Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
File:                     f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa (raw, json)
Hash identifier:          10PWuFD+e/AGT6NaYbyDoHzySq0FyZteZRa/oHCy2jI=
Subject key identifier:   8B:EE:0E:6A:37:27:EE:F0:E3:25:92:62:DD:13:0B:7A:86:EF:4E:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C9565C3E81D9A25A2AF6B60498E6068FE3A7037
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa
Signing time:             Wed 28 May 2025 00:52:11 +0000
ROA not before:           Wed 28 May 2025 00:52:11 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:95:65:c3:e8:1d:9a:25:a2:af:6b:60:49:8e:60:68:fe:3a:70:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:52:11 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=073b4bd165c71ad5d6f13c6ab9fb62e013a4eaaa667a6db94946ac8341b33579, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:f3:ba:0b:32:97:be:c3:82:99:0c:cd:b4:
                    43:06:7c:89:60:c8:f2:63:8f:48:54:0a:3b:99:0a:
                    a6:ff:91:4b:5d:3f:06:6a:b3:2d:78:84:aa:61:ce:
                    8c:39:28:89:7d:b3:e0:a3:71:55:eb:97:3d:ee:7a:
                    47:0e:99:cc:4f:2e:3f:9f:5a:00:9a:7e:60:39:be:
                    e7:bf:c9:4e:12:04:31:2a:4e:50:ca:2c:58:56:f4:
                    dc:61:e6:de:7d:57:ff:82:03:0c:09:4d:da:7e:7b:
                    0f:e2:2c:4c:c0:e4:1d:27:52:28:22:e7:74:5d:24:
                    dd:ee:5e:06:ad:18:86:65:68:a4:57:fc:7b:17:31:
                    3a:2b:a3:30:f0:bd:90:57:11:27:19:c9:df:ed:93:
                    4e:8b:3c:d3:d8:83:cf:42:0f:ef:99:95:c0:33:cc:
                    d3:90:b9:32:53:17:12:81:7e:51:7e:cd:20:5e:65:
                    3c:ad:06:aa:ad:01:82:f2:3f:1e:8d:90:0e:3d:23:
                    87:f4:ec:44:3b:c4:2b:e6:0f:8e:9a:b0:12:24:3e:
                    0b:47:7b:dc:25:cc:ab:36:ce:cd:37:6b:bc:34:ce:
                    44:ca:49:b6:18:86:cc:4c:d8:dd:8d:30:c6:73:83:
                    21:4d:4b:5d:4f:1c:4b:34:7b:20:ef:7b:d1:d2:47:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EE:0E:6A:37:27:EE:F0:E3:25:92:62:DD:13:0B:7A:86:EF:4E:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f324e7ee-d7f9-4f11-8a0d-e4bf6c04b89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:9e:27:7e:b2:35:9f:89:be:2b:af:89:56:ef:31:ab:35:
         ad:f6:19:49:48:13:75:40:d6:8b:3a:09:b1:da:35:fa:ab:1a:
         bf:7a:72:73:53:18:fb:2d:db:20:0f:11:18:74:f4:6b:22:12:
         d9:16:a9:a4:f0:55:b1:3b:d4:f9:f3:cb:f5:1f:70:60:0a:6f:
         c9:81:5f:18:a0:5b:7b:6d:57:8b:78:1b:34:d2:cf:9f:2e:89:
         d7:ce:39:db:9a:ff:bf:de:6c:87:dc:08:18:e0:f6:e0:3d:87:
         88:f9:eb:48:ea:8a:f2:3b:ca:52:2e:60:80:cd:72:7b:f9:c4:
         62:30:58:c0:5c:e1:e5:00:14:7f:0d:9e:71:df:4b:70:7b:96:
         bf:20:61:de:63:49:87:f1:d3:46:fb:a1:25:61:13:a2:96:c2:
         a5:b6:b0:86:a0:10:a9:82:87:bb:e3:47:38:80:f0:2e:34:f9:
         9f:9f:67:4d:e8:40:55:ba:e7:1e:3b:cb:6f:8b:7b:33:8b:85:
         93:5f:68:91:26:ad:8f:8a:f6:78:91:1f:fa:18:e7:d0:de:f5:
         d1:77:8f:8e:02:ba:fa:3c:7a:f0:32:76:37:58:96:08:58:11:
         17:d7:c1:c7:df:f1:8d:25:e0:a6:77:72:f6:13:34:6c:33:51:
         e6:6a:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:25:05 2025 by rpki-client