Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa
File:                     2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa (raw, json)
Hash identifier:          cZpNyL2XjCndv/tGtvPZo/200N8ocEFmboBnCkWjCG4=
Subject key identifier:   C7:B2:1C:48:9D:BE:DA:4E:14:CE:56:57:2B:65:2B:02:17:3E:E2:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A5617DDD780900F45946C15FC5EDF375C6D4CFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa
Signing time:             Wed 06 Aug 2025 00:10:14 +0000
ROA not before:           Wed 06 Aug 2025 00:10:14 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.23.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:17:dd:d7:80:90:0f:45:94:6c:15:fc:5e:df:37:5c:6d:4c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:10:14 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=84ac77ce2dc37c7ee624db14c1093cc28b9e23841ca1e9b7f4f382dfc5ee8e6c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:65:b7:d6:ef:e7:ca:c4:cd:2d:e9:8d:53:
                    4b:cd:4f:39:63:29:45:57:e3:d9:52:2b:b9:8d:1a:
                    af:bf:05:20:ea:e1:ba:81:c0:f0:ac:d5:3f:fb:9b:
                    87:49:ec:1c:2d:d9:14:23:23:98:c9:71:4e:dd:7b:
                    45:e2:02:3f:e3:10:04:f2:11:0c:84:9a:8f:88:c6:
                    9b:21:fd:c4:ef:00:52:92:62:02:0b:ad:92:8e:1b:
                    c4:f7:2c:37:b0:bb:fe:b2:a6:b4:03:90:ee:77:8d:
                    c2:ee:92:b5:77:e9:85:23:09:9b:cb:d9:eb:12:21:
                    cc:c6:66:4d:38:9a:5b:74:4d:3a:1f:70:11:79:63:
                    49:cd:08:26:69:40:23:9d:31:e2:96:1b:95:b9:7c:
                    e2:3a:d1:77:c7:a4:29:ea:0a:ff:e8:4b:72:4e:e9:
                    56:7e:3e:18:25:9a:83:66:10:66:b1:b2:35:c0:1c:
                    09:3f:af:63:a0:de:92:c4:65:74:61:46:f0:b6:7b:
                    c6:0a:fb:ca:54:3c:0e:fb:e4:c8:90:d0:fb:ee:f6:
                    0e:6b:1a:c7:55:07:59:6e:ab:cc:0d:54:b8:b7:13:
                    ea:06:2d:2c:bd:b8:6f:ab:17:d6:51:76:23:ed:9b:
                    ea:26:fb:14:07:f7:83:06:8d:05:65:7a:20:7d:9a:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:1C:48:9D:BE:DA:4E:14:CE:56:57:2B:65:2B:02:17:3E:E2:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2230f1d3-1d01-4a25-b765-bf20d9c0af37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:4c:7b:f2:63:6b:87:b0:ff:65:dd:f6:86:11:2b:d5:57:
         fc:c8:0c:c1:86:4b:f9:63:29:a6:42:35:a7:12:83:a5:3c:79:
         4c:1a:d3:c0:e1:54:6c:a9:26:ed:6e:e5:95:9e:d4:d3:07:97:
         2b:7a:bf:64:0b:47:d9:91:fe:41:cf:a6:11:e6:ea:ee:90:21:
         49:1b:bf:80:f9:d6:82:6b:87:3f:26:03:74:ea:3f:b6:91:86:
         90:ad:7e:7b:90:b1:15:54:2f:f1:8d:3a:bd:b1:f6:c7:5d:83:
         d3:02:32:0c:89:87:fd:43:0e:4d:6a:0d:28:3c:f0:ec:f3:06:
         4f:77:6d:37:17:f3:e2:9f:aa:a4:8d:68:9f:c2:37:fe:86:27:
         fb:84:75:25:99:ff:1e:21:ee:fb:d5:06:b9:27:17:55:c8:2c:
         7e:45:a5:97:fc:22:6c:e7:fa:60:88:43:48:b2:9c:6d:68:b0:
         ae:db:62:48:1a:60:cc:c4:bd:d7:c7:70:87:98:57:10:52:ac:
         89:7f:5b:f0:93:c0:a9:1b:6d:86:93:25:55:f3:82:1d:54:86:
         1e:e4:05:ec:ef:a3:05:36:ec:77:8d:74:2e:be:87:23:a4:5f:
         fe:0f:d3:02:dc:f3:36:13:d0:45:3a:4a:01:c3:5b:e9:33:a2:
         b4:e0:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:52 2025 by rpki-client