Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa
File:                     01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa (raw, json)
Hash identifier:          k3mVlj/eBQVjTEB1NxrltSHcVrdK6W1WbuUnk0RbV9I=
Subject key identifier:   4B:5D:33:1B:AE:EF:F8:2F:77:1A:57:C2:02:B5:E3:C4:83:F3:7B:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7894C9D0958AF61345E4F0D5663A3D5BB909FE6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa
Signing time:             Sat 14 Jun 2025 00:20:32 +0000
ROA not before:           Sat 14 Jun 2025 00:20:32 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        204.236.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:94:c9:d0:95:8a:f6:13:45:e4:f0:d5:66:3a:3d:5b:b9:09:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:20:32 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=20165e1dc4143bed753574d29414b97240a9f6f7d4772e2860095fb47c87950d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:84:8f:19:db:a8:8f:6a:65:85:f6:e2:5c:
                    c3:bd:9e:98:ed:fd:90:c9:f5:eb:9b:32:ee:9c:e5:
                    55:e3:0f:a3:ff:47:c0:d4:6f:fc:29:01:4b:18:63:
                    84:36:04:01:61:ad:8d:8f:d2:a4:11:4e:cd:ec:4a:
                    1f:c0:49:82:09:68:b3:94:6b:5e:47:36:fc:14:d6:
                    1d:b4:dc:48:03:0a:0d:d2:09:27:02:05:b7:86:74:
                    6a:d4:12:96:84:a4:47:e5:8a:f3:e3:a2:60:e4:34:
                    c0:1f:e2:4e:84:c7:c5:21:fd:ad:c5:3b:07:26:8a:
                    bd:16:1f:e3:c5:45:17:4d:50:f9:1d:8c:4a:48:1c:
                    dd:ca:0b:c4:1f:18:1f:6f:46:34:56:6d:2f:58:dc:
                    82:12:a6:83:75:1c:17:39:c8:98:e1:f1:9f:a6:59:
                    f4:50:39:94:a3:79:9e:cd:c8:37:fe:df:69:07:47:
                    f9:0a:2d:e5:46:5a:5c:0d:dd:3a:82:aa:3b:5b:78:
                    35:c1:2e:b6:d3:10:9f:54:e1:22:3a:fe:4d:ad:04:
                    d0:ec:ea:30:49:6f:1b:30:23:97:20:91:30:fc:b1:
                    ff:73:79:5d:41:18:48:44:0e:d5:c2:fc:4d:a8:48:
                    2e:3e:c0:8a:a6:4e:75:e5:5a:e7:5d:f8:59:3d:43:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5D:33:1B:AE:EF:F8:2F:77:1A:57:C2:02:B5:E3:C4:83:F3:7B:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:06:e6:a9:47:69:57:29:bd:d7:2d:1f:f8:b7:cf:bf:b8:3a:
         3f:b0:a9:8d:9f:78:a9:0d:15:f6:ca:e4:51:be:76:be:f6:27:
         89:cc:3f:56:64:99:5f:dd:d2:94:db:2f:da:5e:cd:9e:01:ce:
         cd:d5:55:3a:5c:06:d5:42:96:2c:fa:7b:0a:c4:26:63:0f:f3:
         3d:84:99:b3:8d:3f:ad:3c:8b:5d:34:8f:00:f3:ef:82:e4:f4:
         04:af:cc:11:f4:17:f7:a6:23:b4:20:43:84:41:ff:e0:9a:bb:
         4c:c4:58:96:8a:e1:4c:a7:22:13:31:e0:98:4d:30:96:52:fc:
         a9:55:5d:9c:15:b8:3e:ba:c1:5c:e8:a4:c7:c8:6d:8a:28:b4:
         18:d0:a2:15:51:e1:a2:12:4c:0c:81:c1:82:3c:24:20:4d:ae:
         5b:f2:db:59:2d:30:fa:ff:2c:93:a1:41:a7:0b:c6:bb:2e:ff:
         5c:02:36:bc:cd:60:9d:57:b8:4c:3e:36:f8:c4:cf:3c:96:8c:
         3b:50:ba:07:8c:c5:e2:49:d8:65:b1:15:e7:46:2e:7b:f2:a9:
         23:8e:b3:67:3e:a2:25:c7:b8:9e:03:c0:8b:2d:f4:59:3a:0e:
         30:01:ad:89:ba:7a:8e:7a:b0:f7:d5:24:04:23:bf:dc:0d:78:
         37:ba:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:54 2025 by rpki-client