Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f92332-54db-4d66-be7a-cf76fc42d00c.roa
File:                     b7f92332-54db-4d66-be7a-cf76fc42d00c.roa (raw, json)
Hash identifier:          iJEvHQGaSmlBXg/ha41P8ucA7799yJoU1p+GVO17WCE=
Subject key identifier:   D7:51:63:5F:58:82:7B:73:FD:62:88:54:4A:F2:51:26:76:EA:12:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F0119803A8D669502F243B4975317A52A0A85A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f92332-54db-4d66-be7a-cf76fc42d00c.roa
Signing time:             Wed 28 May 2025 00:31:54 +0000
ROA not before:           Wed 28 May 2025 00:31:54 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.241.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:19:80:3a:8d:66:95:02:f2:43:b4:97:53:17:a5:2a:0a:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:31:54 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=7d43a17e47c900a066b1fd2fb9b0d50958310db5f2e0dc4c0ad1d625da8d68b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:d6:7a:80:17:12:b3:f1:d5:2f:20:d4:ed:
                    f9:48:b6:61:84:e2:a1:5d:93:e0:27:d9:f5:75:6c:
                    f9:e9:be:e8:3d:00:0a:91:f9:0c:c8:91:48:cd:9e:
                    3a:8a:0b:17:29:6c:5d:31:67:e3:67:16:08:35:aa:
                    66:80:bb:16:73:7b:a7:1f:94:59:b0:10:bb:0c:2d:
                    58:a0:93:fa:51:3b:eb:8e:38:1f:75:5f:d0:20:a5:
                    1f:18:70:87:4f:3b:b8:45:4f:15:fb:c4:34:ff:a2:
                    d6:d3:d7:35:d8:a5:f5:54:f9:7c:c7:cc:9d:5b:99:
                    64:8f:67:66:d4:22:f6:96:63:16:e0:68:85:cb:c8:
                    4f:61:b0:a6:2c:b8:ed:a3:51:a6:ad:9c:20:09:9c:
                    09:3e:2d:fc:1b:fd:92:f8:39:ab:3f:51:5d:7d:24:
                    07:4c:42:42:5a:2e:6e:f1:c5:91:7f:0c:4e:a5:b4:
                    fd:f0:75:a6:29:e0:2a:e6:5a:39:6d:ef:25:c9:f2:
                    c8:f5:cb:2c:8a:f7:23:96:59:d0:6a:c1:72:fb:2d:
                    86:df:db:60:8a:11:92:53:98:22:1c:2f:0e:75:d6:
                    07:f0:1f:a1:dc:c9:ed:44:82:86:6a:06:d1:6d:a9:
                    0d:be:09:9c:03:8f:7a:7e:98:aa:50:33:70:6b:7b:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:63:5F:58:82:7B:73:FD:62:88:54:4A:F2:51:26:76:EA:12:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f92332-54db-4d66-be7a-cf76fc42d00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:14:a6:56:6f:48:3b:b3:1e:8a:70:ae:c8:e4:97:a3:63:cf:
         f9:79:aa:2b:2d:df:2c:5e:8d:df:34:f9:11:4c:31:c5:99:18:
         94:33:04:ed:69:93:98:a2:a1:6f:5c:6b:44:35:07:b3:cd:61:
         2f:8a:0e:fa:95:47:79:1d:bf:59:e6:09:2d:65:35:41:48:e4:
         e4:ec:60:76:7d:3e:56:4f:09:01:75:b4:bf:c1:3d:64:ef:e1:
         e1:6d:d1:8b:ff:1c:b3:34:15:7d:e9:87:bf:94:11:df:ec:47:
         17:d7:c4:39:5e:ad:6f:c5:bb:4f:68:fa:b7:1a:8e:c9:35:06:
         af:64:a4:4f:1f:24:82:10:74:85:cd:8b:26:d3:35:f0:2a:d7:
         61:aa:62:fd:db:ff:ce:93:5a:46:07:dc:d7:9e:44:7d:a8:95:
         06:b7:2f:83:82:44:59:59:8b:ef:ca:60:45:ea:03:d6:42:02:
         72:cd:e9:8e:d7:44:d9:f6:51:f5:ba:a0:5d:37:7d:28:20:d7:
         6b:4d:5e:bf:20:b3:a6:bc:f8:e8:15:41:ce:af:1e:9b:25:df:
         11:32:e0:1e:e0:4f:0e:c7:6c:d5:76:7d:e6:eb:16:9b:aa:25:
         32:4e:c4:18:9e:0c:a6:7d:8a:60:39:54:6b:65:3e:69:bc:f5:
         76:d7:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:21:48 2025 by rpki-client