Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75ca4a21-a716-4967-82dc-9be15bcec1ba.roa
File:                     75ca4a21-a716-4967-82dc-9be15bcec1ba.roa (raw, json)
Hash identifier:          Km02YZY4navO2RngyU0w+PoIoYgaXrNSJwiGGCQQFKg=
Subject key identifier:   82:AA:F6:45:D2:51:70:BB:E2:C2:B3:E4:12:84:04:4C:40:4D:75:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6771FAC6A3DF960296F1F447BB2EEBC0E1DE218C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75ca4a21-a716-4967-82dc-9be15bcec1ba.roa
Signing time:             Mon 11 Aug 2025 15:11:15 +0000
ROA not before:           Mon 11 Aug 2025 15:11:15 +0000
ROA not after:            Mon 15 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.188.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:71:fa:c6:a3:df:96:02:96:f1:f4:47:bb:2e:eb:c0:e1:de:21:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 15:11:15 2025 GMT
            Not After : Sep 15 23:59:59 2025 GMT
        Subject: serialNumber=fe1a27ea5cca53082c1fc524398ee8a14cb730834bae671734566380943078f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:42:2e:33:1c:59:79:24:6c:c0:56:2c:76:66:
                    22:85:8f:3d:de:93:88:3a:76:e5:62:08:bc:39:01:
                    b4:94:53:34:2c:01:36:81:a9:db:ad:4a:63:00:f8:
                    00:da:4d:19:6f:1d:49:28:9a:20:11:2d:ae:52:d0:
                    d0:ef:3a:33:be:a4:1c:73:6d:80:8c:c0:1d:a8:82:
                    8d:3c:62:c1:d2:44:c1:c1:e7:73:b2:ef:a4:50:a6:
                    61:47:9c:8c:e7:23:17:9f:b9:bd:f4:d6:cb:40:bf:
                    86:a4:75:97:82:74:cb:b4:ba:ed:bd:58:03:7c:5e:
                    6c:ee:7b:dc:f4:8e:68:57:c1:1e:09:34:90:bd:26:
                    6a:40:1e:f7:f7:f6:8c:0e:b4:0d:7a:60:2a:30:53:
                    a1:f3:95:1f:0b:67:b0:70:c7:38:36:42:9a:c5:08:
                    a6:93:e0:06:a8:1e:d6:e9:38:31:6b:de:26:db:2e:
                    cb:ba:51:28:b1:40:f0:78:c9:f6:83:59:99:79:8a:
                    c6:2a:d4:5e:f1:25:81:c8:7f:fe:62:cd:06:25:83:
                    f5:00:7c:6e:62:7b:a7:3a:6c:be:de:cd:0b:85:0d:
                    0d:13:7f:7b:c1:7e:2a:75:ac:6b:5d:41:fd:ea:19:
                    03:75:76:5c:d4:e3:bc:e8:38:53:33:91:46:ea:fe:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:F6:45:D2:51:70:BB:E2:C2:B3:E4:12:84:04:4C:40:4D:75:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75ca4a21-a716-4967-82dc-9be15bcec1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:eb:ee:fa:19:f6:2b:a4:9a:3e:88:74:4f:c3:e5:0c:5e:
         09:fb:be:03:88:39:a5:05:55:c3:5f:5b:91:a8:b8:b9:c9:f9:
         6f:d8:70:89:2f:10:c0:7c:bd:44:90:3b:c3:e8:4f:da:1c:d8:
         ae:0c:c8:bb:06:ea:27:73:cb:2a:92:00:e0:62:f0:28:ac:c2:
         ec:69:cb:34:7d:20:a7:45:18:0a:a1:29:82:8a:51:bc:6f:34:
         79:46:ce:b3:5f:20:93:61:5e:2c:8b:c3:9c:e5:b5:75:6b:8e:
         39:1f:bd:66:9e:91:73:ec:1b:37:99:ca:a9:1f:61:87:78:87:
         76:e1:c5:0d:d9:77:52:47:a3:c3:28:b4:8b:f3:e5:f2:19:90:
         ac:a4:a5:c8:bf:5a:3f:23:0c:8e:85:96:64:0d:8d:b7:e2:e2:
         b4:01:41:15:72:60:40:90:27:f4:65:86:b4:32:0a:2f:6f:b9:
         3f:28:7f:f8:14:77:5b:80:a3:75:c0:de:25:8a:70:1b:2b:be:
         c3:99:67:2b:32:7b:67:eb:64:b9:46:1a:12:57:74:6f:47:8c:
         6f:88:12:22:cc:2c:b5:d4:11:01:a6:8d:20:dc:c4:6c:9e:91:
         01:b5:30:3a:f7:fb:15:6d:e4:6f:bc:b9:c2:cb:1b:05:de:9f:
         0d:f9:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 19:00:44 2025 by rpki-client