Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa
File:                     e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa (raw, json)
Hash identifier:          wUFIkQ/0x9Gh2OGXRxk5bEJ+gxW2Pas0Ba+rcQ45q5k=
Subject key identifier:   10:28:FA:74:7C:8F:E9:4D:5C:D5:26:3B:2A:A5:73:80:0D:AA:B1:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25B1F80002B999469F4FF63F98B15F1CBE77DABE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa
Signing time:             Mon 19 May 2025 17:10:14 +0000
ROA not before:           Mon 19 May 2025 17:10:14 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        100.24.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b1:f8:00:02:b9:99:46:9f:4f:f6:3f:98:b1:5f:1c:be:77:da:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 17:10:14 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=7af3e7030a6b6c03165ddc0284c33cca1ed2d5f2632c92c8a03059abcb83268c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:17:02:d7:e8:ae:5d:98:75:ec:3b:85:7c:
                    07:40:8f:77:10:aa:4e:ef:dc:08:28:99:97:c8:d6:
                    d6:6c:6d:f6:5e:d5:9f:16:de:7c:ee:58:09:7a:3a:
                    b8:1e:35:9f:d6:89:eb:48:fc:b5:b5:a4:81:40:7e:
                    9a:e1:c5:10:36:ba:70:e2:c2:6c:b3:d8:a2:88:8d:
                    3b:4a:c5:ea:53:c1:90:f5:b6:68:b6:df:f0:9f:7c:
                    b5:63:8d:cd:d2:94:5a:df:db:5a:f7:1d:83:18:11:
                    11:5e:31:4a:e6:df:f3:97:08:d2:88:bd:6a:f2:47:
                    79:c7:5d:01:6c:2d:99:4a:a6:b4:6f:1b:8e:65:02:
                    bc:56:7b:20:31:e4:8d:58:aa:f0:18:44:c6:a8:e3:
                    7f:02:a1:90:1a:f9:87:cc:85:6d:0c:48:06:b0:c9:
                    66:a4:4f:c5:bb:38:2a:0b:23:79:e9:af:33:65:9f:
                    63:8a:00:7c:a5:3a:88:50:04:de:39:c5:e9:e5:4d:
                    58:a9:2e:d2:2c:20:ea:d3:a7:73:93:1c:73:9a:06:
                    cf:52:e3:4e:ed:bb:bc:6b:55:de:51:1e:12:d5:42:
                    04:a5:e6:0b:f6:41:05:1a:dd:ef:8d:69:f8:c8:4e:
                    1d:81:e2:db:e1:85:21:d9:0e:6d:48:e6:d7:62:73:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:FA:74:7C:8F:E9:4D:5C:D5:26:3B:2A:A5:73:80:0D:AA:B1:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5587c1e-5e1b-4454-9a2d-7a5bc5b44d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.24.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         22:25:da:25:70:34:85:8a:4a:c1:ab:a9:ff:56:be:b4:e8:a8:
         c2:15:7b:59:1f:6a:d9:5b:1e:1a:64:ed:2f:44:59:dd:ad:25:
         57:4d:c9:bf:78:fa:44:ec:d8:44:a6:95:35:26:e8:49:97:31:
         95:1a:7a:87:e3:1a:94:ce:5b:7b:a4:78:d1:09:0d:fa:4b:cf:
         67:08:13:fb:c7:42:9b:e3:b1:c5:ea:75:0f:b1:e5:8c:80:6e:
         db:78:dd:05:e2:ae:96:dc:ab:e2:0c:59:52:07:c8:02:7d:68:
         a1:77:a8:47:e2:5a:78:36:de:cd:81:a9:f3:6d:24:63:f3:8b:
         b2:23:19:7d:76:9f:58:1f:29:4d:f9:cb:c3:c2:0c:80:4f:20:
         ba:e1:b3:61:a1:55:d8:12:0e:83:44:94:ab:6a:3c:2b:b1:65:
         84:8d:b6:42:f2:09:79:f4:a7:d4:15:16:e1:58:cd:1a:19:67:
         b8:92:fa:2c:46:b4:1f:0f:e5:dc:a5:33:04:95:32:40:0a:92:
         4d:2a:b0:f3:9c:62:19:8e:24:cc:7b:d6:cc:69:63:81:d2:5a:
         17:b5:b3:77:d6:8b:3c:c7:d9:b2:ed:16:33:04:54:8b:46:17:
         47:93:55:fc:5b:8c:8e:e9:72:40:6d:8c:5a:6f:aa:a0:0c:a5:
         2b:f3:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:40:50 2025 by rpki-client