Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa
File:                     e4274e13-b3eb-47ca-8f50-e130d402b187.roa (raw, json)
Hash identifier:          JCqMT44q7kzLchm9tNOACVUDHtTOmO/+d6N9IxHwBfU=
Subject key identifier:   22:E2:B3:B6:04:C9:29:AC:9E:0C:32:D0:0D:6E:29:03:02:3D:D1:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BF5FFCEC01E67283C96D34510FECB1A0972F367
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa
Signing time:             Sat 06 Sep 2025 00:31:20 +0000
ROA not before:           Sat 06 Sep 2025 00:31:20 +0000
ROA not after:            Sat 11 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.167.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f5:ff:ce:c0:1e:67:28:3c:96:d3:45:10:fe:cb:1a:09:72:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  6 00:31:20 2025 GMT
            Not After : Oct 11 23:59:59 2025 GMT
        Subject: serialNumber=c272061c33381e5d688ec18b0092d32064a8cbdd3f3aff5eee0aa35a1c46b270, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:ee:b1:1e:2a:3c:48:25:f7:39:53:b6:55:
                    6a:e7:c7:d6:58:37:b8:c7:57:1b:2d:08:ba:54:63:
                    03:a8:8f:dc:7d:2d:0d:ac:12:e3:42:9b:1a:12:d5:
                    fb:34:03:0d:48:61:72:36:21:b7:26:86:dc:6c:bc:
                    3a:52:32:81:e6:e3:3c:7a:01:7b:bc:b5:c8:8a:30:
                    f0:1a:36:ac:2e:4d:9d:f2:e9:e4:42:d0:c8:d2:2a:
                    b2:33:9c:2e:98:7b:5a:e0:ed:08:2d:54:63:c4:c4:
                    c3:87:74:75:94:b9:1b:92:c3:bb:2f:0e:9e:69:85:
                    31:ef:f3:b0:f6:3e:af:18:4e:c6:a7:e2:aa:54:77:
                    13:e1:9b:dc:ed:97:21:61:37:8a:d6:86:5a:c6:78:
                    c2:61:8d:be:33:c9:b8:59:0d:84:35:88:79:d3:44:
                    8e:4b:07:73:4a:98:99:96:b7:0c:1c:39:da:43:9b:
                    69:03:d9:18:15:8a:fc:55:2c:b9:cc:bf:3d:58:24:
                    1d:20:b2:0f:6f:01:2e:6a:65:7a:ad:f4:59:d9:88:
                    b0:0b:57:c9:6a:87:4d:ff:95:2a:81:8a:03:2e:d7:
                    4f:e2:16:c7:0f:b7:6f:27:70:bf:c2:c1:6d:b6:91:
                    f8:32:18:46:bf:31:e8:2a:7e:d8:96:3d:f6:77:c5:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:B3:B6:04:C9:29:AC:9E:0C:32:D0:0D:6E:29:03:02:3D:D1:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4274e13-b3eb-47ca-8f50-e130d402b187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:70:a2:1f:a5:5b:23:43:15:b7:b8:67:84:83:14:e8:de:
         5d:e8:ef:e5:b6:62:12:d9:bc:6b:f8:07:97:2e:ae:cb:99:5c:
         94:81:06:e2:7a:b8:57:f3:8a:5c:00:d3:b4:27:1c:3e:91:da:
         01:c9:19:78:da:8c:b4:ca:6d:ae:03:85:80:24:dc:d7:5f:83:
         56:dd:65:70:4a:64:90:aa:24:c5:32:42:0e:11:31:27:40:5e:
         04:c3:dd:9d:fe:1b:7a:3c:77:64:8e:9e:79:39:90:9f:da:04:
         c2:9a:d7:0a:78:c5:56:e2:1d:13:6f:ae:2a:ae:40:b6:db:23:
         a3:85:6d:2d:64:39:a6:67:23:13:07:2a:51:82:a9:44:e1:0a:
         a0:60:4e:de:c1:88:29:f3:fd:05:b0:95:0b:53:22:2f:28:13:
         c6:51:f8:ae:f5:83:0b:7a:2e:c0:6d:eb:38:c3:e0:bc:50:06:
         a3:2c:e1:c8:1f:f1:c5:ad:8f:ae:de:a3:31:44:33:f8:b4:0d:
         65:fc:f2:7a:7b:53:a7:c8:a6:8b:f8:15:f8:aa:05:a2:e7:a7:
         42:0d:99:4f:72:c3:86:c9:1d:26:67:30:47:f5:5b:4f:47:2b:
         12:17:29:1b:55:52:35:b4:02:47:15:ef:c2:9b:f8:32:21:15:
         82:03:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:24:12 2025 by rpki-client