Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
File:                     e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json)
Hash identifier:          JB6AujXpM9C40PdcDDCoXN4uUzQyflmb+fXxz54QIKI=
Subject key identifier:   69:B2:87:10:1E:AB:72:D1:DC:DC:BD:0C:B2:E8:4F:CE:CA:13:B6:9E
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       434F1ED8BB4439ED8E986D51EB7F6861C61DC35E
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
Signing time:             Tue 08 Jul 2025 17:40:15 +0000
ROA not before:           Tue 08 Jul 2025 17:40:15 +0000
ROA not after:            Tue 12 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:1e:d8:bb:44:39:ed:8e:98:6d:51:eb:7f:68:61:c6:1d:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jul  8 17:40:15 2025 GMT
            Not After : Aug 12 23:59:59 2025 GMT
        Subject: serialNumber=a8e0c53a3d5da170c8bd8afaf3bcd8110e94a93862258ec2bb302652a0a6d965, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:b4:04:9d:c0:94:f7:28:e1:1c:0a:01:9f:
                    95:33:8f:fa:0a:61:16:ea:4d:c7:88:b5:68:49:51:
                    8f:3c:79:ff:ad:8d:d2:62:f8:dc:92:ea:d3:65:a9:
                    ae:55:94:c8:dd:2b:30:f1:27:fa:14:bd:66:0b:cb:
                    ad:5a:d3:66:4e:fe:8a:79:0e:ca:5a:19:2b:ad:9b:
                    d9:9b:25:f4:99:c2:c0:bf:50:af:aa:90:75:84:ab:
                    24:43:65:0f:7c:97:8f:ec:ec:9c:8f:b8:61:ce:7b:
                    2f:6e:92:6f:39:32:c3:16:59:ff:f8:6d:59:a4:02:
                    5c:bf:31:eb:31:6a:c7:cd:a1:b2:f2:5d:6f:de:44:
                    75:18:10:36:4c:9b:39:72:de:92:9b:a0:0d:b6:21:
                    bb:bd:16:f5:a4:95:99:f0:c1:97:dd:d9:c3:51:ba:
                    7a:d6:c6:3d:5c:33:43:e3:73:51:35:e8:8e:87:06:
                    8d:0d:49:6a:f9:02:ef:fc:6d:9c:e5:9f:cd:f1:da:
                    62:4c:6c:f8:ce:0d:78:8a:48:da:ad:c9:0a:06:79:
                    4d:b7:5a:ca:6d:7d:37:25:ec:4d:0e:a9:61:1f:56:
                    8f:e4:f6:97:ba:c8:7b:97:4b:8c:0c:e1:0b:74:1b:
                    fc:f0:67:32:46:52:c9:f6:ff:dd:10:f7:f8:aa:93:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B2:87:10:1E:AB:72:D1:DC:DC:BD:0C:B2:E8:4F:CE:CA:13:B6:9E
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:fd:ce:ca:cd:34:04:e7:b3:37:8f:de:bd:fc:de:d8:39:ff:
         db:c7:f6:83:e1:bd:6e:3f:b8:c7:1c:72:20:62:02:f1:de:21:
         ec:eb:82:44:78:e4:f1:5d:08:fc:a9:42:15:38:73:71:cd:cf:
         d6:bd:af:d1:f1:b4:10:7e:61:e6:f6:b3:d4:ef:85:6a:f5:96:
         d7:fa:67:33:c5:4f:ed:ad:a4:80:d9:1a:f8:6d:86:43:16:2b:
         5b:38:47:e0:2e:a1:01:6c:ad:56:a7:e4:15:ab:d1:a9:fc:c0:
         cb:91:36:a4:8c:96:d9:61:82:91:31:99:0c:e3:db:28:81:59:
         4e:23:3b:91:95:f8:ae:fc:1c:24:08:59:f3:94:8f:26:57:a2:
         83:0c:46:09:a9:71:7e:08:a5:c2:53:75:1f:ef:80:48:4d:57:
         33:54:48:c8:64:78:32:1f:2a:d6:12:8e:c1:c0:b0:14:88:9d:
         3a:25:a1:f4:76:48:0b:c8:64:69:d0:c9:34:16:8a:bc:a1:01:
         32:95:88:9c:06:1b:1b:3b:ce:43:f2:e1:1e:16:e4:d3:a3:d1:
         86:5e:4e:36:db:93:be:c9:0b:33:d0:4c:6f:c7:68:31:75:ec:
         bf:37:90:96:ee:ba:71:8d:14:68:13:36:eb:0e:11:db:3f:8d:
         7a:0d:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:15 2025 by rpki-client