Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa
File:                     e85f7629-042d-460b-8057-96331b4ff972.roa (raw, json)
Hash identifier:          H/s4g/7yKkNf5vvTIRYPAsHL5N4gKQIjiK7Shvam1hs=
Subject key identifier:   B9:0A:E2:3C:07:08:56:29:31:3B:80:C8:9F:F7:C2:43:8A:97:AE:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EE9DA761C5A1C2EBCD9D037296726FB4A029B73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa
Signing time:             Tue 03 Jun 2025 00:20:16 +0000
ROA not before:           Tue 03 Jun 2025 00:20:16 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.19.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:da:76:1c:5a:1c:2e:bc:d9:d0:37:29:67:26:fb:4a:02:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:20:16 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=092a5e5f055f336fc6d93785943cce1de94152fee3ebdc3b388bf35f4c577bb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:9e:36:82:a5:77:e2:ff:e4:c5:8f:ac:28:
                    6f:0d:d4:63:a7:7c:6d:10:8b:a8:e3:68:07:5f:66:
                    eb:9d:4d:ed:79:64:c4:05:29:7c:2b:4f:d6:b9:6f:
                    e6:b6:f3:a9:ee:38:44:e6:e2:dd:c9:b0:a3:0c:f0:
                    d9:60:e1:75:46:2b:93:6a:6a:50:e9:07:dd:11:e6:
                    48:1e:b0:75:47:d1:5c:29:78:20:0f:db:f9:e7:3a:
                    bf:1a:3f:0c:0b:30:24:4d:73:d1:dc:21:9f:5d:50:
                    6d:30:62:d0:57:1c:5c:f4:25:ea:2c:b0:13:79:97:
                    fc:bf:97:c9:4c:04:7b:dc:48:ef:bb:3a:90:93:74:
                    13:85:ab:06:7e:9c:01:9e:3f:4f:4d:0b:34:b9:08:
                    c7:60:16:70:83:b7:a8:5f:fc:44:fd:1d:95:ee:30:
                    e9:01:4c:28:d5:d5:49:a3:4c:3d:43:0f:59:e0:6e:
                    fd:ea:93:20:6a:63:03:a5:d8:9e:df:4c:d1:b0:fc:
                    63:11:45:86:63:e8:b7:0c:f4:c0:dc:eb:d0:7c:ea:
                    66:ef:4e:8a:c7:96:0a:76:09:6b:04:50:08:1d:ed:
                    4f:aa:60:de:0b:f7:5f:75:c0:b5:23:8d:d2:f9:66:
                    2a:4e:de:de:79:2c:3f:c6:5f:fa:12:70:59:60:2d:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:E2:3C:07:08:56:29:31:3B:80:C8:9F:F7:C2:43:8A:97:AE:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.19.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         23:19:e2:1a:43:c0:32:9f:1c:d8:f5:2b:5a:33:65:90:97:8c:
         87:40:6b:c6:92:37:8c:72:9a:4a:0e:ca:26:ae:c7:8e:c5:74:
         cb:01:92:9e:17:82:96:26:49:55:d6:8f:86:4c:3f:4e:5b:7a:
         e5:a4:86:7a:16:d5:fb:e9:a6:97:1c:32:c9:8b:2d:3a:2c:7f:
         60:17:dd:bb:73:f0:50:63:00:61:6f:84:14:26:36:88:20:e2:
         cc:67:0f:a5:a5:a4:75:71:9f:4f:aa:cd:cb:41:86:59:c8:1b:
         e5:9d:86:51:00:95:ba:c7:4a:3b:75:4d:20:6b:a1:97:f2:4a:
         9b:bb:e9:20:7f:b9:68:bd:f8:7a:15:4e:28:8d:1c:9e:ae:61:
         07:7f:17:1e:82:74:22:e3:20:77:92:91:f0:50:f3:3a:40:a3:
         f0:10:14:97:e6:ca:b3:04:4c:e3:96:a5:69:b2:86:6b:da:f6:
         f6:ca:91:01:d9:bf:f6:68:1d:e3:f3:8f:cf:ca:3a:b5:b6:31:
         8c:15:c9:22:6a:61:6e:77:45:36:8e:b4:02:f6:dc:9d:53:77:
         e8:47:fd:8a:b5:6e:f3:63:f9:0c:eb:78:79:f5:24:ed:b8:fe:
         fa:2a:7d:b2:61:07:97:04:42:c7:94:da:13:77:9c:b7:71:a5:
         19:a5:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:05:30 2025 by rpki-client