:a7:d4:d0:79:68:a3:
         28:21:72:55:53:be:0e:ed:6d:22:66:84:28:a6:0f:09:14:ce:
         f0:8c:18:ca:91:90:93:aa:d4:2e:dd:19:d0:73:81:49:01:d3:
         2d:a8:02:e0:0f:b3:77:9d:77:f4:4f:e6:9f:11:1e:16:3a:32:
         b1:b2:36:09:6c:c3:97:fc:01:3a:cc:2a:92:a2:4a:b1:9f:bd:
         dd:0f:c3:68:9a:e7:e2:ea:42:af:6f:ad:9d:3d:bf:28:12:2e:
         ef:86:23:58:2c:77:be:22:e3:65:50:96:81:87:9c:71:79:2f:
         72:13:7f:35:94:f2:84:07:31:12:99:de:e0:5f:2f:79:34:f5:
         89:e2:b6:c3:df:40:46:d4:08:e1:b6:4b:16:bb:3d:59:58:4c:
         54:fe:e3:cc:0f:dd:57:d3:a5:26:85:c4:d7:30:c2:32:43:65:
         d6:d8:16:54:6c:a2:db:45:f5:f5:1a:37:28:5b:5d:98:b3:02:
         5c:21:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:10 2025 by rpki-client