Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa
File:                     f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa (raw, json)
Hash identifier:          hTawmYHwR8vaxDLV5m1nVqRILEpkIxfiZ9/hqpsPp2g=
Subject key identifier:   CA:53:CC:32:F1:D9:D4:6C:48:91:E0:5A:01:1E:E8:2F:EF:CC:0B:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1468C7BF3CA9D0B570A6D32DE2360D09D320A6DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa
Signing time:             Fri 18 Jul 2025 00:40:15 +0000
ROA not before:           Fri 18 Jul 2025 00:40:15 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:68:c7:bf:3c:a9:d0:b5:70:a6:d3:2d:e2:36:0d:09:d3:20:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:40:15 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=17b22ca35f640ba96d4666b8d4789af8691bed99bcce6bffeafd3eb77970c685, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:53:f1:eb:88:0b:4f:70:45:37:ba:5d:75:
                    14:52:95:6b:0e:ff:d5:64:13:a2:8b:1b:f4:a8:82:
                    14:f6:cd:9f:15:dd:65:67:2b:a5:4e:e7:c2:a0:cb:
                    0e:6f:32:30:a3:49:fd:43:bb:7f:c0:a7:7d:16:54:
                    47:fb:bc:6a:37:8c:43:f1:42:fc:54:57:6a:8c:0f:
                    58:f6:4d:a0:a7:97:ec:83:ee:ba:87:f3:0f:d0:93:
                    c2:af:89:6d:ac:66:32:62:3d:01:21:55:dc:f7:ed:
                    94:8d:21:10:fa:74:46:b1:2d:c7:4e:bf:e4:b5:53:
                    8e:9f:66:aa:9e:b4:5a:7c:f3:b3:35:6f:62:c5:99:
                    b6:12:63:eb:0b:bf:03:01:b1:f7:50:ab:68:13:da:
                    5a:5e:3e:7c:d2:54:11:00:20:9e:fa:9b:a7:ea:a4:
                    86:b5:21:f7:48:c7:97:22:d1:aa:23:b7:40:28:48:
                    e1:fb:24:54:15:c1:91:1c:15:6c:53:58:f9:2b:40:
                    69:6b:60:9b:1f:90:24:30:fe:c1:46:2d:ac:cb:9f:
                    7a:20:86:16:45:0a:fd:3f:e9:b4:e3:a3:8f:40:f0:
                    3b:86:50:95:63:e3:82:41:71:3b:57:d4:d1:d5:87:
                    35:99:f7:cf:88:e7:8f:f9:d7:a2:72:41:73:7e:8f:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:CC:32:F1:D9:D4:6C:48:91:E0:5A:01:1E:E8:2F:EF:CC:0B:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4e2a13f-7777-41ad-9df2-db48ea0d6fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:97:9e:f9:88:a3:ab:2a:dc:b4:5e:66:c3:26:93:7d:2f:fb:
         46:81:d8:b6:b0:f8:29:3f:0a:64:37:fb:c1:a4:5a:63:31:5c:
         89:eb:ff:33:03:7d:a1:71:05:1a:f0:72:ee:cf:70:e5:07:56:
         94:21:6f:32:5f:b6:1d:2a:44:11:9d:ef:c5:6a:38:5f:48:72:
         f6:1f:d0:b0:d2:cc:49:96:21:2b:b2:9d:0e:a9:07:12:0a:c4:
         29:c4:6b:44:fd:ba:20:e4:05:fb:3d:d0:9e:3c:cf:e8:58:57:
         2d:57:6c:2f:1a:8a:ff:21:18:fa:62:14:d8:d4:34:b9:35:b1:
         37:81:ea:1f:bc:3b:dc:e8:96:c6:44:a4:cc:9b:f5:c9:92:80:
         03:34:a0:06:59:79:24:ba:81:0b:81:f4:cc:64:af:a9:58:76:
         57:ce:42:3d:db:76:15:19:ca:5d:7e:c7:96:62:c7:f3:2c:38:
         22:f1:38:22:55:5d:fa:3f:d5:a2:9a:c6:05:b2:49:1b:1d:5a:
         02:26:0c:9f:f5:c9:24:09:4f:a3:ff:3d:1b:b9:c9:de:18:8e:
         df:86:8d:61:97:a8:96:86:03:f7:47:f4:b9:67:c8:fd:8b:dd:
         ec:18:b8:4b:f4:ca:37:01:09:64:8c:c3:95:38:fa:e0:f2:26:
         b4:f9:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:01 2025 by rpki-client