Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa
File:                     1044c764-927e-41a1-b94e-b8bb9091f9c3.roa (raw, json)
Hash identifier:          X7iAefUg3rBjDw6RyaaFp0XwQh7Bnlc38/C4DePtVZc=
Subject key identifier:   23:57:D0:C9:42:CE:E3:9E:85:22:1F:00:FC:03:9D:14:01:53:0F:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11B24FDD4202C28168A5CC11A6A4C58B3BA2DD72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa
Signing time:             Wed 16 Jul 2025 00:20:56 +0000
ROA not before:           Wed 16 Jul 2025 00:20:56 +0000
ROA not after:            Wed 20 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.134.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:4f:dd:42:02:c2:81:68:a5:cc:11:a6:a4:c5:8b:3b:a2:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:20:56 2025 GMT
            Not After : Aug 20 23:59:59 2025 GMT
        Subject: serialNumber=12ba3ef27db9b018de3b2e799f42b29cabaf3097b86bb0b25627481fce9db463, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:0e:c1:1d:75:87:cc:7a:6c:79:46:94:6e:
                    ad:9b:90:eb:44:08:ac:e6:24:db:2f:08:2b:6f:69:
                    35:d1:82:8a:20:76:3d:89:c6:45:ab:43:85:17:18:
                    f5:50:55:0d:f8:9f:e5:ea:f8:a1:6a:53:1a:8b:e9:
                    14:d7:0a:79:97:f4:04:66:c3:2c:ce:1b:64:df:5b:
                    3c:c0:28:55:13:8b:76:97:88:b5:f3:4f:55:5e:73:
                    63:fb:fa:91:42:ef:36:90:7b:47:4b:fb:d7:3c:f4:
                    14:78:e3:f1:87:b2:92:d0:74:ed:f0:2e:bf:51:58:
                    8e:a9:ab:67:b0:7f:83:9c:7a:98:8f:7b:ba:52:ad:
                    9b:a3:12:40:02:bb:d1:6f:f7:55:6d:cd:25:66:5b:
                    47:d2:5d:06:6e:e5:8c:c2:b6:4b:b4:77:d3:f4:68:
                    b7:d7:33:5f:f5:04:b4:de:7d:eb:c9:a8:db:c6:2b:
                    7e:1b:0f:49:97:02:63:f1:aa:44:7a:86:e7:35:f6:
                    a2:ac:41:d4:51:e3:39:d0:66:fd:8b:b6:69:4f:93:
                    df:1c:04:23:9d:68:5c:98:c6:44:f8:74:5d:58:7f:
                    6e:63:70:4e:90:d3:54:d6:8d:ed:a6:7d:00:e8:cf:
                    ef:64:14:b6:36:bb:75:08:d3:0d:3b:bc:8c:f5:f1:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:57:D0:C9:42:CE:E3:9E:85:22:1F:00:FC:03:9D:14:01:53:0F:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:9e:5f:be:68:3a:d1:45:2e:45:98:e0:8a:38:63:6b:36:
         4c:31:58:0b:2c:f9:9e:a7:ed:4b:1e:bf:04:d3:1b:63:a6:c2:
         41:53:89:ec:93:79:97:f1:b4:04:e3:1e:f8:db:f5:16:34:21:
         42:71:95:4f:a3:d1:c6:8d:2c:05:50:9b:be:92:49:34:d8:16:
         db:53:28:3b:ec:73:75:ea:61:50:b1:4d:a3:71:7e:e1:b5:05:
         16:c5:1f:f3:7b:e6:40:89:86:66:88:9b:57:12:0e:66:83:2b:
         08:57:d3:2b:91:8e:79:2d:76:8a:a9:3d:77:93:47:fb:47:ff:
         a2:0f:e9:ea:ac:f8:01:b1:9f:94:1e:1f:5a:9e:0e:86:e9:de:
         28:e2:3a:bc:51:85:93:a6:34:05:fd:45:ac:82:4a:c9:34:f6:
         5c:bf:e0:d7:17:3e:ed:f0:04:f4:9a:d1:ae:c4:ad:e1:09:0b:
         e9:d9:b3:20:98:dc:1b:73:fb:e8:52:03:b2:93:b4:78:77:ce:
         93:db:52:46:05:dc:55:db:45:51:33:4a:a8:a9:e9:da:b1:1d:
         43:f9:d0:8f:d8:b6:79:11:9c:e9:9a:b1:18:76:61:ef:36:91:
         ac:f7:90:a3:89:03:67:3c:07:d6:41:9f:26:af:2f:a9:7e:9d:
         04:52:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:24:30 2025 by rpki-client