Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
File:                     f13d14a2-c781-4f14-97b1-44c231676d28.roa (raw, json)
Hash identifier:          CpHxXMWqGJku0WaA7MwuV4Slf8kyyj4zw+aksHl8b64=
Subject key identifier:   A6:17:77:95:FC:85:32:50:7F:ED:C7:3A:38:E2:A9:0D:EE:F4:0C:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AB827B418992703D5EAFC08F281904FFC4C6D00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
Signing time:             Fri 29 Aug 2025 00:11:08 +0000
ROA not before:           Fri 29 Aug 2025 00:11:08 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b8:27:b4:18:99:27:03:d5:ea:fc:08:f2:81:90:4f:fc:4c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:11:08 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=9e1006c36686c30b887fa93a1cb2d27c727206993db7d4a7f861466fd7548457, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:8f:52:bc:66:70:6a:38:6d:45:23:6c:de:
                    b9:4f:07:e2:13:dc:11:ab:01:99:26:45:b6:a5:6c:
                    15:43:22:89:be:de:0e:79:eb:6a:14:17:48:84:01:
                    30:fe:04:59:30:b2:a2:43:ca:8b:c1:b0:b6:81:37:
                    50:e3:f7:ca:07:d1:ec:a2:5e:b8:e0:17:e4:e9:07:
                    6f:94:0b:de:9c:71:4d:60:07:0a:78:c9:33:20:53:
                    3e:a1:6e:63:13:95:45:db:cf:8a:29:0e:ea:9d:3a:
                    2e:77:bd:1d:e4:be:2a:78:04:3b:7d:23:2e:50:a3:
                    44:1d:df:11:7e:4f:32:4f:d4:28:5a:a4:c9:48:ec:
                    71:d0:35:c3:fd:34:d0:a2:c4:71:18:6a:f7:bc:96:
                    0a:c9:1a:41:74:e1:ff:7c:ac:a6:6e:66:a9:bf:1a:
                    7b:3f:ee:d8:89:98:a0:00:68:da:fc:de:b8:43:ab:
                    d7:13:1b:00:fc:26:b8:88:8d:41:a7:b6:1d:a4:df:
                    46:64:1e:46:c6:05:9f:1f:82:ce:5a:07:74:9f:9e:
                    6e:8f:77:e7:17:a0:4d:77:73:fa:19:96:dd:ee:e7:
                    56:d2:bc:b7:08:52:c7:8a:54:f5:a8:0d:cf:ef:6d:
                    54:90:3c:24:5f:da:dc:4b:3f:d7:74:59:54:6b:b0:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:77:95:FC:85:32:50:7F:ED:C7:3A:38:E2:A9:0D:EE:F4:0C:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:c8:ba:f0:df:42:76:b1:e7:70:23:b6:de:b8:7f:c8:6f:52:
         01:26:32:47:80:95:88:84:61:09:75:ef:7b:ef:60:3b:68:43:
         e0:db:61:9c:93:ad:f6:41:6c:45:91:c5:9e:53:96:ac:86:d7:
         47:f8:e1:bb:41:c4:d6:1f:7e:36:1f:cd:0e:35:63:ec:14:58:
         f9:3d:fd:59:7e:f9:ac:9c:19:7b:53:2f:e0:4e:3b:99:4f:c5:
         72:57:0b:72:ad:16:f9:0e:db:4a:9c:f0:8d:46:89:55:9c:9f:
         bc:3b:10:5f:0e:99:20:30:40:7c:c1:50:90:58:7f:54:56:62:
         7f:84:29:7a:af:37:c4:81:49:db:88:e8:ad:b8:0d:f8:7a:85:
         26:ed:80:6b:76:b0:18:02:69:c3:ae:33:c0:3a:93:b6:a5:1c:
         7a:aa:17:65:a4:4f:79:8c:2d:ca:26:a7:49:0f:e6:08:62:f4:
         5a:14:52:30:13:78:42:ac:ea:5f:fb:b9:68:3f:e5:bc:52:78:
         f5:bd:34:50:66:ed:af:4d:67:8c:d9:a1:7e:06:d4:84:63:8b:
         10:60:68:54:84:27:22:67:0e:37:0e:5c:90:b5:db:82:a5:85:
         e3:26:42:fd:22:30:eb:34:8c:1b:3e:84:c6:85:46:bc:ca:67:
         3d:4e:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:09:34 2025 by rpki-client