Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File:                     e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier:          Gr9sO8wiIdZ0Bk3RDA+ooeSuOE0XDZlGfCB3PnbEVWY=
Subject key identifier:   7A:C6:40:71:FA:B7:CA:84:56:78:B6:75:36:46:1F:F3:6F:7C:C3:65
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       65ECB916544EA71475B16D00D1879412714E7C94
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time:             Tue 05 Aug 2025 15:00:33 +0000
ROA not before:           Tue 05 Aug 2025 15:00:33 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:b9:16:54:4e:a7:14:75:b1:6d:00:d1:87:94:12:71:4e:7c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Aug  5 15:00:33 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=80f68daf00735eb30c2da7a5b1bda33188ecd25406a3ff88b547702ae52b84cc, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:91:35:4c:81:5b:37:b6:9e:10:b1:9b:a0:
                    54:a8:b9:a2:ad:21:bf:7f:26:ed:01:63:ec:9e:ff:
                    3e:57:6e:97:46:bf:7c:64:17:55:84:7d:6a:c4:75:
                    c2:2f:93:92:f1:4e:a0:f3:d8:c7:eb:e9:68:1e:45:
                    84:e9:27:4a:f1:ff:dd:7f:f7:f4:5b:4b:9f:4a:64:
                    5a:82:83:0e:70:a1:4d:28:00:24:18:1a:a4:ac:8c:
                    bf:a2:5f:53:05:3e:63:8d:b9:9a:89:e4:c5:1f:22:
                    30:3a:2e:99:eb:3a:fa:d2:93:c4:ff:b7:aa:67:7c:
                    e9:ef:1d:b0:a5:3f:a6:c4:22:43:b5:d6:58:d8:02:
                    70:2d:fc:63:4c:0e:8f:0a:ac:b9:6a:51:ac:02:68:
                    6a:15:c5:fa:92:22:6c:fa:1f:5c:32:a2:16:e4:73:
                    b2:74:47:6c:f0:e1:38:b9:b0:8e:de:05:a3:87:84:
                    8b:1c:bc:9e:67:64:54:63:f5:b3:35:04:e2:bb:73:
                    34:46:38:a9:35:2e:e7:c7:4a:67:37:96:a0:5a:c4:
                    db:1e:13:4f:49:6f:3f:d4:be:c7:f4:a5:8d:41:6c:
                    39:16:7c:df:6e:b7:ec:07:9a:f2:ad:22:59:e3:77:
                    45:eb:5d:c4:ae:ed:c1:e5:b7:6b:ac:d4:b9:db:58:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:40:71:FA:B7:CA:84:56:78:B6:75:36:46:1F:F3:6F:7C:C3:65
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ad:58:7e:c9:d1:38:48:3e:02:74:e3:43:bb:5c:80:01:6f:e5:
         92:e6:5b:b7:52:14:4d:5f:f2:11:29:a8:45:7b:b0:c0:62:3b:
         1e:b3:14:ca:87:8a:2d:71:cf:6f:49:7c:05:c4:38:00:96:cd:
         2d:ee:b7:c7:87:4f:53:fa:eb:83:37:2b:89:81:20:1a:0e:6f:
         dd:1a:5b:c8:28:1f:90:ae:ff:4c:6b:be:4c:50:c2:88:24:ea:
         26:a2:1d:60:e7:8d:5f:97:3b:f8:cd:05:3d:f6:c5:9b:c2:58:
         2c:fa:45:53:4e:dd:b7:1f:15:38:c5:f0:41:ab:8f:87:ee:cd:
         8e:4e:ad:bb:02:41:e1:81:25:34:7f:1e:2f:70:33:11:80:ca:
         67:3f:9c:3b:a6:de:ef:a7:d6:c1:e1:4b:72:4d:af:fb:08:20:
         ee:ff:8d:f5:d9:10:de:a4:fa:24:50:1b:3a:99:02:e1:75:0e:
         92:4c:73:1e:33:d5:07:80:00:fa:c8:1d:e0:fa:4e:c3:36:98:
         46:5a:55:62:78:60:2f:64:f7:21:7f:19:0c:d1:f3:ff:f3:55:
         00:cc:8e:5b:c7:d3:cd:fc:e6:03:8e:0a:90:05:4b:48:d5:b5:
         b4:e5:74:3d:b5:46:29:22:3c:77:a6:3d:ac:b9:54:d8:39:f1:
         26:de:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:44 2025 by rpki-client