Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f718dea-880d-40c3-a253-e556b2dee1c6.roa
File:                     6f718dea-880d-40c3-a253-e556b2dee1c6.roa (raw, json)
Hash identifier:          wBkCDb7FyzDeLZmZOG8CVEfeEslcFVGnu/qL8nGzoTk=
Subject key identifier:   E4:C4:FA:98:DE:74:98:CE:15:E4:3C:08:E7:60:65:0A:13:D6:0C:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28A2ABA6B386939224D1E17F2CC3C3257A01585A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f718dea-880d-40c3-a253-e556b2dee1c6.roa
Signing time:             Tue 24 Jun 2025 00:21:49 +0000
ROA not before:           Tue 24 Jun 2025 00:21:49 +0000
ROA not after:            Tue 29 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a2:ab:a6:b3:86:93:92:24:d1:e1:7f:2c:c3:c3:25:7a:01:58:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 24 00:21:49 2025 GMT
            Not After : Jul 29 23:59:59 2025 GMT
        Subject: serialNumber=00585d89037ec8d878f1f68467c931e7aa90c52de2e70f19072508c4d1d25cdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d4:54:8c:93:63:74:6e:9b:83:9f:fc:e7:29:
                    27:e6:f6:d3:3a:77:58:fd:c8:36:bf:fd:5b:a6:a7:
                    9b:db:bd:9e:6c:5c:ba:f2:77:08:66:ba:07:bc:62:
                    5e:f5:f6:31:86:1b:ca:2c:06:ca:90:0d:d2:8b:2e:
                    ff:7f:59:44:22:6d:14:2f:ed:77:32:e4:3a:3b:55:
                    1a:cf:c7:f9:82:e1:b8:38:49:28:d0:6b:ac:37:c3:
                    86:70:06:15:61:18:c5:d4:9d:6c:81:27:4d:2a:fd:
                    5c:a9:c0:41:d3:fd:bf:fa:9d:68:e6:89:1d:63:d8:
                    34:c4:da:cc:fa:e7:2a:bd:29:2d:44:13:c3:1c:f1:
                    86:ed:89:99:7f:d7:00:b7:3f:8b:7f:37:18:4c:18:
                    35:8c:ff:0d:11:94:40:ed:ad:92:23:20:60:6e:d8:
                    fa:40:fc:a8:aa:e8:39:e2:d0:22:98:09:f9:7d:3c:
                    07:b9:0d:a0:fc:17:c5:bf:5b:f0:cd:65:98:25:c9:
                    a5:7a:c6:7c:42:5f:ad:c1:1e:85:3b:0e:82:ff:32:
                    f0:b8:aa:45:fc:98:16:c0:cf:37:1b:ca:83:e8:1f:
                    39:68:56:d4:8a:23:f1:2e:ee:a9:4b:98:7c:9a:46:
                    d4:f7:f2:80:16:08:c4:ce:24:80:bb:9c:57:ef:7c:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:FA:98:DE:74:98:CE:15:E4:3C:08:E7:60:65:0A:13:D6:0C:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f718dea-880d-40c3-a253-e556b2dee1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:f0:19:9b:df:30:24:8b:8b:af:6c:a1:38:12:af:8a:32:
         82:cd:19:e6:5b:a6:27:56:c4:77:9b:26:33:ef:e1:2c:69:75:
         3b:74:23:41:ef:9d:93:2b:ae:75:84:27:86:10:54:e7:cc:87:
         ab:c7:af:6a:fd:29:b1:08:7a:21:13:11:7e:d3:08:83:86:f0:
         59:a1:4b:15:b9:64:80:45:7d:ec:23:79:c6:9f:3f:3b:0d:99:
         60:69:a8:8b:13:83:d9:a9:3b:bd:37:d9:53:e5:09:ae:3f:bf:
         fc:2e:6b:62:ef:4d:d9:b8:02:ea:6a:bd:d0:23:e0:20:1a:66:
         e9:1b:47:35:76:1b:2a:e8:50:ae:f4:96:34:1c:e2:29:b5:8a:
         6b:f7:f7:56:f9:22:a3:61:11:03:0e:36:4c:69:e2:d5:f1:3e:
         41:83:bd:ef:82:78:55:ac:da:0a:9f:90:6c:75:22:16:a3:7e:
         dc:6b:60:38:7b:9a:9f:db:6a:aa:d7:16:20:bc:ea:bb:6d:4e:
         d2:cb:32:52:40:ce:85:b8:db:3a:1e:83:6c:4c:64:cb:eb:6c:
         86:14:ba:61:b4:b5:bf:ee:46:d9:4a:80:75:d3:0e:4b:49:4a:
         cc:c1:42:b5:11:f9:72:12:2d:1c:57:88:eb:02:89:36:11:d2:
         29:28:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:57:50 2025 by rpki-client