Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7cc866a-497a-45ae-b3c0-c4d69747ddc5.roa
File:                     e7cc866a-497a-45ae-b3c0-c4d69747ddc5.roa (raw, json)
Hash identifier:          O6fMXJxhPbQEbPTE89CGfXhwewQ2qVJckyhm8ZmdMUE=
Subject key identifier:   2E:A1:36:C2:FB:AE:F2:18:83:DB:B0:78:F3:ED:A8:0B:AA:3D:69:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04DACC4E635A54D57B2495FF8B825EC699008A91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7cc866a-497a-45ae-b3c0-c4d69747ddc5.roa
Signing time:             Wed 02 Jul 2025 00:41:59 +0000
ROA not before:           Wed 02 Jul 2025 00:41:59 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.190.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:da:cc:4e:63:5a:54:d5:7b:24:95:ff:8b:82:5e:c6:99:00:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:41:59 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=1dcaa7ead947f2ec4ca1c56542fac192bfea5f19758ed8b3a7c0edc47e42625b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:21:f4:7b:7c:04:05:b2:84:5a:ba:06:16:
                    00:8b:c8:9c:90:2b:c2:2c:16:31:e9:29:fc:ae:4d:
                    f8:81:4d:2e:c7:df:f5:09:19:34:ff:40:18:19:d9:
                    ea:6a:cd:18:e8:c1:25:b5:66:30:57:a1:c2:44:0d:
                    95:eb:1c:77:2d:c4:64:ba:eb:18:ff:55:d6:3f:c9:
                    10:39:46:ba:73:46:c2:90:0c:93:73:f2:39:3a:02:
                    59:82:29:f2:85:16:17:7d:84:30:e8:95:ca:85:1e:
                    b8:0c:f7:e7:30:57:32:5c:ce:ba:dc:c7:f2:01:97:
                    b3:97:ac:68:df:33:b7:2a:b8:a0:06:2f:00:9d:ea:
                    6b:c1:34:87:90:74:46:fd:e7:a6:cd:8f:68:b9:49:
                    3e:e1:c1:de:c0:a7:1a:23:eb:a5:35:18:71:c5:9d:
                    34:3e:3c:cc:99:6f:93:3f:b9:13:e7:f0:cd:f8:de:
                    b0:9b:18:13:b4:4f:42:8b:70:38:0f:3a:5e:e3:22:
                    95:79:30:21:41:c8:8d:7b:f8:46:c7:e7:32:e9:1a:
                    ba:e0:ca:52:fd:d7:8e:e2:71:1b:7b:bc:2c:a4:60:
                    a0:f5:d3:86:89:37:04:33:8b:d1:ce:81:29:b1:c3:
                    be:b8:a9:b5:b4:a1:41:4a:56:b8:d4:dd:19:88:6c:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:36:C2:FB:AE:F2:18:83:DB:B0:78:F3:ED:A8:0B:AA:3D:69:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7cc866a-497a-45ae-b3c0-c4d69747ddc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9a:cc:4c:47:e6:89:c5:44:16:63:58:36:10:eb:a9:2a:36:
         73:fd:12:f5:c0:20:ba:0b:84:7a:36:a9:f5:f0:ef:24:de:fb:
         54:da:5b:e1:99:2f:23:fe:7c:4a:e0:d9:6c:92:56:e5:0b:1d:
         8a:f4:1c:3d:c2:14:89:47:d5:8d:ca:9f:c3:da:22:12:2c:aa:
         e3:d0:3f:c5:6f:61:46:c5:8e:49:9a:75:2a:83:06:ea:ba:be:
         45:8f:54:57:f5:3b:ba:92:1e:65:69:25:d9:a0:2c:d6:83:57:
         dc:be:d6:f4:e9:d0:a9:9f:a4:2c:4f:2d:cd:58:6c:a8:28:d4:
         ac:0e:5d:a8:f5:8d:e5:62:28:d3:ca:86:7f:f4:f9:82:3c:6d:
         4e:88:e7:75:ef:59:54:f9:fe:f9:3a:18:26:45:c1:28:57:6c:
         00:40:fb:63:27:df:19:79:15:a9:cf:96:19:e5:4c:95:38:ee:
         77:dc:d4:c8:fb:68:0d:38:c7:f7:28:44:75:87:1e:17:7b:5c:
         7b:8d:9f:0b:89:bd:6d:e8:eb:bd:be:64:01:c4:7a:45:0b:89:
         3f:2a:de:de:3e:d9:c6:c7:8e:78:a0:49:b1:17:d1:79:35:9e:
         41:e5:b6:db:3e:bc:ff:50:c8:6f:64:f7:c2:b6:84:82:84:d3:
         e9:cd:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:15:15 2025 by rpki-client