Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa
File:                     d9906b42-5c34-487d-817e-6eea6796d971.roa (raw, json)
Hash identifier:          gjPwVXG8uTgO7n+N1+ujo7fv7OCd+gTQg1fLHqRB7rU=
Subject key identifier:   E0:81:51:2A:E6:9E:0B:81:46:12:A2:10:8E:EF:D3:0F:17:3B:81:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33F68FFAC2E59905F26AD37D6F7ACF16468671F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa
Signing time:             Fri 18 Jul 2025 00:10:14 +0000
ROA not before:           Fri 18 Jul 2025 00:10:14 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.73.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f6:8f:fa:c2:e5:99:05:f2:6a:d3:7d:6f:7a:cf:16:46:86:71:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:10:14 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=e0a3b69b6062b0e1abb63125bd8e644e67f8016b451ae28bf917f1ea02fb624f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:fc:ca:59:72:30:c1:ec:04:0d:33:f8:08:
                    74:dc:b0:34:32:96:a2:b3:9e:e1:09:87:a1:d0:17:
                    cb:8e:5e:42:48:b3:62:bf:0b:d8:b2:ee:41:c6:bb:
                    7e:a3:35:5c:dd:20:bc:3d:cb:d5:b9:a5:99:26:c9:
                    bb:13:ad:ea:7d:52:b4:9f:47:3a:6b:f8:f5:e1:59:
                    13:b5:26:af:a9:33:8c:b8:d0:bd:cb:ea:86:cd:68:
                    3f:5d:98:e2:17:49:59:99:ae:16:31:a3:72:d8:56:
                    6c:11:d2:63:27:d4:ef:6e:9b:e1:e8:5f:80:ca:db:
                    41:a6:01:84:a3:2b:7a:a3:e6:af:90:2d:53:3d:48:
                    eb:ad:80:5a:7a:1b:0a:97:ae:7a:da:f5:a3:65:84:
                    ef:6a:c0:79:92:58:c4:d7:d1:aa:a9:78:72:84:27:
                    fc:02:c1:42:75:73:cd:b9:9c:5c:12:c7:57:a1:6a:
                    d7:09:26:f9:7e:64:3f:ef:04:ee:d8:49:0e:01:4d:
                    0c:1f:85:6a:20:95:fb:84:ff:84:26:09:66:63:f3:
                    c0:40:a6:d8:5c:95:9f:d7:c2:6f:6a:b1:39:e9:76:
                    52:70:5a:00:ac:0b:69:8f:3e:e7:5e:27:42:c2:9e:
                    4e:dc:41:d5:c4:b9:aa:9c:0a:92:19:5b:6f:23:b2:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:51:2A:E6:9E:0B:81:46:12:A2:10:8E:EF:D3:0F:17:3B:81:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:09:3f:29:29:6e:53:7e:67:47:74:77:25:c2:a2:6f:3e:
         b5:0c:a7:6a:2c:d9:ec:5e:d8:11:26:f2:f2:1e:40:b5:e3:d2:
         9f:60:e1:1f:69:2e:90:ee:6d:db:b4:d4:c1:1b:98:06:7c:0b:
         a3:7b:46:e7:84:59:3f:2f:dd:f1:3f:3f:f9:cc:ce:f3:82:bb:
         a0:a4:07:78:91:bb:b3:9e:97:b2:24:84:0c:0a:73:fa:b8:54:
         44:e4:c9:20:89:12:72:ef:5c:68:1d:8e:9a:b4:47:60:66:0e:
         87:8e:98:3e:8e:29:ee:96:c8:39:28:dc:d3:91:a1:fc:44:1f:
         09:25:2a:b9:2c:f5:70:8f:c2:4e:93:cb:86:ad:0c:de:3a:c2:
         a5:33:dd:0c:6d:28:f6:f9:23:9c:a9:b4:4c:d5:2c:aa:93:fa:
         ab:bb:b5:b8:49:aa:d5:94:5c:05:d0:df:43:84:81:3d:af:f7:
         61:ba:de:71:ff:55:b3:90:4f:40:83:27:09:c7:40:51:c2:97:
         db:bf:c7:c8:ec:fe:57:28:ea:b5:f1:a7:7e:12:57:ff:c9:08:
         d8:ab:41:79:b6:97:1c:69:03:16:ad:b2:9a:f7:29:af:27:a1:
         c4:5d:2e:9e:04:d0:ac:da:e7:69:2b:92:23:1b:e8:72:4c:56:
         73:e8:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:12:59 2025 by rpki-client