Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa
File:                     3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa (raw, json)
Hash identifier:          8WSvy18kXNF8+hzmU5wQhLdlLtodz3RLJQ1S6cHmsLo=
Subject key identifier:   54:BD:4C:13:9A:B4:A1:EC:3B:93:59:C4:AC:DD:0D:AC:C7:13:5C:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AF63E243E2860DB14841737DDBDC23FDECD4ADB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa
Signing time:             Fri 29 Aug 2025 00:21:10 +0000
ROA not before:           Fri 29 Aug 2025 00:21:10 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        208.78.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:3e:24:3e:28:60:db:14:84:17:37:dd:bd:c2:3f:de:cd:4a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:21:10 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=98350c700517b3b1f2f1233fde2cad664528edaaedd19337d6093fa1f697e1d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:b7:e3:0d:87:d6:2e:81:6b:44:84:90:86:
                    fd:ce:7a:2a:e9:82:38:81:cf:f1:39:91:71:67:8a:
                    75:cd:68:e9:e3:c9:70:ce:2b:21:bd:07:fd:24:48:
                    9b:c6:a2:d9:34:9b:c3:a1:36:32:d5:d6:07:2c:58:
                    2a:16:13:48:03:d2:42:ac:25:3a:cd:6a:65:5d:38:
                    55:2d:ee:16:b3:2d:65:dd:44:1d:43:3c:bc:c8:a5:
                    7d:a3:d6:05:ca:72:da:c2:d6:eb:da:9a:ba:77:dc:
                    4b:74:01:b9:e0:be:cb:8b:ac:ad:89:33:ae:35:a3:
                    d3:91:d0:c4:54:e6:9f:cb:bd:e2:bb:c6:08:78:58:
                    42:c8:77:99:98:05:a7:54:ad:b8:09:0c:65:63:1a:
                    e9:1b:0b:6c:7f:8b:db:03:da:51:59:6c:27:da:10:
                    9e:d5:37:08:4a:d3:cd:86:18:8d:a5:1c:44:30:f7:
                    39:23:92:60:f1:20:cc:7a:5e:39:8a:63:12:b7:f7:
                    80:01:68:f9:71:3c:f8:8c:b2:fa:fe:4a:f9:2b:7c:
                    eb:fb:60:1b:bb:2a:d2:7a:fe:d4:ad:49:88:c7:d4:
                    78:4d:4a:7f:dc:ff:fb:52:2d:86:53:ca:b7:dd:6f:
                    ed:b9:2b:44:d5:0c:93:f8:3e:72:2e:54:5e:89:f5:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BD:4C:13:9A:B4:A1:EC:3B:93:59:C4:AC:DD:0D:AC:C7:13:5C:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:df:a1:2d:74:36:8e:15:4a:83:5c:43:bf:70:d1:f7:f8:
         24:f7:a4:54:3d:b4:5f:ca:13:6c:1b:6b:45:0e:b3:7e:62:dd:
         f1:52:36:32:1e:b4:8d:d5:0c:0d:6e:47:56:eb:9c:24:b7:9e:
         b7:68:6c:45:4c:74:10:1e:fc:a1:1d:f4:ce:b7:c0:97:af:f6:
         b5:27:e8:b2:ee:e8:cd:1d:01:bf:05:eb:d6:b3:92:12:27:e5:
         c0:f5:8f:2d:9b:e9:41:6c:0c:d4:f4:c8:d5:52:41:f8:52:33:
         f0:52:d0:39:3e:14:e9:59:e3:8f:07:33:76:71:10:20:0f:8e:
         b9:7e:a8:26:a3:ce:68:a5:80:79:ca:85:a0:0e:95:82:0d:56:
         13:7b:b9:45:9a:bd:11:80:22:de:4f:77:f9:1b:5c:7d:7c:37:
         26:39:d5:01:ae:38:96:b4:77:bf:81:26:4b:db:cc:6d:47:07:
         d9:37:16:e6:39:27:7a:e9:15:0f:cb:8c:21:3d:30:5c:c9:10:
         7a:db:16:5d:83:9f:d4:e2:5f:5d:63:10:fb:39:7e:11:a2:0a:
         7a:76:29:ba:ad:db:43:1c:52:fa:cd:68:06:fb:b8:49:a8:4e:
         71:7f:c1:26:63:c8:8e:72:5d:89:f7:c4:7a:42:0d:c7:be:c6:
         85:0a:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:43 2025 by rpki-client