Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
File:                     07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa (raw, json)
Hash identifier:          nhn1LoWeiF8WAuc6nyqETUvsIjj/bAoJWwDKssIxNqg=
Subject key identifier:   52:E7:1D:8B:E5:0A:27:8E:DE:6D:FF:F8:2D:1A:B6:D2:35:E8:5D:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35ADF99E547FC87EE1DDFD49709579660797C035
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa
Signing time:             Sat 30 Aug 2025 00:31:55 +0000
ROA not before:           Sat 30 Aug 2025 00:31:55 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:f9:9e:54:7f:c8:7e:e1:dd:fd:49:70:95:79:66:07:97:c0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:31:55 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=155e32a8aa7bb9a60a9cea5d9555b6c102e29a20092505a18dd7e6777a4616f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:30:48:8e:80:4c:f0:a1:a6:ea:93:60:c3:
                    b9:50:2d:d3:14:f6:0a:10:52:4d:c2:9d:82:47:f4:
                    bf:2e:7b:33:e3:22:79:7e:5e:b2:85:2b:59:7f:71:
                    af:b1:91:09:a5:2d:6d:06:63:ba:48:e2:23:0a:34:
                    fe:b0:7f:20:4e:f5:47:5d:55:ce:47:2d:39:9e:78:
                    f5:ab:04:7a:8f:95:02:fe:e0:59:e7:90:7a:fe:e0:
                    81:3e:df:44:48:9d:63:13:9c:2b:79:46:3e:48:69:
                    88:76:41:96:30:2d:73:c3:4f:ee:13:c0:8d:f6:74:
                    88:96:05:60:ce:43:69:18:44:43:cb:f5:b4:99:7f:
                    50:5a:8f:b8:c8:32:46:66:08:7f:a4:f1:cb:10:e5:
                    00:72:05:c0:16:96:98:ad:19:15:47:86:ac:8c:29:
                    db:cc:2b:2c:d3:4d:80:4f:21:db:2b:b1:43:75:24:
                    16:d4:44:8a:a5:ac:d9:c6:cb:75:1f:24:b3:8f:3b:
                    4f:c4:bd:e9:b6:1c:86:f6:43:1a:bf:88:de:a3:ba:
                    87:84:89:24:d9:8b:87:9b:a5:a7:7b:6e:4f:ba:54:
                    92:87:24:f8:7c:28:fe:c9:2e:a9:77:33:2d:f7:8a:
                    6f:b8:aa:b9:f2:7f:b6:64:12:42:96:b5:3f:35:ec:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:1D:8B:E5:0A:27:8E:DE:6D:FF:F8:2D:1A:B6:D2:35:E8:5D:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07362990-fdea-4902-8ba4-3d2db0e1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:27:ec:e1:9f:ce:06:37:fe:9d:e0:94:f1:8e:9d:e2:dd:
         67:4e:42:b0:70:37:9a:6f:4b:d7:21:b7:66:af:94:e8:d4:22:
         da:0e:ea:e9:19:d7:24:53:df:99:56:6b:6f:03:bb:a6:eb:46:
         9c:1e:db:2c:e7:ab:b6:03:98:b2:27:e8:71:6b:94:b4:e0:e6:
         a5:5a:6a:2b:ca:1e:fa:39:3f:a9:2a:37:55:50:d1:ab:5d:f9:
         e5:be:c8:74:08:45:1c:96:38:3f:ab:96:d1:57:25:70:a4:63:
         42:0f:01:9a:90:10:58:8a:5f:cf:15:f4:db:bb:cf:73:9a:7a:
         9e:68:6d:95:63:0c:ca:b8:d7:d4:6f:1d:11:9e:22:d9:cb:19:
         0d:7f:46:84:d5:36:90:98:44:8c:44:95:cb:22:47:84:15:67:
         bc:cf:49:a3:36:77:d5:a5:be:97:7a:74:4b:37:15:7f:6d:af:
         27:06:b4:c7:eb:dc:bd:76:93:c7:0c:eb:f5:e1:91:32:18:9b:
         8f:7c:77:53:e9:f4:6d:30:9c:31:dd:4c:23:3a:ac:e1:ed:f6:
         cc:8e:09:f3:1c:08:a4:a9:de:04:a0:52:4e:7d:b3:ff:93:53:
         02:a2:9a:9b:46:93:e3:91:59:d7:85:d5:7c:54:09:c3:3c:9c:
         00:be:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:52 2025 by rpki-client