Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
File:                     790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa (raw, json)
Hash identifier:          05vaFyJv3ROm9ihj711PdAkG5p3lMI7sC0qs9ACr2nA=
Subject key identifier:   D1:35:BA:5F:53:75:5A:A3:48:24:59:0A:C8:66:46:20:46:2A:49:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47FB95A9B10D41D6F4DCA267052CB6C9AC73065E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa
Signing time:             Tue 08 Apr 2025 00:41:58 +0000
ROA not before:           Tue 08 Apr 2025 00:41:58 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.47.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fb:95:a9:b1:0d:41:d6:f4:dc:a2:67:05:2c:b6:c9:ac:73:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:41:58 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=1b13bc3c58ba891eb59ba7ed535153095a5b71f92556a5858dd0fb8dbf306402, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:49:d2:51:08:03:bb:eb:e3:5f:dc:c7:1c:
                    b4:0e:79:4b:0f:c7:4d:a4:f1:89:db:8d:13:cd:0c:
                    44:68:fa:07:65:f8:53:1f:8c:cb:94:6c:c7:71:c3:
                    a7:c0:aa:79:8b:87:da:a5:41:a7:5b:a8:bf:59:e1:
                    15:4a:4c:11:d9:99:de:76:a9:74:28:8e:14:1f:c8:
                    bd:e6:5d:de:ae:46:70:de:56:fc:43:9e:26:d1:c8:
                    50:d5:29:a2:ae:75:46:11:07:98:72:21:74:ec:ed:
                    ed:26:79:a5:69:65:9b:77:1c:7a:f8:73:b1:d3:24:
                    ff:f1:dc:f8:73:dc:fc:a9:c7:66:04:85:55:1e:12:
                    5b:9e:19:2b:0e:42:d3:39:1e:c5:56:58:a8:c3:da:
                    0d:d4:d0:98:fb:03:d0:c9:9d:ca:5f:e7:01:cd:c9:
                    1c:87:8c:f0:53:28:9a:19:ea:14:b4:54:eb:d7:6c:
                    be:2e:0b:5a:d8:1d:72:bb:1f:1b:8f:7f:ce:cb:2d:
                    22:93:ca:d5:10:52:52:3f:99:7a:cf:f6:95:b1:1e:
                    53:b5:8d:0f:7c:ab:1e:01:8f:35:8a:0d:71:9f:d8:
                    c3:c9:b0:60:a1:f6:1e:48:95:23:ca:fd:94:43:6e:
                    28:ab:7f:d8:2f:19:92:a1:83:4b:ce:9f:b2:bd:96:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:BA:5F:53:75:5A:A3:48:24:59:0A:C8:66:46:20:46:2A:49:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790971bf-41cf-4aa6-8e90-bfe884c9a6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:34:00:6f:e9:98:89:24:60:6f:b8:b7:eb:20:f9:30:75:bf:
         b7:08:33:20:15:34:07:67:55:0a:1a:74:1f:6f:29:67:db:7b:
         cf:e5:48:94:b6:dd:4d:c5:23:cd:aa:b9:e8:bf:c3:b0:00:50:
         28:e5:da:86:3f:34:33:99:6a:2b:84:74:58:bf:7d:6a:6f:45:
         1e:fa:df:fe:d9:70:02:eb:98:1a:6e:48:ba:f9:1b:25:88:84:
         7b:8a:98:62:8a:36:f7:2e:c0:3f:fe:d8:40:31:fb:11:d9:63:
         fe:8f:34:d0:13:15:5b:80:b5:ca:8c:99:50:32:8c:3d:e2:f3:
         cd:c7:17:05:81:c8:2d:da:0d:78:a2:d2:45:e5:c9:e8:d0:cf:
         b8:82:a7:59:b1:b1:ac:68:f2:34:89:cd:1b:57:aa:ee:0e:cd:
         1f:3c:69:2d:2f:8b:b5:f1:8a:df:8d:90:93:88:1a:7c:77:79:
         bd:ea:04:e4:10:82:d3:b6:2d:3a:6a:01:26:d2:42:d6:49:83:
         52:ab:f2:71:da:f8:8b:da:ba:85:83:a4:6f:ba:41:16:d1:69:
         fa:df:69:bd:da:f9:cd:87:fe:37:10:9d:f1:d4:54:2e:b2:04:
         b8:e6:c5:56:78:15:a6:40:3b:02:2c:b1:8c:f6:a1:ae:02:4a:
         35:e7:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:33 2025 by rpki-client