Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e450719-9a7a-4a8d-abc8-f6b979a23bd2.roa
File:                     4e450719-9a7a-4a8d-abc8-f6b979a23bd2.roa (raw, json)
Hash identifier:          609wMJBICUydyLvVVZDPppsr4CqpFfbReVJ0t2j8BCI=
Subject key identifier:   0C:57:5E:6C:76:41:AA:B7:6F:45:6E:49:2D:83:F5:2A:7B:B2:86:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4531E65B3DF257896E7878C008C05EE9BAADE61E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e450719-9a7a-4a8d-abc8-f6b979a23bd2.roa
Signing time:             Tue 20 May 2025 15:12:26 +0000
ROA not before:           Tue 20 May 2025 15:12:26 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        67.202.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:31:e6:5b:3d:f2:57:89:6e:78:78:c0:08:c0:5e:e9:ba:ad:e6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 15:12:26 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=3ca05b133a74f482f0133742721a70b8ca4cc510287ce8b71689f6fe9c8902fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:92:15:ff:10:6c:8b:de:8e:32:ce:bf:96:
                    be:15:4e:5f:6f:4f:66:67:07:ca:b1:5a:4d:c4:8a:
                    86:60:9b:64:75:a7:a4:d0:da:2b:7c:3d:5b:86:02:
                    10:c9:74:52:e1:e7:a3:8b:e2:dc:11:3e:5d:fd:c0:
                    75:56:52:58:8a:55:dc:15:6a:68:2c:5d:5c:00:d0:
                    a3:c1:3f:fe:69:ec:6c:9d:86:0a:a1:f5:3e:7e:4d:
                    31:5a:cf:67:29:1a:29:39:c2:ef:09:7c:fd:91:ab:
                    f7:26:0d:28:28:83:e8:ee:89:38:ed:9e:a6:90:05:
                    90:59:32:94:f0:de:ab:d0:e0:9d:3f:76:0e:22:7f:
                    ca:d4:35:7e:68:e0:6f:3e:8d:be:12:e0:41:f4:6b:
                    dd:2b:41:7d:46:bb:f6:7f:a3:26:07:b6:9c:aa:ba:
                    40:90:50:da:fa:bb:24:56:a5:bf:57:5b:85:32:53:
                    b9:4d:16:ba:76:5f:f1:d7:3f:a2:c6:c0:1a:e5:39:
                    ed:4d:29:23:96:22:64:4d:dd:56:e8:d1:37:4f:b5:
                    b0:e3:9f:5c:af:f1:48:b0:f6:89:51:c6:a1:a0:da:
                    7e:1f:b8:97:ac:a0:f2:91:29:5c:f2:41:c3:a3:36:
                    cf:4d:1d:b3:9d:05:8a:0c:4a:62:5d:66:49:b5:54:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:5E:6C:76:41:AA:B7:6F:45:6E:49:2D:83:F5:2A:7B:B2:86:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e450719-9a7a-4a8d-abc8-f6b979a23bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:03:26:6e:c9:03:53:8d:44:cf:79:68:f9:37:28:fe:e1:d6:
         62:07:35:04:f6:1a:17:bc:13:1f:74:3c:b8:dc:0b:66:31:0b:
         a3:18:13:dd:dd:42:b0:f0:eb:5f:a8:ba:af:dd:dc:ba:dd:16:
         69:34:3a:2f:29:e8:15:6d:1b:8d:15:d3:d8:cd:0c:7c:c7:e6:
         0e:21:55:4e:e0:eb:16:c2:88:4b:95:86:bc:ee:9e:8f:c9:d1:
         f2:d4:aa:c8:60:d5:6a:98:39:f0:7a:01:74:7f:43:8a:d1:71:
         a9:eb:04:92:55:69:2c:66:4f:e0:3a:23:45:6a:70:14:2a:48:
         db:69:71:dd:8a:2b:d2:26:15:47:b3:36:f0:3d:de:90:67:e6:
         e4:fb:5f:22:c2:fc:5b:23:97:40:61:29:a6:dd:d6:9a:cb:fb:
         66:63:8b:68:1e:b3:6c:1a:14:02:07:f9:0d:ee:3a:14:99:9e:
         3a:26:be:b1:be:35:4b:6f:a9:a1:37:70:5b:5d:98:67:6c:9b:
         9f:f5:ba:ed:eb:25:18:ee:58:e5:7c:7c:8d:b5:cf:81:12:1e:
         67:cf:b9:39:17:b4:7a:e1:b1:a2:25:97:7f:40:2e:33:69:48:
         20:24:cd:3b:a5:c3:21:91:43:af:c7:4b:b9:d0:79:49:71:92:
         c3:a2:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:41:47 2025 by rpki-client