Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f924b639-a668-4962-9eae-8a87cb05de1d.roa
File:                     f924b639-a668-4962-9eae-8a87cb05de1d.roa (raw, json)
Hash identifier:          0HAikQgxityQHdvF620TuZ7IW5JhULTDSNggPfgbkLA=
Subject key identifier:   6C:0F:E0:13:EF:32:DB:04:43:70:67:4F:F8:38:8C:AA:F0:AE:2F:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       269B6551F12F36D9F387120B24FBEA91A374EDE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f924b639-a668-4962-9eae-8a87cb05de1d.roa
Signing time:             Fri 29 Aug 2025 00:21:14 +0000
ROA not before:           Fri 29 Aug 2025 00:21:14 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.182.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9b:65:51:f1:2f:36:d9:f3:87:12:0b:24:fb:ea:91:a3:74:ed:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 29 00:21:14 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=4b7f0c895425aff0c9b0ec2439d5b45fbb2afe4f4875457359a979bf77edaa85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:ff:66:4e:dd:84:07:16:49:04:2e:d1:78:
                    f0:71:e1:d9:50:47:3b:88:cc:ef:53:53:5f:13:a3:
                    b5:3a:a0:51:00:8a:10:11:13:ee:98:e6:c1:36:5f:
                    88:5c:bf:92:ca:a9:a3:da:2d:61:a6:0c:d1:81:13:
                    b4:b9:a5:04:5e:b9:fc:2c:fd:3e:8a:bb:c8:1c:aa:
                    bf:32:29:b8:29:44:9e:0d:5c:f5:ab:9e:ff:aa:4b:
                    93:19:4c:b3:30:c0:83:70:e4:fe:35:50:11:06:97:
                    f3:0e:54:1a:fd:76:c5:d9:c3:ca:3c:0b:e1:b8:cc:
                    14:0e:4f:46:17:d3:80:37:6b:3e:d9:8c:4a:71:d0:
                    d5:67:c3:db:b8:db:69:c7:42:bd:70:41:7d:b8:17:
                    58:03:88:0e:77:e1:bd:53:63:d8:2a:ba:c5:11:af:
                    1e:dd:90:1c:d6:ca:57:fb:7a:40:8f:ac:98:a5:78:
                    59:ee:ec:70:0a:6b:46:10:ff:d8:ce:e1:f5:f7:3d:
                    80:a2:62:94:0d:1c:92:7a:27:c0:09:93:2b:ce:b0:
                    34:cf:5e:71:d4:c6:ac:56:d2:7e:1e:a2:dd:47:f6:
                    b6:57:13:4c:5f:59:68:a7:bc:51:ee:ae:62:09:62:
                    3a:e6:7a:b9:49:d9:90:51:9b:ed:f2:2f:85:52:62:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0F:E0:13:EF:32:DB:04:43:70:67:4F:F8:38:8C:AA:F0:AE:2F:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f924b639-a668-4962-9eae-8a87cb05de1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:cb:a1:d7:a8:84:ce:47:19:6f:a7:80:f8:5e:13:3b:11:
         7c:51:21:77:b5:0f:4f:25:4c:00:c8:03:da:b6:3b:fe:ce:6d:
         89:22:f0:2d:f4:c6:69:ef:22:74:04:70:e3:0e:c4:6d:2b:9e:
         98:65:bb:68:2c:4b:4c:ea:45:b9:72:0b:9a:0a:0b:ca:57:7e:
         2e:dc:7c:1f:0a:21:28:46:3c:3f:4c:bc:69:72:04:18:30:45:
         9e:b6:eb:52:0d:b5:dd:42:87:fc:a5:3b:dd:4c:37:48:ba:57:
         3c:ac:8c:97:38:5f:81:87:0d:30:49:f2:8c:c5:f5:06:82:24:
         bd:0e:2f:1b:e4:e0:e7:39:d5:3e:9f:94:ba:28:71:77:7d:28:
         25:0a:6d:65:72:f3:2f:52:e9:a1:76:61:a1:fd:5a:f3:e2:43:
         8f:dd:b1:05:ff:cc:ca:ef:e0:43:50:4e:6f:6d:5d:45:bc:6e:
         26:2b:ea:95:fc:f7:9c:fc:61:8b:06:23:0d:30:11:09:1d:20:
         95:0c:68:90:9a:40:3d:d4:2c:d3:49:27:f7:0f:94:9d:6f:7e:
         cc:a1:d7:ae:10:6d:5c:b2:e7:b8:91:9c:cc:b6:2b:aa:38:29:
         35:e3:05:f1:13:7c:bb:bc:ea:f2:8f:e3:9c:c4:ae:44:92:b9:
         de:80:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:14:05 2025 by rpki-client