Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f4f5bc-30c7-4d20-a9b4-b39626f30e78.roa
File:                     54f4f5bc-30c7-4d20-a9b4-b39626f30e78.roa (raw, json)
Hash identifier:          cFuyRZhdapy3HEKBIeI2N+lDYoj+T0KWklx/LmUb9cY=
Subject key identifier:   76:E3:60:FE:1F:A0:D5:AE:B6:50:9B:CF:05:7D:7A:AD:9A:5C:D6:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53E4E7078272A1D7A2055AC12CD8E96C76607915
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f4f5bc-30c7-4d20-a9b4-b39626f30e78.roa
Signing time:             Wed 03 Sep 2025 00:00:49 +0000
ROA not before:           Wed 03 Sep 2025 00:00:49 +0000
ROA not after:            Wed 08 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        138.52.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e4:e7:07:82:72:a1:d7:a2:05:5a:c1:2c:d8:e9:6c:76:60:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  3 00:00:49 2025 GMT
            Not After : Oct  8 23:59:59 2025 GMT
        Subject: serialNumber=498654cb2ae2f9799cf88dbe7769c9aee48f628687d246b0cb80d246ea2997d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:b9:39:0b:82:af:0b:24:72:b1:bd:48:f8:
                    e8:8e:d7:5d:14:1b:cc:be:62:b4:68:4a:fe:9e:da:
                    08:95:72:60:f3:42:8b:17:f1:f1:71:b2:db:33:34:
                    b4:f6:a8:e7:d4:43:bc:3b:23:e9:d2:b4:e9:f8:d2:
                    f6:d3:58:5f:04:a3:34:a2:e8:2e:36:f4:aa:a5:f2:
                    e3:ab:cf:02:f8:5e:8a:04:97:a4:28:b3:58:91:dd:
                    c3:45:49:ee:80:73:d8:ed:3f:7d:51:ae:24:4d:24:
                    f7:ae:87:a8:3d:4c:97:c5:94:72:6f:d7:13:41:64:
                    ab:f0:fd:a3:ca:66:fa:f1:9f:5b:d4:eb:f7:29:39:
                    3f:57:1d:16:6b:93:98:5c:07:f3:d9:23:c1:fd:8d:
                    01:f1:7c:f1:59:4b:32:4e:e9:64:c9:fa:b1:af:8d:
                    20:b5:6b:60:e7:e1:f1:3e:c6:fe:22:1a:ba:39:94:
                    28:1e:8c:c0:d2:70:98:c6:1d:ea:87:41:69:f3:ee:
                    0d:ec:c4:bc:c6:e4:90:09:b5:ff:4b:62:31:d1:d3:
                    69:91:51:fb:75:9a:e9:b7:96:48:3e:79:2a:5f:a1:
                    60:22:3f:3e:fc:be:ef:6c:47:55:6a:49:84:fd:9f:
                    a7:3b:ec:d0:d0:aa:db:a2:6b:6b:e9:43:85:bc:ab:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:60:FE:1F:A0:D5:AE:B6:50:9B:CF:05:7D:7A:AD:9A:5C:D6:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f4f5bc-30c7-4d20-a9b4-b39626f30e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:9f:84:29:d8:b5:53:66:bc:32:94:c8:d1:78:20:ba:ec:
         fb:23:ce:07:f1:0d:6d:8e:41:32:d6:e1:15:c6:d2:8f:28:62:
         9c:e3:52:19:a7:fa:68:bd:6c:e3:fd:5a:66:68:eb:39:9d:18:
         be:c8:54:59:60:f9:20:55:1d:b7:99:72:2e:2b:72:26:12:80:
         a2:5f:8f:6b:39:b1:62:89:18:16:d7:ab:30:c8:fc:e6:e6:2c:
         fd:ae:03:21:38:f8:b1:5f:b2:c1:e6:b8:59:22:09:a2:12:be:
         df:2f:88:02:96:2d:9d:2d:60:a0:dc:59:47:a2:5f:cd:7f:e7:
         c6:57:e0:4b:90:fd:7a:81:2a:c2:cf:8c:0f:e1:fb:6d:d1:70:
         64:c1:61:4f:28:5c:9a:b7:82:4f:10:20:aa:f2:30:fc:c7:8b:
         bb:59:aa:16:c6:c6:b3:30:a6:21:0a:67:f6:37:2b:64:f4:55:
         c5:c7:ca:89:47:fb:42:a0:a8:0a:d5:c9:81:13:5b:4d:10:b6:
         54:e5:46:01:97:a8:d7:3f:ed:7c:e9:f0:30:b8:fd:e9:2b:9d:
         82:4a:44:16:7a:09:bc:a5:78:16:3c:06:0a:f0:83:2c:3f:37:
         49:fc:16:c0:e9:23:a5:90:4b:0f:46:4b:c5:41:f9:50:e7:4e:
         b0:72:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:20 2025 by rpki-client