Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa
File:                     d6153df2-9363-4807-8c81-35df18551a61.roa (raw, json)
Hash identifier:          71HNWm3CmPtGo2ZhV8D13i4DUFfE8oEWUXT36xMyW6o=
Subject key identifier:   57:AD:47:D9:BE:CD:A0:4B:5F:9E:29:5C:91:2C:62:07:A1:B8:01:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68E2A0624387CD9128CBCD85EBB7F1DC9448795C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa
Signing time:             Wed 09 Jul 2025 00:51:53 +0000
ROA not before:           Wed 09 Jul 2025 00:51:53 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.112.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e2:a0:62:43:87:cd:91:28:cb:cd:85:eb:b7:f1:dc:94:48:79:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  9 00:51:53 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=597ac721d2ac9af0e9fddcaccaa719dd6550e5b30fe529fc0dde9bc926cccc33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:33:49:48:a4:7c:38:65:14:27:4d:0d:44:
                    e5:07:99:6c:33:5a:23:2d:bc:b3:9b:db:e9:49:f6:
                    2a:cb:bf:4d:32:b9:52:7f:20:ec:81:23:53:61:22:
                    31:e9:36:d8:4e:be:87:b2:2c:79:4d:68:cd:3a:cc:
                    69:e2:fd:7d:a4:64:e7:01:ac:1b:ef:2c:27:46:82:
                    b5:92:f5:be:d1:37:3a:d9:53:43:61:46:0d:66:86:
                    1e:05:d3:bc:24:82:9e:12:21:94:3b:ae:ef:c8:c2:
                    72:df:5c:e8:32:19:d6:5d:c2:39:54:a3:bb:a0:38:
                    57:98:a5:a5:b2:b6:66:90:f3:25:3a:5e:5f:48:40:
                    74:b7:3e:f7:e0:43:2b:03:70:ff:15:7e:d3:db:6c:
                    0b:6a:d9:d5:f5:d0:15:93:a2:c7:fd:77:39:ec:85:
                    41:ca:73:d8:2f:83:0e:7c:d6:c6:48:ac:56:17:ef:
                    28:1b:26:66:ea:cd:b1:af:70:0d:6d:cd:02:2c:11:
                    d9:24:b5:85:17:4b:b0:f9:57:b4:d1:6c:18:00:5f:
                    99:7e:e2:4c:cd:fc:60:e4:7c:aa:a9:60:1f:f9:aa:
                    0c:09:b7:9c:28:8a:94:f2:a8:66:51:e6:9f:55:1c:
                    58:67:c1:f8:16:e3:cb:b3:94:57:d9:70:b4:d1:90:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:47:D9:BE:CD:A0:4B:5F:9E:29:5C:91:2C:62:07:A1:B8:01:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:5d:4f:8e:b0:19:7a:26:7b:7c:b7:23:4d:7a:91:9a:4a:
         b0:c3:60:6b:72:24:26:cb:13:e4:ef:0e:bb:0d:07:8a:c1:ec:
         ce:61:87:4e:41:3a:9f:52:3c:72:43:d1:49:d0:18:c5:b9:9c:
         bc:ee:5d:26:47:cb:b7:84:57:d1:6d:b0:e6:bb:41:cc:5e:34:
         2b:00:9a:64:86:60:86:7f:12:9c:43:be:d0:c7:73:78:aa:1c:
         b4:d2:f7:cc:cb:0c:27:ff:f4:70:98:8a:b6:38:f6:a1:fb:bf:
         70:f8:c6:31:d8:e0:68:13:b0:65:27:71:5d:ff:2b:ba:f1:84:
         00:67:86:e8:fd:eb:36:b8:cd:b4:4a:4b:b1:65:be:25:94:e1:
         1f:51:f3:50:c2:b2:ec:2d:96:cc:08:11:32:2a:5c:ce:39:f9:
         e9:90:c9:9c:d2:dc:92:a6:31:76:d1:10:66:18:96:8a:39:7d:
         c9:90:62:6f:e6:1d:37:fe:d6:01:0b:f2:7e:7e:9a:59:7b:ce:
         14:1e:b8:ae:e0:16:83:c7:df:f3:46:5c:45:92:7c:06:a3:9f:
         fd:6b:0f:c0:62:b1:da:c6:29:3c:9a:c1:e1:e7:bc:47:bb:58:
         03:85:72:c4:33:da:2e:60:84:b4:82:ee:d8:5d:ad:8c:63:62:
         03:95:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:14:08 2025 by rpki-client