Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa
File:                     119594d3-1a17-4118-856d-889f2bef824e.roa (raw, json)
Hash identifier:          PwTVf5gBCLHIl1hGmiSV5ZXtSpCXe/CRiA9zElujqUc=
Subject key identifier:   7E:2C:29:6C:22:0E:54:68:26:00:F6:A1:30:2C:64:BC:9D:FB:12:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42722603556A459B79901B83B0AC52A1D38C2CF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa
Signing time:             Tue 22 Jul 2025 00:31:55 +0000
ROA not before:           Tue 22 Jul 2025 00:31:55 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:26:03:55:6a:45:9b:79:90:1b:83:b0:ac:52:a1:d3:8c:2c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 00:31:55 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=aa2ce55083e73b8ce241eac05f437b766ff2defb7b4a6c8196c6fbbd7b287b34, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:b2:9f:44:2b:a3:de:23:f2:39:5d:9c:6a:
                    06:e4:71:ae:3f:fc:ab:ea:e7:e5:8d:75:6c:ae:94:
                    cd:31:be:06:81:a3:29:f8:3e:9b:f9:23:da:2a:0b:
                    c5:85:b1:65:ac:20:52:25:2f:7d:08:47:b9:c6:23:
                    c8:57:6f:8e:1c:63:95:f2:71:60:00:5f:2a:63:9a:
                    c2:4d:5e:61:d1:f4:fa:ac:f5:e4:0f:89:8d:68:c0:
                    47:bc:a2:ed:47:eb:ee:21:db:48:7a:73:97:cc:a3:
                    cb:1b:62:a2:44:70:4c:98:44:d9:4e:87:81:e3:8c:
                    33:4e:ce:b2:bf:54:f6:a5:02:cd:6f:1b:4c:1c:ac:
                    bf:d7:3c:0a:53:e7:e5:19:45:1d:44:47:b0:b9:52:
                    fb:30:58:29:8c:d0:86:b4:3e:7f:36:06:1e:54:f5:
                    ac:1d:d6:2f:81:58:c7:6c:0c:0b:a2:48:60:49:89:
                    6f:ed:ed:c4:43:61:e4:d3:7a:c5:03:ae:53:26:c9:
                    75:2f:9b:db:3c:61:d0:d4:12:67:c7:57:81:98:90:
                    4b:ce:0b:12:eb:18:a8:72:4d:44:28:47:72:e0:7f:
                    a4:e7:22:25:a1:83:8c:f5:a7:19:46:3e:ca:93:1d:
                    98:d0:68:29:7a:55:ce:6d:35:6e:f7:e9:db:79:bf:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:29:6C:22:0E:54:68:26:00:F6:A1:30:2C:64:BC:9D:FB:12:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119594d3-1a17-4118-856d-889f2bef824e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:ab:36:73:6b:32:1c:7d:2f:52:84:19:ce:ae:38:18:6c:
         71:38:49:67:f8:f2:f4:10:7d:12:bc:8b:ba:1c:83:0d:78:f2:
         1a:37:38:98:d5:9a:b4:90:bd:5f:5b:d9:fd:73:c8:d6:dd:de:
         5f:d5:d0:c5:39:7d:ff:8a:a1:34:6c:55:42:e8:18:29:57:53:
         36:c3:6a:40:e1:1f:78:1b:b5:58:65:bf:dd:05:62:35:82:11:
         bb:47:cf:71:51:0a:7c:37:18:01:22:a1:20:ea:4d:e1:c5:6e:
         ba:3f:66:47:a6:66:4a:dc:9c:e9:11:86:34:16:7b:74:ea:ad:
         34:1a:b5:5c:e8:8d:83:86:37:c1:96:5c:2f:6e:52:70:b7:dd:
         c6:b6:8e:2b:ea:f2:73:25:d3:0e:3a:3b:49:b0:d6:88:e4:8b:
         17:72:22:40:79:e4:9b:06:84:af:c3:6b:e4:f5:b0:df:ca:c5:
         68:51:65:89:35:56:fe:f1:c7:e3:96:96:4e:0a:1a:ba:5d:69:
         49:32:c2:6d:02:b4:f3:b1:9c:d9:b2:d7:b2:f0:e3:92:6a:ed:
         c3:81:64:cf:5a:0b:31:2d:b4:cc:e5:3a:0c:cc:06:ae:17:03:
         e4:74:28:ed:9c:3c:61:21:89:dd:f5:fb:fc:cc:93:cc:73:dc:
         f6:66:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:09:47 2025 by rpki-client