Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932eb57-7ef0-4e8d-8e5c-1e6e6ff5ac98.roa
File:                     4932eb57-7ef0-4e8d-8e5c-1e6e6ff5ac98.roa (raw, json)
Hash identifier:          MVn6eW1bcF8GfyJ2uQDlN39vyLIyYPV8UOk/9JW1faA=
Subject key identifier:   47:09:13:AD:33:79:9D:CA:EC:EE:60:B1:86:56:80:02:0A:3C:FC:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       530062FB0E642B515AD11E8DC6E0C1530B967097
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932eb57-7ef0-4e8d-8e5c-1e6e6ff5ac98.roa
Signing time:             Sat 30 Aug 2025 00:41:15 +0000
ROA not before:           Sat 30 Aug 2025 00:41:15 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.45.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:00:62:fb:0e:64:2b:51:5a:d1:1e:8d:c6:e0:c1:53:0b:96:70:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:41:15 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=eca7040a468c96e72d35292bf8c8346455511c85f28f2e3affdbd3628c73c20e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:fb:90:dc:87:a6:9a:78:2a:51:3b:82:fa:
                    de:e1:b7:57:63:cc:3f:4f:a7:38:57:15:e8:11:53:
                    9b:eb:6e:d5:a5:f7:c9:b7:47:54:c7:48:74:b0:e6:
                    fd:03:fb:69:db:cc:32:40:e0:05:4c:02:7e:7d:fc:
                    22:82:e6:ac:ca:c0:79:62:15:fd:10:48:5a:a2:6a:
                    8c:88:9b:6b:48:8b:7b:6e:86:7e:2e:fc:96:53:73:
                    1f:16:19:5e:96:13:14:42:3a:cd:56:b2:88:de:62:
                    80:53:5a:2f:e5:79:7c:36:01:f3:5e:2a:92:81:71:
                    c7:3f:ee:c2:f3:25:2a:90:7c:e1:96:5b:06:af:c4:
                    14:17:ce:11:f8:c3:f9:24:93:f6:6e:0c:13:7c:45:
                    09:3d:6c:eb:29:ce:4b:ff:2f:50:c7:5a:8c:9f:fd:
                    bf:be:77:23:8f:ed:57:4e:b6:b1:15:4e:0d:16:38:
                    59:27:7c:36:ba:69:5b:60:fb:44:18:3d:e1:d9:af:
                    14:9b:fd:de:c6:1f:42:02:95:02:6d:b7:f5:26:ef:
                    8c:1e:97:3a:22:25:15:c5:6c:7c:08:ac:47:fc:fe:
                    55:7a:f4:b5:7d:36:3b:c9:81:38:23:ac:2c:7f:b8:
                    db:28:1c:0b:bb:9a:a6:f2:cd:96:fe:18:99:d7:4b:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:13:AD:33:79:9D:CA:EC:EE:60:B1:86:56:80:02:0A:3C:FC:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932eb57-7ef0-4e8d-8e5c-1e6e6ff5ac98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:23:50:77:27:75:73:83:2b:0c:71:63:7f:d1:a7:47:3e:29:
         be:34:60:e5:f6:4b:e2:6b:ab:05:70:65:b1:30:da:f0:63:d7:
         a6:75:a1:39:99:c9:1a:9b:1d:0e:34:4e:50:12:68:c7:c3:4d:
         fd:bd:6a:5c:83:3b:ea:f5:39:dd:f4:40:01:5d:e3:2b:56:a0:
         63:f0:80:14:ec:6f:e1:f6:40:f7:88:4e:21:0e:10:a7:c9:97:
         67:7f:a6:89:9d:d7:11:69:62:ca:47:42:1c:22:4f:85:a8:43:
         83:52:70:93:5c:58:2a:b3:2c:d2:6a:12:a1:4a:d4:ac:91:29:
         e1:d5:96:b3:f2:ee:4f:7f:bb:83:bb:a5:ca:5a:11:ec:bf:42:
         a9:d0:b1:fe:2f:61:7f:da:53:a4:6b:b6:6f:11:a9:cc:5c:4c:
         e0:0a:fe:89:e0:81:3e:88:12:36:8b:f1:a2:56:5d:e2:48:9d:
         88:2f:62:17:b9:3f:76:1c:1a:41:45:af:85:66:c0:20:f0:07:
         ac:46:7b:70:86:39:e7:79:9f:e5:4a:81:f2:0d:9a:ea:14:29:
         ea:67:2b:1c:96:71:9c:50:7b:d6:fc:dd:8c:2a:d5:22:1d:e6:
         d5:c6:d8:93:cc:40:06:92:2d:c6:7e:31:75:2b:bb:a0:2c:2d:
         34:49:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:13:45 2025 by rpki-client