Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
File:                     fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa (raw, json)
Hash identifier:          0oRUYjWkqH2MDrcaPKTXls34EYZJFIFPWR/Zo3dPX3c=
Subject key identifier:   8A:B6:BB:AF:D5:A3:55:A9:15:CB:4A:11:7C:17:5D:6C:44:7B:8B:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B7A3C9EDBF60BDEE301194CDFE6F95263A932EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
Signing time:             Mon 01 Sep 2025 15:00:34 +0000
ROA not before:           Mon 01 Sep 2025 15:00:34 +0000
ROA not after:            Mon 06 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        122.200.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:3c:9e:db:f6:0b:de:e3:01:19:4c:df:e6:f9:52:63:a9:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  1 15:00:34 2025 GMT
            Not After : Oct  6 23:59:59 2025 GMT
        Subject: serialNumber=6955f181df209de5ff2de7c58721fe79d98d99ecf9f669395b210b2ceac62b4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:8e:4a:49:6c:b2:7d:08:a3:62:5b:5b:d5:
                    d4:66:c8:8e:f1:d2:24:50:92:c7:d0:2d:fa:98:34:
                    97:7a:2e:6c:69:09:68:e0:9d:22:19:fe:9a:a1:bc:
                    f9:8c:34:f9:27:6d:20:03:95:e6:46:dc:10:80:5a:
                    c9:16:0b:a9:1c:ed:bb:e7:96:fd:ee:16:15:58:0b:
                    2b:f7:52:72:29:20:86:44:c0:bf:f3:59:0b:fe:c0:
                    27:dd:c1:6c:f8:7d:44:56:47:5c:d9:e9:95:fa:c1:
                    8a:87:40:6f:32:8a:cd:09:ea:42:07:3e:b8:c1:1c:
                    ad:bb:e7:c8:40:a7:00:d9:3c:7f:fe:a6:e3:f2:de:
                    3f:7e:61:3e:49:c9:21:28:07:99:86:f4:d1:55:e1:
                    3f:6a:66:77:ff:2f:e9:87:e4:ac:90:6f:a6:9f:76:
                    2c:22:d1:57:34:27:e8:e3:74:1b:21:d3:68:28:f7:
                    6f:cd:27:2c:3a:5a:fc:6c:30:ae:d4:ff:df:8c:73:
                    2e:8f:01:3e:ec:83:55:0b:eb:0f:b5:ec:51:70:a1:
                    18:57:55:89:b6:8e:f0:3d:5c:5c:a8:ec:e5:23:18:
                    72:7d:7b:16:a1:6c:a7:cf:0d:cf:d1:c3:32:e4:8f:
                    71:ff:19:d4:fc:62:01:34:04:04:60:e6:c1:b6:f9:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:BB:AF:D5:A3:55:A9:15:CB:4A:11:7C:17:5D:6C:44:7B:8B:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:51:b1:14:21:56:3b:71:c3:73:c5:05:89:30:fd:e2:4f:
         38:86:b9:ef:09:a8:b3:bc:2e:94:80:e4:4c:04:53:3c:48:ec:
         d0:5e:54:74:7d:9a:8a:22:59:3f:68:08:ec:60:c2:d3:76:af:
         1d:f6:11:1d:82:e8:99:f6:5d:74:dc:df:a4:fd:33:d5:27:8b:
         f0:dd:b3:ed:26:b4:4a:f4:20:3d:7c:54:00:75:e1:a8:12:03:
         ef:22:c2:c6:c1:2b:04:14:6a:0e:6e:8e:8a:2e:00:73:41:eb:
         fd:60:57:23:6c:9d:76:b1:8f:d2:81:63:15:3f:2c:eb:9f:b2:
         5f:43:63:d6:61:5e:7f:2d:b0:24:e9:4b:7d:e7:e1:5d:4e:1f:
         83:4c:9b:ff:80:2a:97:a8:99:cf:59:a9:f6:aa:7c:a7:96:65:
         49:89:20:9c:52:73:08:9d:5d:bf:03:56:fa:f7:d7:d4:3c:59:
         ee:55:ec:9b:93:d2:f5:17:57:51:63:d4:b3:20:49:8f:69:31:
         93:c8:b8:d4:9e:6f:53:cb:f7:94:ad:c0:2c:ec:58:9b:97:a0:
         77:25:38:a5:5a:65:bc:2c:bb:82:dc:a6:b7:fc:a6:a3:1c:c3:
         9d:dc:32:a9:8f:36:53:4a:76:db:36:be:21:fd:e2:7c:6c:9a:
         09:ae:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:42 2025 by rpki-client