Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa
File:                     082d66b3-889e-4481-afbb-96a790257d9d.roa (raw, json)
Hash identifier:          azWolrzewADb2hHLVGdsZWv2/x9eJxHBI5mIFqxOiVs=
Subject key identifier:   87:1C:69:03:35:D0:E7:EA:77:56:58:B7:F8:74:5A:9B:7A:E5:3F:F5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31513537B9DCCBC2A3C3ABD3A951EBB4E3FA38BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa
Signing time:             Sat 26 Jul 2025 00:00:42 +0000
ROA not before:           Sat 26 Jul 2025 00:00:42 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        114.58.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:35:37:b9:dc:cb:c2:a3:c3:ab:d3:a9:51:eb:b4:e3:fa:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 26 00:00:42 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=5cdd75a29b79f1a833bfec044dc832bd3bd49b739b4266c5ae25fbd1ed5042f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:02:17:e5:7a:33:7c:4b:3e:06:e4:95:86:
                    a4:fd:44:e8:60:1b:45:65:55:94:2f:9e:21:df:9e:
                    bf:b4:9c:6e:28:38:f5:bc:a2:8a:4f:86:2b:bc:b7:
                    12:30:31:2e:04:2c:89:63:dd:67:39:bb:57:63:75:
                    33:a5:af:39:82:28:30:0a:3b:f5:b3:30:fa:a2:a0:
                    34:4c:86:16:c5:a9:35:41:67:77:34:23:f9:96:6d:
                    c5:cd:75:ee:a9:57:7a:18:b3:49:37:99:b0:0a:7d:
                    76:ac:a1:3a:14:b7:57:12:b7:fd:8b:5a:53:ce:6a:
                    24:5b:db:c9:5e:b8:e5:81:79:93:3b:39:1f:5d:5c:
                    bc:57:ce:46:28:3c:7a:66:d1:70:91:c9:3f:91:05:
                    23:76:87:2b:58:da:aa:45:61:4c:35:44:4d:f6:81:
                    59:2b:12:ff:a6:78:46:e5:58:0e:a2:ac:0f:f6:6c:
                    38:22:fd:77:f9:29:e5:b8:e1:b4:49:96:df:38:1b:
                    d0:01:02:7f:75:b3:a6:fb:fa:29:d1:6c:68:27:e2:
                    dc:b6:25:fe:0c:44:1f:cb:32:66:aa:ab:7b:27:d9:
                    91:d9:46:d2:28:fe:2f:f3:d3:c8:f4:15:79:61:ae:
                    ea:cc:e2:c6:07:30:10:fd:4a:c0:37:73:d5:f6:cf:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1C:69:03:35:D0:E7:EA:77:56:58:B7:F8:74:5A:9B:7A:E5:3F:F5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.58.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:ce:01:44:d2:f9:6f:c6:7a:16:f5:0d:c9:24:4d:6e:4e:
         9b:a7:65:a3:22:a2:71:03:c9:fc:a5:a9:ae:5f:3b:4d:bb:61:
         b5:e4:2a:2b:aa:9b:b1:44:14:ab:06:7b:6c:93:b3:7f:b6:f9:
         2a:3f:78:59:a9:69:a8:fd:00:7f:f1:fe:e3:8c:04:6d:22:23:
         25:1f:b9:3f:1f:be:f8:fc:f5:ca:f1:f5:b1:3b:85:bb:9e:eb:
         85:7c:c2:f4:db:eb:a7:81:88:81:57:79:01:6e:d7:85:05:c4:
         5f:60:14:70:ee:ce:cb:58:b1:94:8d:25:85:4b:93:21:ba:4f:
         84:15:ae:ab:8a:d6:74:6c:d3:af:5e:b6:07:2a:45:2c:28:46:
         a9:d1:4f:e3:9e:49:f9:67:cb:9d:ee:40:eb:2b:d1:a0:26:dd:
         41:e3:aa:56:41:0a:ba:f2:a0:35:23:f5:62:32:bc:d8:8c:c6:
         7f:01:7b:a6:14:2e:28:19:21:b1:22:d4:cf:a1:47:f2:4d:97:
         e2:13:99:88:e5:cf:b8:be:a8:38:de:cd:15:0f:cf:2c:99:a4:
         38:66:e4:aa:0f:04:ff:34:cc:e1:d6:23:e8:61:ca:1e:8e:20:
         5a:11:02:9d:ec:9f:14:88:35:99:29:8b:ed:25:5f:ff:db:67:
         ac:89:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:26 2025 by rpki-client