Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa
File:                     6c8983ed-f974-40d9-a655-88644fc75ec2.roa (raw, json)
Hash identifier:          V6rV4D6FZ6TRsw3ZB6Hqg/x0GaCIGXNPHOikjRUrLsY=
Subject key identifier:   C3:F8:C9:00:FA:0B:CF:2A:C9:6F:02:BA:52:A1:69:9F:93:39:C8:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45B2AF393713FDE8C8672BCB3805463FD38911F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa
Signing time:             Fri 30 May 2025 00:01:19 +0000
ROA not before:           Fri 30 May 2025 00:01:19 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        198.151.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b2:af:39:37:13:fd:e8:c8:67:2b:cb:38:05:46:3f:d3:89:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:01:19 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=e045f0141ffef6e49c04c29d092c3e8a084d152e94138ad9c43da940ac986669, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:55:94:56:39:a0:d7:1e:0d:24:d8:8f:53:
                    ef:3d:56:de:45:05:83:7c:13:a2:96:46:0d:14:58:
                    72:62:d5:17:ff:e7:46:f5:a1:32:c0:dd:d3:68:94:
                    b4:d6:b9:58:d1:44:20:01:ac:9d:d7:cd:b4:97:7d:
                    73:de:89:40:6a:31:26:0b:1c:e5:09:a8:e4:c5:a6:
                    4a:81:1d:2d:73:82:f1:27:d7:ba:1a:73:e1:a9:36:
                    8e:c9:63:07:63:14:6b:eb:26:f4:da:e5:85:59:c8:
                    26:c6:66:d0:25:24:a9:25:e1:90:cf:04:dc:00:01:
                    5d:92:b8:a9:55:d7:70:86:78:38:42:1d:bf:79:08:
                    fa:d9:86:47:5f:b3:1c:31:b1:bc:c8:ed:e8:d2:90:
                    0a:ca:c9:04:7d:de:73:ba:2f:2c:bc:08:87:20:e9:
                    38:e8:85:0f:dc:1a:cc:aa:07:f6:0d:35:b8:10:8e:
                    cf:3e:11:9c:25:da:2b:66:5c:5c:ae:36:1f:06:ac:
                    41:97:d0:e1:d5:1a:47:7a:57:a3:24:5d:ba:ab:8c:
                    29:00:c6:30:55:f2:2e:84:ae:85:37:59:c0:f3:f6:
                    a6:95:90:89:f8:c1:f6:6d:90:1f:d5:8b:28:f5:a3:
                    7d:b3:90:61:04:d3:bd:e5:24:94:59:5e:46:80:2c:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:C9:00:FA:0B:CF:2A:C9:6F:02:BA:52:A1:69:9F:93:39:C8:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c8983ed-f974-40d9-a655-88644fc75ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:95:aa:45:42:62:95:32:d4:03:ea:f9:8c:c1:52:08:6e:
         d3:c7:bf:7b:a3:b0:1d:50:f9:22:50:24:a5:f7:d6:ad:e4:78:
         b0:a0:35:28:90:e4:07:9a:7d:dc:be:ba:68:6e:0a:02:e0:69:
         98:99:1e:cb:87:a2:06:09:05:75:4b:c2:61:73:71:96:13:b7:
         b8:f5:d3:66:75:8c:3b:16:fb:e6:37:a9:de:2b:45:5f:c5:d7:
         07:83:a5:c8:c3:c3:99:81:f7:da:fb:86:40:7a:6a:c3:fc:4d:
         51:a2:80:48:7f:cf:01:ae:59:df:72:dd:c3:dd:e4:34:73:e4:
         d5:f0:95:c6:c8:c2:85:d6:f3:9a:d1:fa:02:ce:5e:06:8b:44:
         02:5b:2e:de:98:70:fc:60:fd:40:17:ed:dc:72:dd:2a:32:29:
         c3:3e:93:54:a8:69:d6:ed:a1:85:e3:15:4a:72:16:05:35:60:
         28:97:d5:d3:76:dc:b9:06:06:60:ce:13:e7:9a:3f:a0:86:60:
         06:e4:ce:81:cb:42:2c:cd:5c:16:87:cb:12:6c:20:a9:41:9c:
         0a:15:fb:76:12:f0:1b:a2:34:f1:ce:3c:e4:b5:6a:04:34:0a:
         1b:8a:5b:12:54:40:52:3e:a6:4c:f9:24:48:40:f7:f0:83:c3:
         d1:b5:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:43:07 2025 by rpki-client