Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa
File:                     202fa196-7fc4-42d7-9eda-ead645c20087.roa (raw, json)
Hash identifier:          0TI/Mmn3XB4Ja3Wvjhya2jt2v3GJei/O2VXbiA8FJP4=
Subject key identifier:   A4:39:62:4D:FA:34:C4:DC:C7:2F:6D:52:BB:51:F8:19:41:3F:53:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D921B9ABDE65F3C42E8FFB344ECB66FC36B4F63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa
Signing time:             Sat 06 Sep 2025 00:50:24 +0000
ROA not before:           Sat 06 Sep 2025 00:50:24 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:1b:9a:bd:e6:5f:3c:42:e8:ff:b3:44:ec:b6:6f:c3:6b:4f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:50:24 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=dcef2317886cb4b53f23f2403f08d193370b2bcf5dd8b1a97f35f9f4e0e64ec1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:b8:98:dd:e2:c7:61:af:34:fe:0d:fe:bd:
                    c7:bb:16:3d:8d:ba:be:16:8e:84:74:2e:93:4d:4a:
                    a7:74:98:e0:5d:63:0d:60:18:83:37:f7:ac:3b:ff:
                    dd:02:ec:45:0f:75:56:3b:9c:29:44:39:38:ef:3c:
                    2e:5a:fe:bf:cf:2d:ca:57:44:3d:fe:f2:fd:8c:03:
                    ed:61:23:b4:77:61:81:b2:70:e1:f2:c1:44:84:49:
                    27:6a:73:96:aa:b7:18:a5:1d:59:b2:81:03:7f:b0:
                    a0:ab:48:6c:75:c1:31:b0:e7:cf:76:ff:7d:6b:c5:
                    74:51:c7:84:75:4c:08:45:d1:9b:90:7e:30:47:e1:
                    d7:3d:43:55:28:f5:26:9e:81:15:78:c0:7e:66:7e:
                    35:2a:e1:5b:07:4f:5d:e2:dd:0c:dc:c2:42:61:37:
                    c3:e7:3f:32:35:01:83:b3:df:5d:0c:2b:92:0c:72:
                    a8:3d:e4:5a:66:a7:68:90:c6:81:b6:a9:ed:a8:d9:
                    b9:58:92:d4:08:fb:48:57:d3:90:f6:0a:b6:e5:37:
                    33:a7:b2:5e:a0:2a:a4:7c:b4:c1:32:ef:12:18:11:
                    46:27:99:13:85:69:f8:82:4c:01:a8:4a:1c:ea:49:
                    fe:3a:0d:e3:c2:59:0f:c6:b0:d4:35:85:c6:69:31:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:39:62:4D:FA:34:C4:DC:C7:2F:6D:52:BB:51:F8:19:41:3F:53:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/202fa196-7fc4-42d7-9eda-ead645c20087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:78:4a:34:1b:a1:f3:72:12:3b:f7:13:04:03:aa:48:47:b5:
         1e:ab:60:bf:f7:92:a2:cd:a3:61:12:a5:be:28:f1:1c:51:39:
         b6:0c:5d:7a:6d:cd:af:be:a3:c2:1c:f1:0d:9d:7e:46:9f:6a:
         7d:d3:e2:c7:ec:46:57:df:d6:77:1e:e9:00:e6:ad:c8:4a:f3:
         42:48:04:ca:a3:cb:1d:5a:c6:45:e9:95:a8:e5:b6:62:14:c0:
         f3:c9:b1:4b:07:b9:78:2b:4d:26:c1:99:2b:1b:f6:8c:ce:06:
         17:53:04:4f:2e:78:e1:fa:df:0c:fa:56:6b:a3:e6:dc:45:f6:
         f7:56:41:b7:fc:52:da:c4:83:8c:7f:2d:f4:da:9e:e2:dd:b3:
         00:95:06:65:e6:a1:b7:19:9d:96:ee:11:66:1c:55:08:e5:a3:
         85:81:2c:9a:43:cf:4e:4d:3d:49:18:c9:5c:a7:3f:5b:a7:ce:
         58:07:3c:ad:43:80:3e:4b:ab:82:19:2d:4d:7a:3e:ef:80:8c:
         af:92:42:4b:55:3f:42:ae:71:ad:05:92:b7:c5:19:59:32:8a:
         d7:9f:3c:86:f4:dc:a0:91:d2:cb:bd:ad:a7:d3:69:f9:18:30:
         29:5b:97:79:89:5a:17:c2:97:d2:8d:3e:aa:24:13:7e:cc:51:
         da:81:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:41:00 2025 by rpki-client