Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa
File:                     eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa (raw, json)
Hash identifier:          XnT3u6935TElJ4Um0G2NBZGrfEyRW+o1R7JiCNdz2CQ=
Subject key identifier:   36:09:B5:0A:FE:A3:49:75:29:0F:09:42:7D:EA:8E:D1:06:8D:FE:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       547896207EE4C5E2445C2CB6E234D8C746FCAA39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa
Signing time:             Tue 27 May 2025 00:20:31 +0000
ROA not before:           Tue 27 May 2025 00:20:31 +0000
ROA not after:            Tue 01 Jul 2025 23:59:59 +0000
asID:                     62785
IP address blocks:        173.83.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:78:96:20:7e:e4:c5:e2:44:5c:2c:b6:e2:34:d8:c7:46:fc:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 27 00:20:31 2025 GMT
            Not After : Jul  1 23:59:59 2025 GMT
        Subject: serialNumber=52c513b9ef400149e980bcb07e64b1ef23467fcd9c9a3ac543730faabd74899e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:a7:ea:b2:10:b0:eb:47:77:3f:36:e2:c5:
                    62:a1:11:f7:85:f4:6a:0c:af:89:7c:71:df:ec:f7:
                    e8:33:74:1b:fb:ae:cc:9f:39:49:a7:17:b8:18:80:
                    6c:df:eb:22:f4:17:38:be:6a:f5:95:aa:bb:d0:f4:
                    3d:50:34:dd:f6:9f:1e:33:ff:7a:a0:f2:76:31:ef:
                    63:40:cd:89:93:cf:09:a5:e6:14:85:ae:ac:d3:ea:
                    be:82:c5:63:cf:63:e0:26:33:ae:f9:29:a4:53:22:
                    0a:53:91:ce:d7:7e:b7:02:b4:fe:45:c1:1a:1c:a5:
                    ab:a3:1d:22:d5:17:8a:59:9b:7e:76:f9:ec:b5:4c:
                    6e:9f:02:bf:f7:a2:4a:ee:eb:77:75:a2:85:31:ac:
                    cc:28:4e:64:b6:94:a8:39:f7:7d:07:b7:c4:42:8b:
                    58:88:9a:d2:47:a0:e2:ef:cc:c3:c4:74:40:c2:97:
                    e5:36:41:1d:3a:b0:16:8f:39:65:cd:96:cb:2a:a7:
                    bc:68:88:ad:6c:71:08:3d:b2:f4:21:44:a6:7e:80:
                    32:6f:5b:a6:f0:40:6d:3d:06:48:8d:9a:d6:5e:06:
                    5c:98:8b:bb:a6:af:0b:1d:35:3a:5e:42:dc:66:c0:
                    5b:e4:4c:25:16:3f:a0:30:c4:41:96:ec:d2:d5:b7:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:B5:0A:FE:A3:49:75:29:0F:09:42:7D:EA:8E:D1:06:8D:FE:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:19:1e:cc:1d:d5:22:cd:16:d0:cf:bb:36:8b:b5:dc:2a:
         ca:79:e1:15:95:a7:86:e5:1e:8b:02:ec:70:88:4c:d2:8c:66:
         a7:f1:cd:43:b2:c1:cd:d7:c8:e8:0b:8b:0f:5c:fe:0f:e4:d8:
         59:7b:8a:3b:26:71:01:29:15:43:55:a3:0e:b6:cc:33:8d:e0:
         f8:26:fb:4f:bf:20:fe:4d:e9:da:b0:f7:ec:25:c5:dc:3c:f8:
         9b:3c:b0:0c:8a:4b:61:99:8e:68:62:15:66:0c:b9:a3:50:b8:
         2b:54:3c:31:22:c4:6c:f5:cd:fa:e3:4c:22:86:dc:ac:42:7b:
         1d:17:93:3d:eb:24:6d:f7:da:89:e6:f9:ac:73:b5:af:e2:50:
         f5:37:9e:87:cb:ef:8d:a8:a3:45:67:db:32:ec:0e:34:56:4a:
         92:1c:9f:63:97:ed:5a:38:07:b9:b0:46:79:2e:9c:72:16:f7:
         ff:3d:a8:64:ba:71:b8:83:c3:76:50:0f:fc:b2:02:8b:39:f2:
         94:11:a0:48:84:67:b8:1c:38:be:87:bd:c0:20:ec:d7:42:aa:
         7a:7a:a1:79:6f:72:59:89:cc:ed:2e:d8:0f:22:99:f9:a8:15:
         64:9f:7e:8e:aa:76:eb:e8:ff:e8:60:99:96:43:e5:51:80:dd:
         04:84:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:28:35 2025 by rpki-client