Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90847990-3747-467c-926a-f5f75f71faf7.roa
File:                     90847990-3747-467c-926a-f5f75f71faf7.roa (raw, json)
Hash identifier:          8eIivKOBPMB2WqLHIMZjxY8s8zG4M9AA4rLaqiaJ+PM=
Subject key identifier:   05:CE:A4:90:DB:53:C1:BF:DC:EA:C3:6C:BB:64:D5:9F:8F:F8:EC:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E43FD9EC1BDEADE0921F16505AA79B9DE7682F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90847990-3747-467c-926a-f5f75f71faf7.roa
Signing time:             Tue 27 May 2025 00:20:28 +0000
ROA not before:           Tue 27 May 2025 00:20:28 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        173.83.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:43:fd:9e:c1:bd:ea:de:09:21:f1:65:05:aa:79:b9:de:76:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:20:28 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=f89c5779bb99be452a406e89fd968a9d41456d2afbdf6b8aa6a15be89b5037c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:83:d5:5f:d3:53:f3:70:e1:a2:69:24:1a:
                    ec:29:b0:c4:d9:1b:f2:92:fc:08:ac:52:46:9e:fd:
                    9b:6a:18:17:15:2e:2b:ee:35:26:d6:67:4e:f3:8f:
                    a0:30:e6:a1:5b:a5:e3:15:0f:54:35:37:30:c7:41:
                    66:21:cd:00:f6:65:e1:31:72:3d:8b:b7:ff:11:e2:
                    ad:85:f8:04:df:b1:ad:16:f8:73:10:48:c5:5b:9f:
                    cf:2b:aa:3e:d5:ff:c3:6f:1f:49:83:5d:6d:7d:52:
                    18:fd:e3:69:78:2a:e5:06:5c:0b:13:e2:76:a2:f5:
                    bf:b2:42:e0:c2:f3:95:ec:bd:c3:30:4d:44:af:40:
                    27:97:0e:ab:74:80:75:05:c3:78:80:6f:46:59:07:
                    4b:ed:06:18:db:eb:cd:a7:d3:2f:6a:9e:99:b4:3e:
                    21:b1:d9:fa:d9:ac:4b:d3:31:68:66:e2:c7:8c:a9:
                    7a:e0:b9:00:20:d7:fb:c9:7b:bd:3d:d9:2b:8b:a9:
                    5c:2b:84:22:5d:16:1d:3f:50:fd:d4:89:64:ba:48:
                    7a:16:43:ab:c1:70:15:17:dd:fd:9b:16:8b:e5:3f:
                    29:d1:12:16:b0:40:c1:f9:a2:78:f5:59:86:7f:7b:
                    e5:e7:ad:98:62:f0:1a:e8:76:bf:1a:b4:31:2e:0c:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CE:A4:90:DB:53:C1:BF:DC:EA:C3:6C:BB:64:D5:9F:8F:F8:EC:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90847990-3747-467c-926a-f5f75f71faf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:fc:11:60:2d:ea:b8:23:ff:06:21:4d:ec:f4:73:ee:02:15:
         66:2f:4d:5e:40:7b:b9:73:e2:15:fb:ec:82:0b:0f:03:7c:f9:
         9d:a3:19:cf:9d:a1:34:cc:55:ae:a8:37:74:05:ed:fa:9d:a8:
         f9:35:6f:43:f3:27:41:db:0c:85:7a:3a:95:b8:d0:1f:65:41:
         8e:17:ef:57:23:ea:d1:28:2e:7f:c6:e5:f8:d7:9f:11:c5:8d:
         66:05:e7:93:00:69:66:e4:76:95:a7:15:29:e8:16:fc:8b:f3:
         1b:75:d2:2d:5b:2c:f6:77:0c:b7:7b:67:9e:d0:67:39:33:00:
         54:8d:6f:7b:78:73:cb:58:e6:6e:39:c2:a3:ce:55:b5:ec:cd:
         4e:47:a6:4d:f7:2a:5a:67:7f:bd:28:aa:9f:96:ee:59:46:32:
         14:3a:3c:89:e2:9b:4d:a5:a9:46:ae:2a:21:2c:a8:a4:c5:f3:
         12:e7:48:84:53:76:7f:4c:f9:ab:ec:ee:f0:a7:ee:3d:55:0d:
         ee:35:9b:ab:b7:26:67:89:f3:4f:d0:a5:08:56:6c:35:65:b5:
         12:57:79:a4:c0:ab:c8:82:de:59:25:ae:28:30:94:e6:8f:fa:
         d2:ab:2c:6e:4b:24:80:06:88:bc:54:62:9e:48:2c:59:b8:86:
         f1:0f:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:27:24 2025 by rpki-client