Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b3ce26-da26-4eb2-8435-d101f2cf8bcd.roa
File:                     e6b3ce26-da26-4eb2-8435-d101f2cf8bcd.roa (raw, json)
Hash identifier:          YpagXLxQPlBkzV1IFUoBhPdN/deKiG6IhlrPfUHft6o=
Subject key identifier:   70:84:CE:43:BF:AA:44:05:A0:AE:F7:A4:6E:15:D8:4E:4E:0B:A2:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63051643A18A0418797D13F51F4A9F3E51A105C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b3ce26-da26-4eb2-8435-d101f2cf8bcd.roa
Signing time:             Fri 11 Jul 2025 00:11:42 +0000
ROA not before:           Fri 11 Jul 2025 00:11:42 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        220.157.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:16:43:a1:8a:04:18:79:7d:13:f5:1f:4a:9f:3e:51:a1:05:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 00:11:42 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=500d7e150ff708d747325bbdccb46abe946b5af51ac585ea68d63deeff10b859, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:e1:9e:2e:85:b2:0b:6b:d9:88:f3:05:6d:
                    4e:6f:36:9d:f1:61:88:09:48:d2:8f:ef:8c:52:0d:
                    19:98:fc:e5:8e:37:1a:41:ab:94:e6:19:6f:bf:2f:
                    e6:6d:24:3e:1d:a2:40:e0:cb:d0:9b:e2:32:de:eb:
                    a2:27:dd:01:58:b9:45:06:c8:06:b3:72:fd:8b:02:
                    42:98:3a:88:67:5f:a2:49:aa:86:13:02:17:f8:11:
                    a4:60:00:b5:71:c1:17:20:d7:ea:fa:71:cd:20:54:
                    45:7d:a7:3c:2b:63:c5:aa:bd:dc:0c:db:78:54:f8:
                    1d:89:07:f2:1d:05:17:50:02:65:2f:99:9c:95:49:
                    67:bc:4f:ee:fb:97:57:3d:ab:fa:de:7a:7f:d4:a9:
                    31:ba:bf:16:ac:82:a4:87:6d:0b:ac:f2:a9:4c:70:
                    27:72:29:90:12:6f:aa:af:c7:eb:1d:e7:b9:fc:2b:
                    29:c1:ae:7f:a9:6d:64:27:d7:6c:3d:71:2e:43:dd:
                    4e:c0:e3:f6:23:29:62:36:16:de:dd:f1:0c:7d:ed:
                    4c:a4:9a:26:0d:25:c1:7a:93:69:06:0b:29:42:bf:
                    76:3a:65:0f:01:ce:13:0e:5c:56:51:98:73:1e:c1:
                    27:54:39:97:c8:b9:6d:4d:3b:8f:06:95:18:a2:d8:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:CE:43:BF:AA:44:05:A0:AE:F7:A4:6E:15:D8:4E:4E:0B:A2:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6b3ce26-da26-4eb2-8435-d101f2cf8bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.157.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:17:95:f8:78:75:c8:dd:4c:ae:83:ff:13:52:ef:c6:26:7c:
         a2:f4:80:68:e2:1d:ac:b2:1e:69:30:67:d0:07:45:35:1a:a2:
         28:20:23:86:e0:a1:74:17:00:83:70:94:8b:60:2a:21:11:3c:
         0f:ed:62:79:78:18:ea:d1:0e:9b:dd:1f:5e:99:cb:51:21:e7:
         d2:76:26:a2:3a:ed:2f:6f:b7:42:f5:95:4c:4a:00:9b:d5:f5:
         34:26:d4:ef:c1:0b:f9:b4:c5:de:42:5d:1c:5d:ea:b1:08:4e:
         60:b0:a3:3f:a9:68:58:45:4f:94:6f:7c:70:51:d5:06:d2:0e:
         11:c5:51:56:c6:03:23:0a:8d:bf:b1:48:29:ac:bf:ef:c1:54:
         b7:b2:0e:28:7d:09:7c:e5:6e:b7:23:77:2a:e5:c6:9c:81:5f:
         af:6b:65:3b:80:83:ce:d8:c4:9d:cb:75:e8:3c:49:10:39:ee:
         ce:e0:9e:a3:10:40:fb:01:d6:5d:a9:b5:25:f1:c5:24:a2:93:
         4c:30:05:19:c5:cc:3d:b9:ee:96:cd:5d:5f:7f:59:7a:85:0f:
         51:69:1e:46:45:f7:f9:cb:20:9e:f1:0d:8a:85:b4:0d:47:2f:
         86:3d:92:c3:c2:fe:c2:68:88:a2:26:d7:49:d4:da:17:93:a9:
         6d:11:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:37 2025 by rpki-client