Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
File:                     c53a0576-1e08-4fba-a734-2cef153c43cb.roa (raw, json)
Hash identifier:          RAIs99i6qx0Vc88yYe/7z4XbDZheKY3kxxzPNT7J8zw=
Subject key identifier:   97:1D:9A:45:54:20:AD:FB:CF:E9:22:0E:B5:20:1C:58:70:34:08:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       188F2DEE8A7F1C8569CEBAB682FD01B3195976E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa
Signing time:             Wed 28 May 2025 00:01:17 +0000
ROA not before:           Wed 28 May 2025 00:01:17 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.133.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8f:2d:ee:8a:7f:1c:85:69:ce:ba:b6:82:fd:01:b3:19:59:76:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:01:17 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=5150937bd422792098f04df94a554b69a7cd14cc749bf0cca566a9cec1044090, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:e0:b8:8e:48:b8:be:32:4c:a8:5c:7f:38:
                    43:56:2f:f2:e2:b8:c8:1a:95:d1:2f:ec:39:7d:86:
                    6f:83:41:14:33:47:09:0f:61:48:5d:a3:cd:f0:cb:
                    6b:e4:eb:0e:4d:4f:45:eb:d3:e6:04:9d:c6:84:19:
                    dc:a2:12:10:2b:e2:62:61:6a:c2:87:ba:c2:41:62:
                    8e:97:7e:18:36:15:8c:f6:99:5f:af:ff:8b:b7:f6:
                    97:31:96:d6:59:cd:57:71:b2:90:47:fb:2c:69:69:
                    c2:95:81:39:4f:26:40:9f:9c:63:4c:90:a7:5e:59:
                    c6:5d:77:f7:ce:66:e4:ba:f5:53:4a:a6:94:dc:d9:
                    24:7b:22:cb:67:8a:e9:7a:b9:02:fe:99:3f:b4:b1:
                    db:60:3f:af:57:cb:54:22:41:1c:1b:5e:42:99:d1:
                    cc:2d:40:e9:f5:8b:82:9a:36:48:bb:ec:d0:bb:30:
                    d9:e2:2b:49:e4:f8:53:4c:67:a6:fa:d5:a3:30:30:
                    59:60:ed:30:6e:6e:41:31:19:08:d3:bf:e2:4b:68:
                    16:fc:42:41:47:78:26:e9:92:48:27:30:7c:8f:5f:
                    38:8f:3f:21:d7:6c:31:ca:0d:42:47:d6:9a:3e:ea:
                    1d:0d:33:20:d8:68:66:4e:d4:c7:1f:6e:28:62:41:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:9A:45:54:20:AD:FB:CF:E9:22:0E:B5:20:1C:58:70:34:08:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53a0576-1e08-4fba-a734-2cef153c43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:f0:1c:b8:e0:61:39:ed:ff:30:0b:79:e9:76:48:4d:91:
         29:82:d4:87:48:fa:27:e4:20:fc:dd:3c:e6:05:a2:60:5f:09:
         39:58:66:e4:4c:a6:10:cf:56:be:fc:84:c0:18:e1:71:4a:3a:
         fc:d8:48:aa:14:da:f7:a3:c6:b9:10:f7:af:cd:ab:69:70:31:
         7c:1a:05:c2:b1:1b:49:ac:f3:b9:72:20:75:44:53:27:6c:60:
         99:fe:3f:5b:59:33:75:a2:a4:47:07:21:60:8e:99:f3:6c:38:
         81:e7:e7:35:4d:70:02:58:60:bc:57:25:16:a0:1e:09:91:f0:
         15:09:13:4d:bf:ef:e7:87:aa:8f:20:0e:e5:3d:7f:e0:ef:35:
         f7:71:03:ac:aa:7f:b9:07:0d:58:19:c2:59:de:f4:b7:67:a0:
         ff:26:b6:4f:59:af:e1:ec:f6:ce:28:b5:a5:06:b7:46:24:49:
         18:de:47:ba:29:be:15:4f:32:6d:67:f5:35:b5:a5:10:d2:21:
         93:28:f2:c9:61:60:3f:c6:2b:b4:0f:43:4e:cc:be:79:4e:28:
         de:8c:65:7d:c1:65:ed:7b:3b:5a:a3:3d:4a:1b:5a:75:b5:ad:
         ee:3f:33:ac:f5:af:91:63:10:db:af:76:aa:f6:4f:00:41:6e:
         28:ee:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:30:22 2025 by rpki-client