Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa
File:                     940bd107-87a1-467d-a6ff-57aca7389c67.roa (raw, json)
Hash identifier:          gnarT23YdbPS+ioIOSJsLf2zs7nc70KcOu/qkQkHcfk=
Subject key identifier:   BE:CB:4C:5D:9E:B2:BF:36:F0:30:2A:F2:AC:0D:95:4A:E3:AC:43:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D9EDAADF27766B86DB8359A7CCCECDAB3F8B983
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa
Signing time:             Mon 02 Jun 2025 16:01:52 +0000
ROA not before:           Mon 02 Jun 2025 16:01:52 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:da:ad:f2:77:66:b8:6d:b8:35:9a:7c:cc:ec:da:b3:f8:b9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 16:01:52 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=c055bf4abdbdc0489113e65aa5f7ecf7cfdab5091ecf9104103c284d4a510c89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:a0:7e:6d:5e:eb:5a:4c:cc:83:f5:2c:fe:
                    d7:32:1f:e3:f7:cb:33:51:0e:31:eb:cc:32:04:06:
                    59:c1:de:55:3e:69:56:1e:e5:c0:32:63:e6:45:55:
                    ad:44:62:0d:dd:00:1d:bb:a1:4d:e3:0c:0f:c8:53:
                    fb:57:ac:68:75:cb:35:4e:24:9c:a4:ea:bc:ae:e2:
                    89:2c:55:f8:e7:ea:85:f0:e5:92:e0:85:b4:33:b0:
                    27:a4:c2:5e:6b:55:a2:06:04:f5:ec:b7:46:41:68:
                    aa:78:2c:e9:66:9e:60:25:21:4a:43:f9:f0:1e:ed:
                    42:82:e3:b5:ae:ab:3d:52:c5:68:93:50:47:db:9b:
                    1b:72:3f:52:2a:c8:97:f3:07:40:53:e3:3c:c5:13:
                    03:43:69:d0:78:cd:a9:58:f4:cf:48:af:64:58:7b:
                    5d:aa:9d:fa:e6:67:68:7d:3a:e0:97:bd:9f:67:d7:
                    7e:9d:d9:67:09:97:ba:c6:7e:3e:b0:62:1e:25:75:
                    78:97:28:b4:e9:e1:0b:f8:ed:22:ff:f2:21:5f:67:
                    f3:1f:6f:ef:6e:d0:74:f4:f8:c6:49:f1:f1:09:66:
                    ae:d4:69:e9:f9:98:4c:b6:c2:68:50:51:b9:5a:73:
                    c4:ad:f2:a5:90:9a:57:42:dc:c3:f6:bf:fa:36:33:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:4C:5D:9E:B2:BF:36:F0:30:2A:F2:AC:0D:95:4A:E3:AC:43:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940bd107-87a1-467d-a6ff-57aca7389c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:61:05:55:e5:e8:d5:c9:74:23:12:0c:b8:17:08:91:b3:52:
         26:74:79:0d:61:71:8b:9e:8f:02:62:7f:2f:cb:3e:e9:97:d5:
         fe:cb:f1:36:db:24:27:f9:ab:d3:df:67:ca:8c:5a:a6:91:8c:
         da:42:d1:a8:e8:9d:7f:c9:63:69:5f:c0:df:f5:86:64:b7:f5:
         49:ca:df:a4:13:91:98:2e:70:d4:c9:fb:b3:29:d5:3a:63:36:
         16:5e:01:4f:7a:c5:77:5a:ed:e0:74:10:e8:f2:b5:d7:d7:f6:
         8c:d4:5c:5c:5b:35:72:16:29:f5:2a:16:da:93:e2:cc:3b:8b:
         ec:97:92:4f:6e:51:fc:3c:4e:01:ae:8f:8d:d6:d6:f4:75:49:
         25:ee:6d:38:35:be:e8:de:84:8a:5b:97:ee:3c:c5:3d:b7:99:
         d0:46:d6:b9:9d:17:8c:9d:82:00:27:11:b5:c4:7d:0b:31:b3:
         aa:08:91:ca:05:fc:4a:07:65:bb:f9:5c:c4:91:21:91:c3:a2:
         9a:63:2f:38:9b:67:1a:d2:3a:ca:a5:69:6f:73:e3:5a:14:65:
         5e:be:86:69:53:75:bc:1c:fc:52:b4:e4:5f:06:9a:9e:56:73:
         72:39:d8:9e:35:0b:16:0c:c4:81:6b:fd:ea:fe:e3:ac:fe:08:
         ad:b1:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:24:41 2025 by rpki-client