Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b7d5eb1-ece9-4a7c-a1c6-3b763b4a12c7.roa
File:                     9b7d5eb1-ece9-4a7c-a1c6-3b763b4a12c7.roa (raw, json)
Hash identifier:          epZKju/JHKhJEMnuB0nTL+OT2qZrpLjYlXcy9DsbbZw=
Subject key identifier:   29:A0:84:49:E0:5E:0A:A1:EC:73:6A:80:0F:4B:4D:49:03:58:6E:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AB2479BF4B3D7598BA0783AB306C5D5C181D2AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b7d5eb1-ece9-4a7c-a1c6-3b763b4a12c7.roa
Signing time:             Wed 27 Aug 2025 00:32:07 +0000
ROA not before:           Wed 27 Aug 2025 00:32:07 +0000
ROA not after:            Wed 01 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        114.56.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:47:9b:f4:b3:d7:59:8b:a0:78:3a:b3:06:c5:d5:c1:81:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 27 00:32:07 2025 GMT
            Not After : Oct  1 23:59:59 2025 GMT
        Subject: serialNumber=f03265d1bf3ddf8d14f409f449266b68426f7b4ac82f468d5bc2826e80e7a5c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:22:79:eb:54:a5:1b:1e:7d:e1:6a:df:01:
                    79:3a:22:df:72:20:31:ff:c4:19:41:b5:c9:82:54:
                    21:77:1d:bc:f4:4f:69:98:20:28:77:c1:98:45:13:
                    70:b6:b7:f9:ad:37:24:ef:9d:1b:19:dd:d8:19:9b:
                    9b:11:22:43:f0:5d:5a:e0:63:72:73:20:5d:0a:b7:
                    0c:f6:77:d0:ac:38:53:a0:66:da:52:38:45:8f:f7:
                    93:b1:ba:0a:c4:fc:b1:07:c2:84:b1:a0:50:0e:11:
                    15:ce:40:2f:7d:db:47:bc:e8:fd:2a:52:5d:21:fb:
                    53:ac:4b:bc:5d:41:fe:5d:e8:c0:ad:ea:b3:c0:bb:
                    e8:ff:73:c7:bb:59:c1:cf:0c:23:ee:88:3d:4b:a5:
                    68:1a:ef:38:db:dd:69:9d:3b:2b:ad:e4:8f:8e:c3:
                    7b:c5:4c:cf:83:34:a1:d0:75:0f:44:1d:e0:02:72:
                    f8:db:75:fa:fb:36:b2:0c:26:ca:e8:ff:d5:a0:98:
                    9f:e6:6c:c2:2c:2d:00:8e:86:8c:58:b3:77:37:23:
                    46:10:3a:20:d6:42:88:32:bf:5d:ad:b2:b9:ce:22:
                    da:1e:c5:b4:a4:65:6b:cf:83:e0:7c:2d:95:f2:71:
                    54:cb:6d:a3:80:bd:cc:ce:67:69:20:7f:a2:dd:82:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:84:49:E0:5E:0A:A1:EC:73:6A:80:0F:4B:4D:49:03:58:6E:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b7d5eb1-ece9-4a7c-a1c6-3b763b4a12c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.56.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:72:16:6f:f3:27:a0:d1:5a:e9:78:91:c0:cd:04:ea:d5:6a:
         f1:24:7a:50:ea:56:2f:99:60:aa:81:50:48:86:d6:8c:73:30:
         66:6a:29:ea:2c:08:c4:aa:b6:86:c1:16:ef:6e:ba:76:d6:e6:
         f1:dd:98:73:75:ae:c3:9e:f0:87:40:8f:5f:6f:00:19:28:fd:
         88:d0:17:7a:c0:d7:4c:a2:40:54:96:5b:7d:3b:e5:1a:1e:79:
         7e:9c:0b:41:53:11:f6:8d:e5:f2:3e:48:8a:11:66:60:5f:71:
         38:18:d9:2a:6f:9a:3c:74:31:d3:3d:73:06:c0:af:db:e2:e3:
         5a:28:53:92:e5:f9:1c:8c:b4:0c:e6:0b:77:70:c1:3f:9c:d1:
         b3:34:59:87:b0:ba:86:0b:96:5e:ce:27:f2:64:c1:b7:76:f0:
         35:02:47:fa:68:75:b0:b8:30:18:fb:4b:a2:30:09:50:44:b6:
         60:31:ad:94:1d:f6:47:ff:d7:ae:ee:21:19:7b:90:b4:8c:50:
         1b:f6:30:9e:10:c6:bb:c5:e8:41:c1:6e:a5:fc:9c:5e:1b:9b:
         f3:4c:7f:6b:14:ab:28:f7:52:5b:2c:90:b1:0f:38:af:55:d6:
         ad:3d:6e:c0:45:12:6a:15:2b:1c:ae:f4:b6:72:8e:b4:81:1f:
         27:ed:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:03 2025 by rpki-client