Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa
File:                     203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa (raw, json)
Hash identifier:          5oacayXcv5/XKEIOfRzfaex9dnioGKTHfNsQnLNBPdc=
Subject key identifier:   57:45:6F:1C:C4:24:DC:55:35:DA:9F:09:A5:38:5C:61:6E:BD:18:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3355F524D0E383496AD15F4BFBCA4781782E09B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa
Signing time:             Tue 27 May 2025 00:20:36 +0000
ROA not before:           Tue 27 May 2025 00:20:36 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.26.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:55:f5:24:d0:e3:83:49:6a:d1:5f:4b:fb:ca:47:81:78:2e:09:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:20:36 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=a28fe9e5b9404ed97f304ad4d70b905a9d324c4bd700e9e8b13e62498f01a65a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:cb:bd:54:2b:8f:b8:8d:c5:00:af:6c:8c:
                    4e:48:13:12:86:46:4f:da:ea:ad:06:3b:b7:26:cd:
                    0b:17:39:f7:1a:5d:ff:12:b2:56:3a:37:52:b1:12:
                    ba:8f:64:52:2f:02:77:58:e9:d5:fa:0a:fb:a6:2a:
                    6c:fb:3b:bd:79:67:d0:44:f3:96:df:f9:ce:f3:00:
                    36:f1:bc:8a:d5:2b:0f:89:ab:95:47:24:15:d3:e7:
                    93:a8:b1:e1:7f:1a:df:64:09:6c:e6:22:07:d6:59:
                    36:0f:eb:d5:59:7d:8e:f7:e2:75:ed:35:55:35:d9:
                    9a:78:ee:e6:05:de:d5:15:b4:c1:3b:a0:97:c3:f2:
                    1a:07:b2:44:12:a3:8f:bf:12:ac:5c:f3:3e:20:cc:
                    ff:61:19:46:f0:73:a2:ff:df:ef:92:63:26:35:09:
                    51:f2:d7:49:98:df:0f:5c:87:98:1e:a4:9d:35:c6:
                    eb:9d:99:34:72:53:87:49:92:4e:e4:13:c6:5d:eb:
                    87:e9:b3:62:7a:25:55:1b:de:3f:5c:fc:b4:05:c4:
                    90:2e:2d:6c:3b:63:37:c0:80:d0:4b:ed:06:e8:d3:
                    4f:43:48:e0:b0:c5:6f:2c:87:fe:11:6d:82:33:00:
                    3b:72:6a:56:31:3a:6e:e1:18:ba:52:79:a6:a6:90:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:45:6F:1C:C4:24:DC:55:35:DA:9F:09:A5:38:5C:61:6E:BD:18:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/203b501d-ebeb-4fcd-86f7-98b9ffc1813b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:39:c6:d5:ab:95:6a:a4:73:7e:b3:a0:8b:fe:6f:36:1e:9c:
         56:4b:5c:d3:b1:d2:e9:0a:0d:b6:fc:90:da:08:f0:3a:f0:f8:
         cb:e3:d9:84:36:30:7d:60:c9:87:5b:43:3b:d4:24:23:e4:d7:
         21:a8:d6:78:c9:d3:90:c3:0e:96:b9:df:c9:89:86:11:79:93:
         fa:5d:0f:9e:65:c4:1d:03:26:4f:62:81:6f:91:28:85:c3:4b:
         e2:6a:26:f4:6d:c1:4e:bd:7e:23:6c:65:3c:a8:ed:c7:f9:d2:
         73:4e:c2:ff:7c:1a:f5:2e:58:d8:a4:2d:57:ff:3f:e6:83:f3:
         74:04:f8:9a:3c:04:42:35:94:f1:f2:9a:06:88:7e:df:a2:57:
         34:99:51:ec:1a:d5:1e:e2:87:e8:38:b5:9d:1f:5b:b6:0b:75:
         91:f5:1e:5c:22:60:b9:32:f0:e2:2a:21:ba:d8:ae:f6:bd:58:
         8e:f7:44:ac:30:9d:7f:e5:f6:f3:3e:b7:53:ce:d0:81:94:1a:
         0d:ef:32:6f:ff:dc:4a:57:f7:73:05:7a:fc:cb:4d:d1:44:5c:
         bf:fb:40:c0:2a:2e:8e:42:7f:c2:d7:2a:5e:f8:3d:8e:21:59:
         1b:8c:4c:73:48:e5:33:b6:38:7f:0c:25:cf:ee:25:8c:63:7e:
         53:81:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:16:30 2025 by rpki-client