Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa
File:                     e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa (raw, json)
Hash identifier:          7G3QXHr2QvQ42GygrYq3kJNVfe6Y8Rf+wsXj0rBzpVg=
Subject key identifier:   C2:55:40:B1:4C:95:EE:C8:25:B7:4A:B9:4C:59:54:15:7B:10:5C:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7459020B75B2FC4A2D86F070A7F8A3CC2C14B282
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa
Signing time:             Wed 09 Jul 2025 00:20:46 +0000
ROA not before:           Wed 09 Jul 2025 00:20:46 +0000
ROA not after:            Wed 13 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:59:02:0b:75:b2:fc:4a:2d:86:f0:70:a7:f8:a3:cc:2c:14:b2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  9 00:20:46 2025 GMT
            Not After : Aug 13 23:59:59 2025 GMT
        Subject: serialNumber=103d9da7e8dc9dfd79ed6bc52514c5db88c66771542c7a04b971853f0436d8a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:5a:0c:e4:a5:51:9e:79:86:fb:d0:9b:39:
                    f7:4a:73:8f:89:79:67:2f:e5:1d:4a:29:01:aa:3b:
                    7a:69:54:d3:5e:75:3a:d7:dd:6d:77:46:9c:82:d5:
                    94:8e:bc:04:03:bd:e6:b7:82:f0:6d:08:1a:64:40:
                    15:b3:b1:83:92:93:9b:02:d5:2c:fa:b8:98:f4:30:
                    a6:15:f1:2e:06:97:d2:2f:d3:b1:82:ac:ec:49:bf:
                    6f:f9:0b:33:b7:1c:4e:c6:b7:de:94:5e:94:b1:fa:
                    27:ee:4f:b7:e5:59:76:3b:49:2d:d4:81:e1:e7:d1:
                    fe:b9:e8:e6:49:13:43:2f:4b:68:30:50:ac:01:7b:
                    59:47:7e:4e:0f:5d:ed:d6:db:85:20:be:b2:54:8b:
                    28:29:ea:4d:c0:f6:56:e0:89:01:48:0c:e7:8d:5d:
                    f5:af:b4:5d:ed:cf:72:93:a8:32:75:21:71:84:63:
                    43:85:0e:2b:3a:83:9d:01:ba:f3:6e:0f:74:52:59:
                    08:0d:8b:84:af:5d:f4:7c:1f:94:54:dd:2c:c6:c3:
                    ed:d3:95:8b:95:9c:eb:1c:3f:3e:7e:83:98:b4:82:
                    14:8d:fb:26:1d:32:fe:17:23:15:bb:18:1e:26:e2:
                    34:63:f2:ee:46:00:f4:77:d6:5a:f2:ca:e5:86:93:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:40:B1:4C:95:EE:C8:25:B7:4A:B9:4C:59:54:15:7B:10:5C:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9dbfe7a-efda-4ffb-a0bd-f69d913f21d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:5d:94:a7:31:f8:fb:7a:df:8f:bc:a1:48:a7:fd:c9:a5:
         0b:64:06:c8:e6:04:4a:c0:31:7c:c7:17:9a:18:6b:8b:0b:cf:
         24:a7:16:b7:a3:44:89:03:c3:52:66:99:80:96:d6:5c:25:12:
         0e:2c:44:a8:a4:e8:09:17:06:2e:d4:55:88:12:30:ca:a2:d7:
         57:8a:bd:e0:f2:b6:0e:a2:22:19:3c:10:33:5f:9a:df:6a:09:
         7d:5e:6c:19:1b:90:2f:ba:6c:29:fe:9b:41:10:f3:83:2e:89:
         2e:19:26:1e:df:b8:15:3c:14:91:52:da:f9:6d:e7:72:e1:53:
         38:57:5b:8e:5e:db:c6:79:02:4f:96:72:d0:47:b4:89:f8:72:
         f2:24:c7:62:af:63:01:e0:4b:01:07:97:30:d5:ed:15:73:32:
         b0:80:74:d8:ec:74:52:ae:34:38:97:13:f2:6d:df:95:ea:57:
         74:87:d1:8d:b9:19:e8:bc:95:d0:51:c9:fa:f6:52:19:99:9c:
         94:02:af:3e:9c:b9:0f:91:4c:18:bf:f6:c3:92:a4:f2:f9:c1:
         1f:1d:ec:17:8d:c3:77:01:07:b4:16:2e:65:26:74:2c:d5:57:
         3e:fb:ab:00:a7:4c:af:9a:2e:21:94:ab:36:43:24:aa:f9:87:
         f9:b8:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:35 2025 by rpki-client