Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa
File:                     12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa (raw, json)
Hash identifier:          yk76wQcue0lGGvrj5PaQRJH8BPQsoNq924MsNhOWLuI=
Subject key identifier:   DB:F9:86:FA:E2:99:BA:D1:81:52:6B:2A:10:07:C0:7E:38:14:5B:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3572DE9B64EBB0820BE2273F04E46AC9F79C62F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa
Signing time:             Sat 07 Jun 2025 00:30:33 +0000
ROA not before:           Sat 07 Jun 2025 00:30:33 +0000
ROA not after:            Sat 12 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:de:9b:64:eb:b0:82:0b:e2:27:3f:04:e4:6a:c9:f7:9c:62:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:30:33 2025 GMT
            Not After : Jul 12 23:59:59 2025 GMT
        Subject: serialNumber=3b0ff59ec27536cfc5bd1bcf5f88786caec330b79911ae500b0740961ea6908c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:32:dc:86:ca:3d:a8:59:7c:92:b0:6b:2c:
                    b3:72:9e:5c:93:eb:4c:62:6e:51:f7:64:19:b8:48:
                    4d:1c:2d:cb:90:2c:bd:71:c2:4f:2d:d9:2c:88:a1:
                    3c:03:44:69:6e:8a:20:89:66:a9:32:c5:de:be:33:
                    44:ef:86:20:df:c6:4b:ac:e8:51:8f:a0:00:40:70:
                    b7:1d:a4:db:4d:6a:83:9e:d8:29:2c:55:09:7c:43:
                    6d:a1:58:46:0d:2f:15:c4:21:2b:4e:20:59:91:fc:
                    c2:b5:32:44:28:ed:98:8b:3c:8f:41:8d:eb:57:1d:
                    b6:f5:46:91:1c:af:22:3f:ba:76:61:9c:e8:52:a4:
                    9c:81:37:cc:23:ec:ad:83:c5:db:1b:0e:30:aa:46:
                    bd:90:85:bc:e4:01:d8:eb:23:44:3d:8c:ef:6b:94:
                    07:f5:0e:04:99:15:8c:38:c9:c4:d2:e0:f4:09:b5:
                    94:bb:74:ed:06:5f:34:e1:f8:27:35:bd:8a:5e:96:
                    7f:cc:ae:53:4a:df:2e:40:6d:cb:5b:3f:e0:88:11:
                    52:97:38:5a:34:76:c9:24:51:40:4c:b7:e2:39:d5:
                    d6:fa:3e:0c:13:ad:23:0d:5f:57:27:17:4a:d9:7a:
                    12:6a:5a:03:51:c0:d1:72:84:c1:87:a4:de:83:6a:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:86:FA:E2:99:BA:D1:81:52:6B:2A:10:07:C0:7E:38:14:5B:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12aab65b-41fe-4e44-98e4-a3bfeab8c9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:56:e7:d7:d0:ce:e1:36:17:d2:80:3b:22:cb:b8:82:45:
         e6:f7:8b:e4:64:c7:e7:09:49:b0:db:4c:55:ed:48:55:44:72:
         ff:9f:45:bf:85:7c:1b:fa:dc:cf:67:19:42:80:3b:03:78:25:
         5b:77:50:0d:59:61:1e:9a:aa:a4:3d:58:b2:76:6b:58:2f:f1:
         65:a6:15:3b:27:ed:94:26:82:04:a8:f4:66:ba:11:a2:2f:3a:
         95:1d:32:06:c8:d0:3b:87:ed:ae:7f:0d:22:7d:87:ff:8f:c2:
         0c:ba:44:76:f3:3c:2c:72:db:35:72:9c:26:05:94:32:7a:33:
         39:33:68:43:84:8a:aa:26:28:18:ca:c0:2d:0a:1a:7c:a6:92:
         7b:3b:d8:3d:3e:14:6c:98:2d:33:51:2c:80:77:37:83:aa:76:
         aa:75:39:a8:24:3c:9d:03:25:ff:da:18:70:ef:0b:4c:d8:93:
         79:2c:ad:a4:aa:0b:aa:08:bd:fb:37:7f:4b:52:47:23:9e:88:
         4c:80:d6:ea:e9:77:23:b8:67:5d:04:2d:a4:4a:aa:4c:79:1f:
         67:98:b5:4e:d6:5b:fc:c7:04:d1:0b:86:7a:22:d6:f1:62:e8:
         86:16:8d:05:22:e9:07:ba:08:85:c3:a9:de:e8:9e:26:f8:ac:
         47:37:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:29 2025 by rpki-client