Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
File:                     0b205a6d-48aa-4da0-bceb-029957973791.roa (raw, json)
Hash identifier:          w9Veuxkmw8kjpF72cmtQxwOJasMQHTQTe925BnfcE3Y=
Subject key identifier:   D7:99:C2:00:6F:D8:8C:74:6A:94:78:B3:5C:37:DF:99:9F:4A:69:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6232A41E421AB1EC2A4AA13E2E41C7AFA430B0D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
Signing time:             Mon 04 Aug 2025 17:40:23 +0000
ROA not before:           Mon 04 Aug 2025 17:40:23 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.118.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:a4:1e:42:1a:b1:ec:2a:4a:a1:3e:2e:41:c7:af:a4:30:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:40:23 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=839eb9c897a4e5a40f7716b1f884ad35db1758875fcf8ee3794ec0ca95c01516, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:6b:3b:44:3e:ea:8e:06:f1:e7:c2:c4:35:
                    35:e4:1c:5b:6a:2f:de:45:92:c9:c2:8f:c0:5f:70:
                    2a:18:78:4c:81:2b:41:60:40:b7:83:b4:5d:8c:89:
                    9b:d0:7c:b1:b5:23:df:7c:12:1c:59:8e:4c:96:10:
                    a0:7a:02:db:e1:e0:6b:3b:7e:48:75:18:89:59:3a:
                    09:97:0a:60:0e:34:7b:fa:02:55:83:a8:86:cb:04:
                    57:42:14:1c:7a:bb:e4:e9:5f:c6:9d:9d:eb:a2:68:
                    d5:a7:81:72:fb:69:6b:a6:bb:33:c1:53:14:45:32:
                    1a:8e:1e:77:96:8d:62:56:3b:b0:df:3b:51:73:18:
                    52:64:54:08:fc:bb:62:e3:37:bc:bd:e8:be:7d:ba:
                    19:78:e8:70:f1:e4:21:fa:29:bd:fe:03:83:98:de:
                    d4:64:1e:ba:56:4a:b0:60:f5:8d:95:ed:e6:43:56:
                    40:51:df:6c:06:ad:7c:8d:62:0e:2d:0a:36:04:18:
                    fd:66:50:53:77:14:08:1d:5c:b3:61:68:c9:f6:2f:
                    bf:f0:4c:47:98:14:f7:f5:fa:08:31:99:92:16:0b:
                    f5:bd:02:c6:20:99:06:34:6a:5f:69:cc:3a:f5:dd:
                    6d:d4:c5:84:66:26:2c:48:83:ae:90:97:55:8b:02:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:C2:00:6F:D8:8C:74:6A:94:78:B3:5C:37:DF:99:9F:4A:69:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:9e:84:80:65:54:1a:45:ba:3c:91:13:cd:89:ba:e1:a7:
         44:d3:01:ca:6d:0d:95:4e:bc:f2:cd:5b:49:11:7c:63:5c:fe:
         aa:ef:9d:10:07:ba:9b:8b:b8:f4:ab:eb:b6:72:4e:53:91:30:
         41:ee:2d:75:78:89:0a:b7:1c:4b:85:85:b6:b2:b0:36:68:70:
         2e:f7:3d:ee:ac:85:68:9d:28:f2:eb:48:48:a9:54:95:4f:4e:
         98:2b:41:8a:39:28:5b:87:3b:43:c0:a0:5d:60:78:31:97:7e:
         32:db:16:c6:d5:ec:fd:a9:4a:8b:1e:e0:0f:ac:97:46:44:2c:
         95:48:7b:3c:c5:15:d4:f2:38:17:6b:f8:cd:46:9d:29:ce:1a:
         e8:88:52:e8:01:49:b6:be:5f:bc:80:48:b9:6a:44:3d:b4:f3:
         d0:6d:30:65:e1:ac:58:8d:ad:75:44:77:2c:91:39:c7:b1:98:
         4f:c3:30:4e:c6:10:4e:c1:66:54:f7:6f:61:ed:da:23:ca:a4:
         f3:90:f8:c0:13:a5:fd:a0:55:2b:bd:63:75:e2:d9:b1:69:18:
         40:58:91:28:83:da:d7:6c:cf:87:e0:10:e3:4b:2d:ec:34:7e:
         45:85:84:4d:e4:ac:bf:e5:2a:e0:49:06:32:ab:7f:84:3c:49:
         2b:6f:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:27 2025 by rpki-client