Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa
File:                     e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa (raw, json)
Hash identifier:          IUpwmivkbNU/uYvB2Tj7IBdBWW0y6XvycgSGOxmBs+s=
Subject key identifier:   E7:EC:99:FA:B6:42:1D:0A:E0:65:56:86:4F:90:7E:51:A4:82:3C:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F68CC6E314C2B933E2217AA87F0296281E7E54E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa
Signing time:             Wed 07 May 2025 00:31:17 +0000
ROA not before:           Wed 07 May 2025 00:31:17 +0000
ROA not after:            Wed 11 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:cc:6e:31:4c:2b:93:3e:22:17:aa:87:f0:29:62:81:e7:e5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:31:17 2025 GMT
            Not After : Jun 11 23:59:59 2025 GMT
        Subject: serialNumber=af96155729ff4c32a2fc5bc55809cc9177fec5393c54cff3a4f012cd0223caa2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:62:df:9e:15:80:50:01:3b:e0:8a:85:b7:
                    6d:1d:83:16:d2:96:8f:2c:fc:74:01:a8:10:87:ee:
                    55:e3:d9:cf:3d:27:4d:51:99:c1:f8:a6:8b:3b:c2:
                    d4:f9:1f:98:cc:5a:18:4f:c6:12:35:82:83:6f:41:
                    f9:81:ed:8f:8d:79:92:a8:e0:00:40:6e:a2:24:df:
                    4a:3f:bc:a5:42:18:ab:bd:81:07:b5:d0:c1:f6:27:
                    0d:29:5e:aa:38:fc:c1:8a:5c:49:7a:58:ed:09:1f:
                    7c:a4:d7:a0:89:c7:f4:56:dd:c1:88:dc:09:eb:66:
                    08:03:7b:f5:21:af:de:29:fb:d9:90:73:a5:d5:ec:
                    b0:5b:c3:4d:be:ed:b0:d7:d1:12:c8:43:db:23:b8:
                    a8:49:a0:a7:53:be:a0:6e:40:b3:c9:9e:ca:14:0b:
                    f6:86:03:a8:3b:c4:45:20:c0:1b:db:f2:2c:23:ba:
                    ea:25:aa:12:ab:ab:62:bb:99:a7:3f:85:3c:cc:c5:
                    3f:7a:27:ac:33:77:76:04:36:e5:dd:41:43:3c:e2:
                    c9:ab:0f:91:9e:0a:43:b9:06:c8:ce:cd:73:2f:c0:
                    89:1e:dc:6e:32:be:f0:79:8c:4a:42:b1:86:29:c4:
                    36:fd:b7:b5:1a:63:85:15:db:a4:80:44:ec:51:c7:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:99:FA:B6:42:1D:0A:E0:65:56:86:4F:90:7E:51:A4:82:3C:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5ebd6c8-09b4-4e77-9d8f-913002cdfa21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:06:3f:57:b9:09:7f:bb:c2:80:9a:c4:22:48:0c:4b:a4:
         76:03:39:80:f7:1d:ea:8b:65:07:c7:51:e4:0f:d0:75:5c:e1:
         13:6c:38:21:35:95:42:de:02:57:3d:06:76:cf:02:df:93:00:
         6d:f0:4a:d1:29:ca:55:e8:b7:c8:f6:d7:1e:7b:18:1e:2e:1e:
         28:98:8a:fe:ad:14:8d:b5:a7:f8:e9:29:ea:f1:d3:9a:40:a2:
         4c:ec:c9:84:f2:2b:ea:92:5b:a5:3f:2c:ed:65:da:7b:ea:45:
         44:29:d5:0e:cf:97:b6:00:b7:1f:3b:ea:a3:d6:dd:15:2a:21:
         a1:f4:c2:71:be:b1:62:51:3f:b1:8d:b7:fc:d9:55:44:b8:d5:
         ee:0b:62:38:ad:1a:9e:b1:c5:44:a8:ff:ad:ed:5c:63:f2:a4:
         81:a7:c5:13:70:03:c5:41:19:6d:04:53:0d:c5:76:c4:ea:a2:
         fc:e7:3e:01:03:c2:10:17:d3:07:f8:89:39:1a:3f:78:2d:05:
         64:dc:b1:2f:f1:c7:71:fb:09:56:eb:ee:5e:8c:f1:3a:50:5b:
         cb:2b:a0:8f:17:e8:33:a7:03:7f:ec:00:f4:44:91:64:bb:29:
         85:83:c9:68:56:59:76:f2:07:44:73:a7:d7:26:b6:9e:a4:4f:
         f8:80:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:49:40 2025 by rpki-client