Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
File:                     08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa (raw, json)
Hash identifier:          w0d4ZmdZFlPKyrqrrux4kxkaxcC4OZ1vl0XQUlGDon8=
Subject key identifier:   2E:D4:FE:72:21:79:03:BB:68:49:25:84:D9:FC:A2:AE:C2:59:4A:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1424EFD3D7F82E370C00848525B8E7F15D93D96C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
Signing time:             Mon 02 Jun 2025 15:41:39 +0000
ROA not before:           Mon 02 Jun 2025 15:41:39 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:24:ef:d3:d7:f8:2e:37:0c:00:84:85:25:b8:e7:f1:5d:93:d9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:41:39 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=ea6a7e614d09aa763a379ecfbcbebb5d8edcb917dbf4aa3dc1a4dbb8d66cd0ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:8c:9e:9f:ae:02:c6:46:ec:36:0b:ea:07:
                    07:eb:2f:98:5c:24:d4:75:67:66:a4:cc:f5:82:e0:
                    d7:19:d4:aa:24:4a:22:18:13:55:e1:d9:33:a2:d8:
                    03:04:e9:6c:f8:ad:5c:74:08:b0:14:aa:b8:74:5d:
                    7e:93:2c:a0:be:12:2e:60:67:04:12:9e:ab:30:bb:
                    22:b2:cb:c8:6d:87:16:8e:70:a5:4b:a6:47:d3:64:
                    5d:7a:67:d4:51:cb:4e:38:90:78:46:36:b4:c3:3a:
                    8b:e3:55:b0:81:92:84:1a:4a:fa:68:52:a2:bc:d7:
                    12:a2:7f:2a:ff:0d:6d:d2:b8:23:70:27:d3:89:17:
                    49:62:1e:3c:13:76:7a:08:16:5e:34:d3:70:79:b0:
                    32:d1:a2:ac:fa:fc:9b:09:14:93:64:fc:d8:93:52:
                    77:5d:59:02:a0:3a:05:d4:32:5e:cc:3a:a9:75:33:
                    8d:a1:bc:32:0b:47:78:42:a4:f9:9d:a2:18:d9:f9:
                    32:34:99:b5:54:72:2a:3d:73:ea:29:a2:cf:0e:61:
                    e3:6a:84:f8:a8:0f:11:79:59:86:93:79:ae:3e:02:
                    1a:97:58:a2:fa:1f:eb:13:06:3e:27:17:fe:b7:1a:
                    18:3c:47:a5:e9:72:74:53:fc:34:51:31:6c:a9:e7:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:FE:72:21:79:03:BB:68:49:25:84:D9:FC:A2:AE:C2:59:4A:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:62:22:88:9b:e0:e4:91:9b:a0:17:83:cf:fc:54:ec:a4:
         4d:78:aa:5e:7b:17:68:39:97:67:92:ba:b8:ba:e8:32:5b:bb:
         c0:26:4e:d6:a3:61:85:6c:de:29:ef:7b:ef:d3:23:e9:b7:08:
         b7:1c:62:75:27:f9:db:7b:73:a8:ac:de:cf:4f:85:2d:66:28:
         67:4f:d3:01:73:73:ee:3c:23:a3:46:07:90:41:36:c5:1d:41:
         6e:aa:7a:e2:63:25:e9:13:d8:4c:dd:b0:7d:98:c8:6c:34:20:
         2b:9f:26:5c:61:d9:5c:b5:07:a2:5b:64:2c:28:d6:a8:fe:47:
         34:53:8f:46:c3:22:e4:44:8d:0d:c2:6e:0e:21:ce:27:6b:ee:
         20:8e:5d:6e:4c:63:8c:17:16:f3:8b:01:eb:e8:6f:63:35:6a:
         a9:fe:46:38:1d:8f:01:53:72:13:85:ef:a8:a7:1b:97:b2:8d:
         1d:55:94:29:64:78:f4:7c:ca:4c:ac:48:de:db:3e:c6:ed:e8:
         c2:46:59:5b:9a:27:53:d1:85:b3:24:98:f9:9d:08:c9:29:f5:
         e1:02:df:4d:70:ac:80:99:7c:fd:fc:93:7a:2b:12:dc:29:89:
         ab:70:a5:0e:06:3e:52:2c:aa:74:bb:40:37:41:dd:1b:3f:14:
         0e:ba:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:27 2025 by rpki-client