Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
File:                     0b205a6d-48aa-4da0-bceb-029957973791.roa (raw, json)
Hash identifier:          ektrLkKYk6hdzkK20dTc3qdhgQx2AuOUqQkp/sVPuhQ=
Subject key identifier:   F0:8C:2E:85:33:5B:EF:15:CF:81:CC:D4:E3:52:7E:B6:04:2D:D6:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C8925A8E5C83EF5817427579C974C994D64421B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa
Signing time:             Sat 14 Jun 2025 00:51:46 +0000
ROA not before:           Sat 14 Jun 2025 00:51:46 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.118.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:25:a8:e5:c8:3e:f5:81:74:27:57:9c:97:4c:99:4d:64:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:51:46 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=468610dd76a47a36a876a03baff1d4ea8d8f93b23b46f18444f933875b3371a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:c9:d9:ed:52:33:4b:d1:38:d9:7a:f8:cc:
                    f8:02:7f:99:41:c5:0e:e3:8a:39:b4:81:c7:a9:49:
                    9e:64:31:5b:21:37:01:2b:d1:0b:74:c5:a4:a2:23:
                    ae:e5:5d:f1:63:a8:e4:7e:36:91:d9:25:e4:11:7d:
                    d0:81:7e:8d:fb:89:14:d8:a7:e0:51:9b:06:c2:57:
                    86:75:a0:c0:22:9f:5c:4c:04:ab:ee:ff:c4:5a:1e:
                    5b:82:ac:6f:c4:a3:14:51:1f:ce:f5:ca:c1:a1:37:
                    e7:96:c0:94:f7:50:4a:db:3f:9f:40:d7:88:f0:aa:
                    6c:20:91:94:a1:59:1b:09:4e:16:ad:96:92:54:99:
                    75:b2:e8:6f:99:40:3b:a2:43:eb:c3:8a:25:6d:e6:
                    ab:34:7b:31:fb:03:23:20:9e:b5:37:4d:c8:92:13:
                    37:0e:52:33:68:9e:d7:f6:22:a3:d7:d0:3b:ed:f4:
                    2a:67:78:c0:4e:64:b4:14:8e:14:8f:c4:1f:6e:c4:
                    6a:9a:c3:6e:9b:b6:a8:a6:cd:a6:c2:2b:44:df:2b:
                    60:16:86:16:5a:6d:83:58:08:33:dd:88:f2:8c:3e:
                    01:cb:f6:33:da:c2:e6:ed:f6:6f:75:3e:2a:a8:3f:
                    a4:3b:7b:99:fc:ac:f4:6b:a3:47:9e:bf:0e:0b:40:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8C:2E:85:33:5B:EF:15:CF:81:CC:D4:E3:52:7E:B6:04:2D:D6:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b205a6d-48aa-4da0-bceb-029957973791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:8b:ab:cc:3e:e1:9b:a9:ff:32:25:2a:b3:1e:67:31:2f:
         53:9f:1b:b6:08:93:e0:2c:19:cd:8a:fb:50:e8:11:bf:e8:5b:
         6a:83:6f:af:4d:05:c2:f0:38:43:3b:37:a9:4c:2f:c7:5e:34:
         01:fb:4a:60:26:b8:10:08:26:da:4d:aa:41:12:89:bf:b4:48:
         1f:e5:ae:7f:bd:48:cb:6f:79:fb:58:bf:ba:bb:47:2c:0f:f4:
         e6:a0:8e:60:06:5e:8a:b6:b5:98:28:6e:18:37:75:58:99:07:
         c9:88:66:00:b8:11:70:c1:6b:67:df:a0:01:89:e7:f8:e5:db:
         15:6c:d2:aa:d6:3a:b3:15:4d:77:de:de:ca:a5:99:3b:4f:39:
         86:90:1c:30:24:d0:52:54:a2:37:82:2f:58:17:43:b4:73:fb:
         af:2d:85:d7:e1:a7:9a:a1:0c:cd:c9:56:9a:87:2f:77:41:02:
         e3:65:cd:9b:d2:4a:28:36:1f:25:02:f5:46:20:d2:df:1f:fc:
         18:6d:c9:55:7f:88:59:cf:be:4e:86:18:bc:d8:d0:aa:33:b2:
         bd:11:ea:8f:bd:0a:ce:12:15:e1:c4:f7:03:10:47:5c:c9:19:
         e0:7b:ca:ef:ae:c2:b5:30:cf:5d:e4:c0:1e:db:b2:c9:53:93:
         f2:9f:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:16:46 2025 by rpki-client