Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa
File:                     c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa (raw, json)
Hash identifier:          9pnYuDTuHaUFB/GY+ZIexKTvc7xdPYklWMWj9Ebj2WQ=
Subject key identifier:   23:A2:B3:D8:84:CF:E8:55:77:96:4C:BB:D6:BB:4D:52:5E:C0:3B:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FC73CA8847D323D3A25FC0655D75123753243D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa
Signing time:             Fri 05 Sep 2025 00:21:08 +0000
ROA not before:           Fri 05 Sep 2025 00:21:08 +0000
ROA not after:            Fri 10 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.250.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c7:3c:a8:84:7d:32:3d:3a:25:fc:06:55:d7:51:23:75:32:43:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  5 00:21:08 2025 GMT
            Not After : Oct 10 23:59:59 2025 GMT
        Subject: serialNumber=a8c21600766af00d9885dcf077e66c6ac90a28ec0f68ca8e42d829d7421267bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:f9:fc:98:ab:8d:85:2e:84:c1:16:c3:c7:
                    65:25:e7:6c:cd:8c:84:51:9f:f9:14:00:d5:35:b7:
                    f2:e6:ea:48:84:a5:7a:d8:66:4d:1b:a6:0a:21:2f:
                    40:64:52:82:39:07:f9:76:13:e2:1c:09:8f:72:b5:
                    a9:ab:15:40:13:fe:9a:57:2f:3e:1c:b3:0c:c7:25:
                    be:f0:17:ea:4b:0e:e5:5d:2b:a6:22:b9:0e:0f:d3:
                    63:79:43:60:8e:54:f4:ef:f8:57:18:87:5d:8d:73:
                    fc:fe:f5:c3:14:e7:1f:e4:05:b5:da:61:58:d0:10:
                    26:ca:ff:3f:bd:e9:4a:5d:a5:13:13:0e:12:ca:d9:
                    4b:9b:be:d5:d7:14:3b:7c:da:44:6d:1b:d6:2f:86:
                    d3:55:68:58:5a:eb:28:74:69:5a:f5:f7:2d:33:5c:
                    58:d9:a4:63:58:02:00:15:0e:68:aa:f9:1e:ba:c8:
                    64:fc:dc:ad:66:ce:a2:e2:1b:0f:9c:1c:17:fd:90:
                    2e:0a:a4:f5:c9:00:c7:c1:0f:1f:8c:2c:fe:dc:b7:
                    e5:9b:d5:89:b2:40:33:22:41:ba:5f:94:e7:6f:06:
                    41:42:21:37:d1:96:76:02:f3:31:d9:5a:a8:87:c5:
                    4b:f4:83:f5:a5:85:fd:bc:78:86:89:5c:d8:fe:c3:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:B3:D8:84:CF:E8:55:77:96:4C:BB:D6:BB:4D:52:5E:C0:3B:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1519bd4-803a-4d79-9743-3ed1df6ffb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:87:cb:dc:bc:df:41:13:91:fa:26:6b:7b:8f:f7:84:9e:
         c5:70:4e:6f:0b:7b:69:b8:11:16:53:ad:35:70:0c:83:9f:74:
         dd:00:e6:60:0d:2b:7e:61:e1:3e:3b:cd:46:b2:67:45:53:aa:
         a3:34:b1:70:f8:c8:43:fe:68:9e:00:d6:a7:06:2b:20:2e:8d:
         03:26:6b:c1:19:e3:f6:6a:e0:71:bc:bb:f4:86:59:7d:b2:89:
         b4:e1:c4:90:dc:23:33:2a:75:33:a7:43:e4:76:89:1f:c2:99:
         35:b6:7f:42:df:48:09:4c:a8:24:b9:ad:c7:ec:41:ff:17:8a:
         e7:09:8b:a6:bd:d4:b7:cc:35:00:cc:12:51:6a:6c:10:16:28:
         0b:8f:2e:86:84:58:46:4f:f3:e3:bc:72:7b:ce:46:f7:65:e7:
         25:0a:40:eb:c0:f0:23:10:82:d7:f0:25:6e:df:35:18:fd:ec:
         27:95:ca:03:80:bf:ad:40:5f:8b:c6:40:7b:b1:be:51:95:77:
         03:ce:c3:a1:95:0a:59:65:b9:5e:5b:fc:9d:58:b2:79:72:49:
         ba:3d:a9:61:4f:6e:36:05:59:fd:8b:0e:0e:0d:43:4e:ef:2b:
         e3:36:fd:e3:02:54:5a:b7:9e:ec:94:1a:c5:cf:6f:aa:9c:b2:
         18:a7:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:05:50 2025 by rpki-client