Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa
File:                     e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa (raw, json)
Hash identifier:          O4phN1o8XasA5aVISEcBmduEKXpwEkGF5vBpVF1W80w=
Subject key identifier:   31:2B:11:9D:5A:4D:75:D3:D8:FC:70:F5:3D:99:61:54:B5:7E:5F:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       105F55E92EA1662BAA5FD63ACFD045D86EBFF7CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa
Signing time:             Sat 30 Aug 2025 00:41:58 +0000
ROA not before:           Sat 30 Aug 2025 00:41:58 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5f:55:e9:2e:a1:66:2b:aa:5f:d6:3a:cf:d0:45:d8:6e:bf:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:41:58 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=e0e72f9cfbb051c42e1ce30a124eadaac82e589d627355ce25a1bd5801953005, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:0f:03:ca:29:4c:f3:22:da:13:f8:ca:f3:
                    26:6c:0d:75:fd:d7:68:bb:af:e7:03:1a:e5:41:95:
                    1f:ce:75:47:8e:7b:03:f7:e8:a6:dd:83:36:05:0f:
                    58:ee:bd:b3:79:6a:c9:b9:11:59:32:84:f8:b2:22:
                    fb:43:2d:d5:45:43:1b:4a:8d:71:bf:3c:36:51:5b:
                    96:4a:4b:56:fc:eb:29:58:de:82:55:2a:a0:2c:af:
                    69:90:ae:0f:ca:a4:06:a7:0a:3f:cd:54:34:77:c3:
                    72:35:c8:63:54:32:5a:5e:2b:e8:3b:26:9d:58:97:
                    32:62:27:67:e2:1e:67:3e:d3:b4:5e:d2:82:64:70:
                    03:56:b3:ee:2c:79:14:71:b1:9f:fc:08:c2:26:d2:
                    cc:19:4a:82:22:e5:3e:77:fc:b4:c2:89:9f:31:62:
                    d3:70:a8:53:b6:d7:92:8f:9f:d9:3f:79:f9:c6:80:
                    38:41:9a:94:0a:e7:13:b1:d6:c9:28:ee:3b:6c:a0:
                    cb:55:1a:b2:9d:5f:9e:1a:fa:38:2d:42:98:78:e6:
                    89:fe:0c:1d:02:51:73:4b:1e:23:94:42:46:39:de:
                    80:69:a3:63:6c:b8:06:ba:61:52:dd:60:d7:a4:a8:
                    2c:24:d3:31:c1:fc:44:07:83:d6:39:b2:6a:34:12:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2B:11:9D:5A:4D:75:D3:D8:FC:70:F5:3D:99:61:54:B5:7E:5F:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:77:60:49:9f:4f:31:db:52:99:73:41:2b:5c:b9:55:2c:73:
         1f:f4:df:b7:b5:08:4a:d2:cd:c4:b1:fd:1c:dc:03:82:29:57:
         dc:bf:b9:40:99:6b:76:8e:91:99:2e:74:02:7f:6a:25:fb:b8:
         f2:9b:68:f9:1d:5d:ca:ac:08:c3:af:00:66:4b:5c:da:e7:5f:
         97:dc:33:a9:df:cc:04:f0:29:b3:d0:08:d4:f1:f8:5d:7e:23:
         a2:12:93:84:da:88:4f:f3:68:7f:2e:cc:a6:58:12:a2:60:32:
         01:28:78:de:a5:cd:fa:cf:ad:d6:51:ca:84:d7:f0:5a:42:7d:
         7f:df:72:40:21:c4:68:c0:21:fe:5c:cc:a8:c0:3c:0d:23:dd:
         10:c1:3d:a7:da:39:51:64:fd:17:c8:ad:5b:89:a4:78:3b:84:
         72:67:55:82:5e:4f:a0:c2:bf:8b:69:65:eb:e1:15:09:f2:03:
         8a:24:4e:33:66:04:50:7a:f2:99:61:e8:38:44:96:88:3e:a9:
         48:c3:bb:53:74:b5:38:a2:b8:74:6b:27:df:de:87:cc:71:b2:
         37:7e:53:7b:1a:eb:e7:2c:91:28:00:7e:b7:32:c4:e5:2f:3b:
         a8:20:80:aa:15:8c:b3:27:51:75:9e:30:e5:01:06:b2:55:0a:
         b8:93:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:42:35 2025 by rpki-client