Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa
File:                     4460c29b-6af6-4d15-bee1-65deb7aba765.roa (raw, json)
Hash identifier:          ygc2gPu+w/AWUVprwiaqKUHhQjzs39kgmMFzLNHgHSU=
Subject key identifier:   81:45:AF:F6:51:37:11:87:08:90:4A:95:DF:32:34:E9:E6:D2:C8:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FC7CE089B3768F264B90F254E77068FC315353B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa
Signing time:             Sat 30 Aug 2025 00:50:28 +0000
ROA not before:           Sat 30 Aug 2025 00:50:28 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:ce:08:9b:37:68:f2:64:b9:0f:25:4e:77:06:8f:c3:15:35:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:50:28 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=80b2995588570769ffc0f90b89792a4de9eeb30c076e2b148a086529869f6c3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:c9:c5:92:2b:75:44:1f:24:a2:d4:73:0c:
                    77:64:18:a8:82:67:6e:7d:87:19:69:30:e4:dd:3b:
                    02:00:7c:f0:a8:73:f7:80:32:cd:41:3a:8f:03:c3:
                    08:07:cb:b3:8e:db:ac:87:49:1e:42:47:25:f6:f1:
                    2b:46:8a:0d:bb:bc:0e:ab:d4:12:d3:9d:71:ca:4b:
                    99:2b:f2:b5:ff:11:81:6d:53:d5:af:73:12:e6:a3:
                    f6:cb:b5:03:1f:a1:60:cf:4d:73:a8:63:ef:61:74:
                    7a:45:c4:44:31:8d:e4:66:80:ac:9b:97:d0:7f:76:
                    e1:c4:96:fa:7b:0b:e7:cd:7e:05:57:30:fd:37:9d:
                    08:48:9f:30:2e:55:80:55:9f:05:31:a0:d1:e5:66:
                    9d:0e:97:23:e4:50:ad:c6:d4:1f:14:a3:3e:b8:cf:
                    2b:4c:a9:7c:48:be:08:bc:19:75:af:61:c5:cf:65:
                    5e:0f:c5:8f:fe:f9:76:73:2b:f6:2e:c3:66:bc:f7:
                    73:87:32:a1:e1:4e:43:9e:10:29:4b:46:d9:fb:8e:
                    1a:83:65:4a:08:1e:7a:05:d3:c3:f7:21:6e:88:70:
                    7e:f5:0d:c9:5f:75:46:8c:e8:14:16:ff:70:d9:43:
                    8d:cd:fe:19:02:63:0d:5b:19:59:a2:fd:ee:f5:51:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:AF:F6:51:37:11:87:08:90:4A:95:DF:32:34:E9:E6:D2:C8:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4460c29b-6af6-4d15-bee1-65deb7aba765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:42:08:86:0b:21:f4:c8:8b:c2:fd:73:95:02:d5:7a:5e:65:
         65:a0:06:ad:93:6b:e4:20:14:7a:a2:77:94:bf:91:ac:86:e2:
         02:ee:b6:58:2f:78:59:5d:b7:d7:79:58:23:a4:77:bd:2d:b1:
         7a:ee:47:8b:df:f7:43:8b:48:7e:1a:4d:b5:81:72:20:ae:50:
         55:77:b0:db:4d:f0:87:57:40:a3:f8:4c:3f:b8:a9:75:ba:98:
         18:57:ef:b3:23:01:2d:69:5c:4d:18:c8:f7:c4:63:a3:83:eb:
         e0:04:61:91:2d:b6:20:dc:92:df:31:3e:9b:4d:02:9c:90:19:
         e2:64:f3:36:7e:f9:26:2d:16:14:b6:c0:fb:d4:1e:b6:dd:c1:
         78:b5:28:25:0a:6c:19:9c:01:bd:ef:a3:93:08:9f:94:d1:b3:
         f7:44:97:33:a5:7d:2d:f8:66:3b:55:06:1c:66:42:ae:40:6f:
         65:d2:82:e8:00:2e:72:ac:90:e2:06:18:e7:35:ac:ed:bf:de:
         30:ba:f2:96:25:8c:6f:a3:9d:9e:95:ec:49:37:9a:54:d0:32:
         df:53:9c:2a:70:d0:3e:47:30:b2:8f:6d:09:1c:5b:3b:d9:4c:
         c7:b0:68:81:65:0d:60:86:09:c3:60:8d:2b:c6:2e:bc:b1:0f:
         87:b4:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:12:01 2025 by rpki-client