Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18be7a76-724b-4e6a-9d5a-ba51fd885a5e.roa
File:                     18be7a76-724b-4e6a-9d5a-ba51fd885a5e.roa (raw, json)
Hash identifier:          eFErk5dn/TkLpccqwIACMvUUFmI27USLiP1EpzTErFo=
Subject key identifier:   BB:93:AE:15:91:D2:3B:8A:18:DC:9F:E1:69:37:A8:F6:68:25:0E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B76A13F11702B1C3E8278A1430E501EEBF84DBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18be7a76-724b-4e6a-9d5a-ba51fd885a5e.roa
Signing time:             Fri 01 Aug 2025 15:12:08 +0000
ROA not before:           Fri 01 Aug 2025 15:12:08 +0000
ROA not after:            Fri 05 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:76:a1:3f:11:70:2b:1c:3e:82:78:a1:43:0e:50:1e:eb:f8:4d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 15:12:08 2025 GMT
            Not After : Sep  5 23:59:59 2025 GMT
        Subject: serialNumber=a9d7de8f561658a342de5308998993676de24bd058d2f8c2787175cad78290a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:3c:b1:00:34:05:d0:75:a6:7e:55:30:16:
                    e9:c4:9a:8c:9d:fc:a4:1c:38:48:40:1d:b3:a7:d6:
                    21:d6:72:e4:a2:f1:8e:1c:7f:77:26:63:2e:a9:f4:
                    cc:b0:cd:be:2c:3f:c2:20:58:a1:d9:84:94:cc:b4:
                    58:ea:ce:71:6f:54:cc:ec:8b:da:bd:c3:47:d8:81:
                    7b:82:0a:68:9c:32:08:3b:24:8f:49:16:97:e4:51:
                    97:bc:19:f5:71:41:ad:12:7f:98:2a:bb:0a:58:bf:
                    a4:46:66:b3:9f:8e:15:8e:ba:25:61:df:c8:41:4a:
                    45:d3:5d:bd:8d:4c:76:a1:36:f9:4d:41:17:0b:57:
                    15:9e:51:2f:7c:9d:f5:2f:90:2f:9d:2a:41:35:56:
                    9b:f9:0a:0e:3e:c7:33:91:69:0b:cc:36:e3:4c:e2:
                    ae:0c:22:80:5d:59:60:9a:0f:40:57:3d:59:24:2b:
                    36:57:f4:df:cb:da:69:50:f7:80:2e:ea:5a:ec:d7:
                    41:33:e9:f1:e4:a1:c8:74:94:39:b4:d3:90:67:b1:
                    00:8a:f8:74:cb:b1:cd:cd:f4:59:f3:5b:2e:d6:9a:
                    85:7d:f9:2b:f9:27:36:17:6c:28:a7:f7:82:2f:c7:
                    8c:cd:b4:78:9d:78:31:25:f0:55:22:f9:73:41:f1:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:AE:15:91:D2:3B:8A:18:DC:9F:E1:69:37:A8:F6:68:25:0E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18be7a76-724b-4e6a-9d5a-ba51fd885a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:5d:d1:3f:45:16:6a:7c:aa:3b:52:9a:ee:0b:aa:1c:ce:
         ba:9c:b7:9b:a5:15:85:2d:72:2a:ec:08:fd:5a:a4:18:b7:e3:
         e4:c5:e7:ff:b7:67:4e:eb:e7:94:ef:10:40:79:ba:14:7e:ac:
         03:cc:74:01:02:37:00:78:de:5b:a7:cd:14:7a:a7:24:69:91:
         7b:84:b0:dd:f3:bf:6e:fe:1e:a7:d8:b2:41:91:6a:da:3e:80:
         6c:68:d5:6e:c8:47:4b:c4:5a:78:71:fa:25:12:2b:42:0f:ef:
         38:21:75:05:48:85:e2:ca:28:94:c7:15:92:bc:52:76:3d:f2:
         67:0e:8f:e0:76:d8:c2:3b:ab:8a:0a:66:ab:f5:42:0e:db:9a:
         ac:b2:bd:e8:20:e0:11:ec:a3:ba:f4:16:9a:13:7c:50:ff:89:
         12:52:24:a4:6d:dc:60:cf:7e:75:ff:77:82:98:6a:83:21:d6:
         4c:93:64:9d:c5:bf:eb:bf:ab:e1:4e:d4:07:86:a7:46:f8:55:
         f3:de:8a:b3:31:40:05:77:23:72:73:4d:ff:f5:0c:cd:c4:08:
         3b:09:72:3b:8b:0d:6b:bf:8d:73:1f:3b:f6:68:8c:5e:57:5e:
         51:dc:ee:ef:c6:e9:64:e1:e0:72:ce:fc:e4:9c:17:3f:76:18:
         08:6a:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:04 2025 by rpki-client