Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa
File:                     263a53be-93fd-449b-afc4-20df6f689c9a.roa (raw, json)
Hash identifier:          VIe65Axd0PZ0SukloFucWDP0LxM44xSY7es5wyhTgfw=
Subject key identifier:   2D:B6:15:10:9F:6C:8B:0B:59:0C:FD:0C:1F:96:1B:42:1A:A5:84:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55C10F9A0801478C1089FCE40A801F757CCCD2EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa
Signing time:             Fri 29 Aug 2025 16:41:46 +0000
ROA not before:           Fri 29 Aug 2025 16:41:46 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:0f:9a:08:01:47:8c:10:89:fc:e4:0a:80:1f:75:7c:cc:d2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 16:41:46 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=7f6e8dba95b8395783b429a84b2fdc7ab57f7883925b25b754733eba5f3fb00f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:ab:25:3d:a1:5a:c7:8b:b9:78:94:22:ee:
                    c3:a0:2b:5a:35:53:f5:89:c6:c5:02:f6:9f:42:2f:
                    49:57:43:00:99:06:f2:72:1b:0a:bd:69:70:20:4d:
                    e7:48:82:5b:76:de:7d:0f:9d:d6:30:1e:38:92:00:
                    02:d8:1b:e4:1f:c2:b1:42:7d:f0:43:2b:03:6e:2f:
                    08:5c:26:91:9f:d0:17:31:3f:db:3a:25:3c:3f:7d:
                    55:48:69:c3:66:76:62:c5:04:df:e4:dd:07:12:66:
                    e9:32:df:66:c2:a7:32:2c:25:bb:4b:85:db:5b:1a:
                    1d:27:d3:ae:70:17:06:f7:be:d0:1b:e3:7a:87:c0:
                    e5:9e:22:c9:02:1d:73:5e:be:4a:0a:dd:d6:32:bd:
                    10:e2:3d:44:ac:71:81:78:12:ea:20:48:9e:ff:59:
                    c1:ab:80:f1:76:e4:41:ea:03:c9:33:9b:65:92:b4:
                    80:62:86:6b:3a:9f:0b:da:44:9e:42:0e:d8:51:4d:
                    72:f5:ec:30:25:bc:81:8d:e9:d2:39:dd:a6:a8:57:
                    1a:09:5f:8e:3f:63:73:b5:a5:fd:72:5c:6a:55:5b:
                    b1:8e:c4:ef:f4:01:21:c0:dd:65:17:f5:63:ff:79:
                    d6:0d:06:40:09:e1:7a:66:5d:7a:fc:c8:58:d1:ce:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B6:15:10:9F:6C:8B:0B:59:0C:FD:0C:1F:96:1B:42:1A:A5:84:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.121.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:95:70:2d:66:b5:3f:e9:c4:01:df:b8:f8:7f:f0:3b:92:fb:
         89:d8:86:cd:68:3c:cc:15:65:28:fa:da:51:af:f5:1d:db:91:
         38:35:62:77:fe:46:a1:ea:0e:38:01:d6:9b:19:3c:8a:65:1e:
         17:34:5f:74:ce:7d:91:b3:48:05:9e:81:ba:da:ce:67:7a:47:
         c1:a6:2a:c9:40:33:56:bc:8a:44:aa:51:da:a3:26:f2:2d:69:
         bb:c8:1e:83:46:9d:e2:38:45:ff:38:c9:fd:65:63:04:f3:29:
         6d:09:2f:c8:0c:fa:d2:24:dd:d3:c7:78:04:5a:ac:ca:ae:03:
         62:40:36:43:e0:58:09:26:5f:1e:7c:fc:ee:10:21:e7:6c:11:
         d7:33:6e:a3:f0:3e:a4:3f:a9:72:d6:28:de:4e:5f:34:8c:8b:
         f3:29:43:62:2f:5d:c9:80:94:e8:8d:a3:4a:e7:3f:dc:7a:85:
         19:36:9e:ad:44:3f:1b:2f:5b:74:e4:d0:cf:2a:32:c9:bd:e6:
         69:d4:c5:a1:52:ac:ed:b8:85:0a:9b:37:90:41:ee:18:61:0e:
         c9:c9:5d:6f:0d:65:89:59:16:fe:3f:22:d0:dd:83:42:3c:5a:
         9a:28:a3:22:67:aa:ad:f1:67:35:77:88:6e:8d:a5:ce:42:a9:
         57:05:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:12:11 2025 by rpki-client