Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa
File:                     e18127e7-1573-4e16-8284-95afb7316aa5.roa (raw, json)
Hash identifier:          89UDNbrUi4hGLkt2bbDbzXq1FFwMILFIosMZ+xvvwFM=
Subject key identifier:   FB:CA:0C:D9:A7:EE:42:0A:A7:BD:61:8D:50:06:76:72:5B:0A:B1:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6113A013DC91970811C37175FB2A5D146D434725
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa
Signing time:             Mon 01 Sep 2025 15:30:29 +0000
ROA not before:           Mon 01 Sep 2025 15:30:29 +0000
ROA not after:            Mon 06 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.137.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:13:a0:13:dc:91:97:08:11:c3:71:75:fb:2a:5d:14:6d:43:47:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  1 15:30:29 2025 GMT
            Not After : Oct  6 23:59:59 2025 GMT
        Subject: serialNumber=0c891ccbad2da77a6db2b5b927ab9ce84d9952ea2b07b078bae453beb8a58a04, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:90:7e:8d:72:3c:1c:ec:71:03:b7:4d:e6:
                    4e:76:bc:47:cd:1f:5a:37:33:27:33:ff:ac:f0:68:
                    fd:08:03:a3:4a:53:11:5f:37:14:2d:6f:30:ee:1f:
                    72:e3:b3:cc:fc:7e:d0:0b:87:35:f1:11:e5:20:01:
                    f6:13:53:65:c0:04:a7:7f:7d:14:63:0c:f4:95:cb:
                    c5:15:a1:f8:26:12:6c:d8:91:04:83:4e:70:df:a1:
                    4e:5b:b7:73:d3:a2:89:1f:9b:b4:63:4c:eb:e5:62:
                    c2:b4:1a:15:9b:3d:b1:e5:34:08:c0:d2:5b:98:19:
                    6b:65:68:9c:c5:26:eb:ab:67:af:40:a1:72:f5:37:
                    d7:e9:6b:d1:73:1d:66:c5:ea:8f:f3:cf:d8:33:73:
                    3b:92:f5:42:07:4d:c3:65:b4:f8:54:79:91:e4:0a:
                    1d:d5:d9:a7:3c:6b:89:b5:13:99:bf:63:19:fa:53:
                    ac:ee:c8:5c:c2:27:35:00:39:41:9f:d5:e4:b7:40:
                    db:6f:40:22:23:f8:88:df:1d:9d:16:f5:a1:21:56:
                    e2:ca:3a:22:c4:5d:ae:5c:a6:85:d0:47:02:93:93:
                    4e:b9:76:80:b0:88:dc:dd:59:47:13:fc:16:20:c0:
                    07:2a:d2:b7:f1:60:fd:0e:8f:bb:94:cf:c4:cd:86:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CA:0C:D9:A7:EE:42:0A:A7:BD:61:8D:50:06:76:72:5B:0A:B1:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e18127e7-1573-4e16-8284-95afb7316aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:69:39:84:32:79:3e:56:74:e2:3e:5f:e5:f4:40:aa:b8:
         8c:0c:6c:de:ed:ec:67:76:8e:87:79:7f:e9:cb:0f:5d:e3:f7:
         1c:90:50:3d:47:19:09:57:ab:90:11:c2:39:d8:4d:11:09:0c:
         af:7a:77:f8:e5:d0:92:10:f5:f1:64:be:e1:d4:b5:9e:53:9d:
         be:23:d8:b6:99:81:3f:fd:f5:05:17:eb:00:bb:ff:a3:19:c8:
         b0:fc:54:ad:87:0e:1f:48:2c:fd:c8:a6:a4:32:70:ef:a6:1a:
         06:05:f7:ff:41:4d:e3:01:85:37:ab:c8:f0:68:56:db:83:dd:
         11:27:6e:87:99:f8:be:72:df:31:9a:35:ca:01:ce:fe:db:10:
         ca:24:76:c7:de:32:0f:97:14:68:73:35:11:7c:16:49:5f:a2:
         0c:ab:7b:1a:5a:80:55:8e:99:ee:32:8a:0d:ad:49:5c:3f:94:
         1c:cc:c6:b5:f9:6e:36:95:4f:31:5c:b7:93:94:1f:b6:5c:20:
         1c:72:d3:74:27:19:49:ff:95:48:49:21:d9:46:f6:98:a2:00:
         38:9c:d7:87:16:be:ce:85:0a:48:16:81:4a:60:17:bd:b6:68:
         d2:30:b5:66:19:54:f2:1f:ed:14:9d:8c:4e:3f:2a:14:3d:bf:
         ef:05:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:32 2025 by rpki-client