Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
File:                     18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa (raw, json)
Hash identifier:          c/8t1kXQ/sjYjt54Kp2U0juYOZ/djdbHy6DzDG6D+k0=
Subject key identifier:   9E:10:DF:0A:FE:C2:29:23:CA:99:5E:63:05:13:12:97:B4:64:E7:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B70BBB81F1AF5271DB07DBAEDDF8A41060272B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa
Signing time:             Mon 14 Apr 2025 15:20:18 +0000
ROA not before:           Mon 14 Apr 2025 15:20:18 +0000
ROA not after:            Mon 19 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:70:bb:b8:1f:1a:f5:27:1d:b0:7d:ba:ed:df:8a:41:06:02:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 14 15:20:18 2025 GMT
            Not After : May 19 23:59:59 2025 GMT
        Subject: serialNumber=4e780898c2f6ddafdc72ef718422060897948141ca044b36d7a15e721804b80b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:9a:38:9a:f4:c6:9c:8c:97:5b:8f:93:8c:
                    b2:56:1e:5e:cd:4a:f5:29:4a:d6:68:99:86:5c:73:
                    5d:9b:5d:db:e7:03:ed:f5:c3:13:bf:17:0d:cd:2c:
                    ff:bc:9a:6a:3c:66:ec:f1:9d:79:e0:ed:cc:26:ec:
                    4c:c9:23:87:64:51:4a:91:94:37:ff:f1:c0:18:3b:
                    27:00:62:1e:00:94:ef:da:c3:dc:76:77:d6:f3:1a:
                    16:3e:ff:d2:d0:5c:e6:44:1c:d0:af:4d:87:7f:f3:
                    a4:9b:59:40:5f:b6:96:f7:51:07:37:be:4a:db:42:
                    96:80:c7:6d:81:e9:48:68:09:88:c0:6d:18:0e:78:
                    03:f1:69:b6:bc:68:4d:4d:61:bc:32:13:4d:84:d1:
                    6a:c5:cd:87:30:4c:9c:1a:99:dc:07:4d:9f:fa:89:
                    04:82:fe:c4:a1:c8:b2:bb:97:bc:04:28:80:78:a0:
                    b1:5a:f6:1b:df:d7:12:a2:a4:c8:60:30:8c:90:d3:
                    ca:83:81:6d:37:1e:d6:05:12:08:e6:10:cb:d2:36:
                    a5:9d:11:57:02:22:e2:ef:ae:75:c2:30:71:a5:8d:
                    ca:36:29:f5:21:42:39:0b:ef:73:6d:9b:73:27:43:
                    7c:e5:f2:ff:6d:08:55:4b:7c:d1:91:04:04:57:4c:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:DF:0A:FE:C2:29:23:CA:99:5E:63:05:13:12:97:B4:64:E7:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18fa7199-3dc5-4ca9-bc26-096bf3df3e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:8e:f3:72:0a:2f:85:ca:9e:9a:c6:2a:13:15:d0:3f:6a:
         e3:e4:17:a6:67:df:58:5d:93:d8:ec:e9:22:95:1e:71:15:d3:
         28:e4:17:6b:b4:d4:b9:2c:b0:a2:60:af:8e:fe:74:dc:e2:39:
         3e:8b:d6:e7:ad:3f:ed:d8:d9:61:0c:5e:40:07:24:34:94:df:
         61:7d:99:10:27:3b:f6:cc:77:93:e7:e9:7d:54:80:1a:1a:f7:
         06:95:38:b3:6d:af:01:1a:5f:dd:f7:50:af:7e:f3:d0:17:47:
         bd:1a:d9:9d:12:39:08:9d:49:c0:5a:08:bc:ce:e2:28:7f:a5:
         97:fe:f1:45:68:52:1e:8d:6f:92:cc:d2:66:63:af:7d:0e:75:
         70:8d:53:3b:46:1d:d3:fc:9e:49:58:3e:35:2b:37:04:a1:3a:
         3a:62:79:cb:ea:de:e8:d7:4c:bd:9e:12:de:3c:c3:a6:7e:9a:
         a9:aa:ca:02:74:aa:b7:b5:07:ac:4c:03:3f:8a:81:51:f4:5d:
         da:c7:54:dd:7c:37:95:6e:01:c2:3a:86:eb:08:cc:7b:4a:08:
         c4:a3:13:24:f6:28:20:cd:55:5e:a6:70:7a:70:48:49:6a:50:
         3a:15:f9:fd:ae:78:37:f3:fa:cf:2b:3e:d6:3b:f8:c8:09:ec:
         5c:3a:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:30 2025 by rpki-client