Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
File:                     0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa (raw, json)
Hash identifier:          MdgjttfoljDTzutFzlA/qHHfx3kBQ+Ai5Jz5xc+l0xE=
Subject key identifier:   3F:05:9E:7C:EF:75:79:16:AB:C7:FD:5B:68:52:68:6E:A0:DB:82:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       540742F75EF09DA36141246043F8A69AD7ECA78F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa
Signing time:             Fri 01 Aug 2025 15:01:43 +0000
ROA not before:           Fri 01 Aug 2025 15:01:43 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:42:f7:5e:f0:9d:a3:61:41:24:60:43:f8:a6:9a:d7:ec:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 15:01:43 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=ee7669fb40bc1fb14e7c9688a75f9c25c7381063dcd3f1e90bcf0394cc87f2c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:a1:3f:49:5e:7f:03:5c:ce:4a:e0:d0:11:
                    4d:19:83:3f:8c:b7:1e:77:a3:10:6b:77:27:38:08:
                    cc:b5:86:71:4a:3a:0c:af:b8:02:25:67:e2:01:b3:
                    5c:0f:75:95:73:72:f2:da:40:62:e4:07:34:e6:f8:
                    6e:bc:4e:85:81:57:cb:30:c1:3a:d3:da:be:fc:bd:
                    31:84:22:3d:8a:66:3a:2a:db:00:70:5c:67:90:79:
                    19:47:55:0b:c8:6b:ed:1a:98:f9:c2:bc:85:0d:9b:
                    a1:92:da:f6:e2:04:4b:e5:ef:56:03:05:98:f1:fe:
                    a7:fc:a0:a8:f8:53:dd:da:92:be:19:53:ee:66:18:
                    9a:6e:b2:d9:a6:a1:24:af:e2:0a:16:57:3d:4d:b3:
                    f5:f7:9c:bf:28:c1:87:8b:65:26:d0:36:c4:2a:a7:
                    2d:15:4a:5e:69:fa:86:c6:89:79:14:f0:38:cb:74:
                    67:a7:28:90:ce:54:c6:f8:3a:7b:a8:8e:29:ac:39:
                    eb:75:b4:cb:23:a1:d2:55:e6:f0:3b:54:4d:a9:c0:
                    bf:b0:25:6f:18:c2:c5:11:b9:0e:ab:d2:b7:ec:12:
                    a2:61:a8:84:50:98:53:30:56:e7:07:9e:42:5a:fc:
                    a2:1d:6e:4c:49:35:af:a7:6a:86:96:47:ad:ab:55:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:9E:7C:EF:75:79:16:AB:C7:FD:5B:68:52:68:6E:A0:DB:82:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:d5:6e:5e:7f:d2:4b:06:9c:3a:80:ea:bb:06:47:de:f2:09:
         8e:c2:4d:7c:23:cd:ed:2b:a7:f0:6f:08:c0:3e:95:e7:f9:2f:
         8b:6c:6b:90:4f:72:76:3a:09:cb:67:27:54:98:1a:31:7e:d5:
         fa:08:c2:ee:40:22:4a:4f:7d:18:40:d8:eb:39:73:8c:8f:dc:
         7b:8a:04:91:c7:c2:29:6c:3e:22:7e:15:c3:76:f2:cf:44:10:
         8b:6b:07:90:54:51:20:5d:a2:46:35:6a:97:d2:c8:32:7c:84:
         74:7e:41:ee:3f:00:d1:5e:56:0c:0d:37:8f:22:f3:01:9f:0a:
         71:8e:6a:f0:d1:3f:c6:39:d2:47:79:0f:d6:fc:4a:26:59:aa:
         68:43:94:e9:8a:89:6e:74:97:96:73:e6:ac:ed:fd:6a:e0:4b:
         a8:08:f4:3a:ec:2e:e6:da:f5:02:96:3b:13:c2:e2:34:3f:b6:
         81:be:c3:74:b0:0a:48:b9:85:14:b3:fa:dd:e2:b2:3b:2e:69:
         9f:ab:03:ef:fe:52:6f:86:e8:3a:04:3f:3b:c8:31:91:de:fa:
         0e:d4:ad:da:97:86:b4:8d:90:a9:cb:4d:ea:7b:8f:21:de:ad:
         86:e5:5e:1b:c3:85:19:d9:2d:9e:d1:2e:65:bc:e2:68:46:b0:
         5e:84:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:50 2025 by rpki-client