Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa
File:                     145d5432-1426-4a63-9bed-c2784088be52.roa (raw, json)
Hash identifier:          F8vYErfTHe1C4+cHF2u3nIVqiX552pBwD+uIuI+tDo4=
Subject key identifier:   B2:6A:6A:5E:9E:AC:C3:96:65:01:94:50:9B:AE:D5:21:4D:0E:DF:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54C3F0C1B5A66AD1A48D3B352FCE6952E6F2602F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa
Signing time:             Sat 06 Sep 2025 00:40:57 +0000
ROA not before:           Sat 06 Sep 2025 00:40:57 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.37.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c3:f0:c1:b5:a6:6a:d1:a4:8d:3b:35:2f:ce:69:52:e6:f2:60:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:40:57 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=8c2c46be2a9eb2151db8b7616a0f6432e92339bebfbffb841db1066b2f7a9b67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:68:a7:cb:ff:77:d2:6a:6e:2e:9d:3b:b9:
                    f1:bf:80:f4:73:b4:7b:77:c4:6b:92:d4:1f:92:ef:
                    ff:98:22:5c:12:31:f3:12:1d:db:aa:f2:2b:c4:22:
                    dd:3f:ec:0b:97:04:8f:cc:e3:b6:1d:26:b7:2b:57:
                    9a:78:e9:d4:a8:f6:5a:6f:61:c3:45:d0:e5:88:e2:
                    b9:62:76:48:2f:39:c1:af:54:36:0f:48:6f:44:3f:
                    50:28:f9:4c:a5:78:8f:34:f0:8c:63:e6:8e:fd:ad:
                    e2:e7:d8:83:97:b7:8a:5a:2a:23:e8:1e:89:a4:af:
                    a4:ea:81:60:94:6b:30:b9:80:0d:ef:f7:b5:56:0d:
                    62:9c:59:f5:08:51:36:2f:a6:d2:8e:b7:7e:02:c0:
                    fa:eb:2d:dc:54:fe:aa:87:82:5d:f5:ea:9b:62:c7:
                    9c:b2:5a:da:00:1e:e6:ac:30:9d:4d:9e:1d:a3:9c:
                    40:fe:07:1b:4c:23:34:c8:77:7e:e4:ca:b0:8b:e2:
                    95:25:e5:47:73:60:02:91:67:17:a8:4b:9d:a9:8c:
                    eb:16:4b:a8:02:32:0e:1c:c1:46:c1:79:25:32:f8:
                    71:a9:cc:d1:6c:6c:8c:1f:c6:f4:73:1e:b1:ad:17:
                    2e:35:16:4a:8e:67:8a:24:63:97:40:64:d1:82:6f:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:6A:5E:9E:AC:C3:96:65:01:94:50:9B:AE:D5:21:4D:0E:DF:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:00:37:f5:b5:7f:7d:bc:96:c2:6b:19:1c:ff:6c:2a:29:04:
         05:b9:c6:da:e0:90:37:74:70:5b:fa:72:3b:27:dd:ff:b4:ba:
         b8:0c:44:19:c4:d5:16:5f:a3:b0:d0:e4:4d:fc:0c:0e:1c:43:
         45:e2:98:2f:4d:48:5b:bd:9b:15:94:47:6b:9b:ec:a6:ad:7a:
         9e:84:29:f6:e8:44:ea:1f:5f:8b:b9:66:27:91:6d:0d:11:ab:
         41:bc:56:6e:22:a5:0e:1e:87:64:90:36:6a:b5:1b:38:7c:4b:
         e3:b0:68:f1:9d:fd:a8:24:41:2d:06:29:f8:c9:5f:06:06:c6:
         73:e6:a9:14:53:09:0c:34:39:eb:01:63:86:44:e5:4a:c3:31:
         37:25:84:5b:1d:6e:00:7a:6e:de:c3:05:15:17:98:57:77:48:
         7b:60:a8:50:82:80:2f:59:b1:9f:1b:d8:35:17:30:61:c4:f9:
         d4:92:ad:b2:cd:2e:31:4f:38:40:9b:62:3b:95:76:b2:f9:08:
         33:54:c7:61:b0:69:f6:b5:7f:e5:7c:fa:26:23:ff:1c:b3:b5:
         54:a9:5e:0f:bc:89:96:e7:1f:b0:dd:6f:c4:f6:a8:c7:7b:7e:
         cf:fc:81:16:fc:6b:b8:ba:a8:a0:d5:e2:42:bd:00:2f:a0:d3:
         1e:4b:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:52:46 2025 by rpki-client