Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa
File:                     c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa (raw, json)
Hash identifier:          Qsh7S/AW9GaPDab/6IA+4en4r9wYHXNk6JvbK/mHTT0=
Subject key identifier:   E8:1F:C0:44:BC:CB:54:C8:ED:10:9F:D8:D7:EB:8B:2C:26:B5:E3:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FFB97892640A3504CE193CE5F0F8184FE713C8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa
Signing time:             Wed 02 Jul 2025 00:21:03 +0000
ROA not before:           Wed 02 Jul 2025 00:21:03 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        182.236.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fb:97:89:26:40:a3:50:4c:e1:93:ce:5f:0f:81:84:fe:71:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:21:03 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=929f098338059b27f4865126dd676959a03a7703b9ba8f5f5bd51e50d55d2ab0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:02:18:24:7d:89:3d:63:a5:cb:76:63:39:
                    94:cb:31:dd:9b:ea:83:73:75:eb:b1:41:2a:cf:67:
                    6a:09:f5:4c:1a:2e:b6:0b:9a:91:df:72:99:08:b9:
                    8e:f0:5b:bd:8c:01:f5:9f:f6:87:de:8e:e6:d2:57:
                    e7:d7:af:ee:4e:51:9b:24:8d:62:95:52:d2:20:d0:
                    44:f1:e8:63:92:35:a7:11:2a:b4:2e:a7:be:01:92:
                    de:4f:d0:1c:0e:1d:fb:76:df:2c:f2:03:76:85:73:
                    6b:44:e0:52:3d:df:7c:b0:08:40:ba:37:cc:47:be:
                    a9:dc:77:d0:53:7a:c9:75:8e:46:b3:cb:0e:b3:c1:
                    55:d3:ce:86:bb:88:d8:4f:e0:c3:8a:23:e8:65:1e:
                    fc:c0:1b:f6:4f:83:62:e8:03:7a:3e:cd:f3:b5:60:
                    7c:30:72:8d:7c:d4:87:c6:b1:32:c2:63:61:d7:cd:
                    99:12:b6:0f:fe:9f:df:bf:42:fe:08:17:6e:f2:94:
                    ff:08:e7:7a:14:6e:95:5b:1e:3b:df:55:52:49:3f:
                    b3:8c:ff:83:59:b3:2f:92:e4:e4:99:31:32:6f:fa:
                    f0:43:f5:b2:44:e4:b1:bc:9c:b3:72:b1:a6:43:e2:
                    98:f5:50:ec:5f:07:4f:cf:1b:c1:2e:9f:7b:37:47:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1F:C0:44:BC:CB:54:C8:ED:10:9F:D8:D7:EB:8B:2C:26:B5:E3:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:40:08:11:4f:ea:8b:98:36:82:a2:6e:24:39:c2:b1:bf:30:
         0d:b7:70:c5:b3:17:76:2b:3e:ca:e1:f2:b4:60:91:a8:b9:aa:
         c3:00:ce:c2:08:bf:5e:1c:58:a8:e8:33:6a:73:a1:6d:83:b0:
         77:14:1a:27:b9:03:b9:34:f2:13:2b:98:17:af:23:5d:63:9a:
         cf:56:4a:44:11:58:7f:16:d9:11:fc:41:30:69:30:7a:82:98:
         ea:db:65:dc:c4:a5:de:2d:d8:df:9a:f1:4e:bc:49:ac:90:50:
         c3:06:b9:a2:71:6d:4f:18:41:f0:57:69:6b:a2:48:4d:e5:c6:
         c9:12:d9:c7:0b:02:b8:2e:70:72:f9:5a:76:c7:27:38:65:09:
         7a:e3:77:f9:6c:bb:17:80:32:13:b7:e4:9c:02:15:04:73:58:
         60:1d:59:ad:e1:cd:5d:7f:b3:1b:16:eb:87:05:79:be:3b:3a:
         77:c2:41:49:02:94:d5:0a:e4:a9:83:d9:0f:04:84:31:cd:00:
         ef:f5:c6:e9:e1:ac:28:a0:3f:6a:d1:8e:15:83:a2:c8:2d:ad:
         ef:b7:7a:51:83:05:1f:a0:1d:b0:b3:78:61:70:63:aa:b5:36:
         f3:93:e6:7e:12:79:89:81:18:34:f7:8d:de:97:59:8b:4d:c9:
         c3:fa:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:04 2025 by rpki-client