Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
File:                     259b0750-ae62-42f7-84c0-e7c8b6acca96.roa (raw, json)
Hash identifier:          YoKuUKY1eB0l5ei8VNfd2ZE4srwHIuAB1mODbPVWUGw=
Subject key identifier:   EF:DB:1E:66:DE:6A:6C:11:F6:EF:F9:D2:B5:F5:0F:61:C9:C6:6A:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       291DC701732113776317E2F003A2CF473F3E4EBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
Signing time:             Fri 13 Jun 2025 00:40:27 +0000
ROA not before:           Fri 13 Jun 2025 00:40:27 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.87.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1d:c7:01:73:21:13:77:63:17:e2:f0:03:a2:cf:47:3f:3e:4e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:40:27 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=7937184b7082393995f61dde713be29cfbbca8c60cfeb845759a1ad121fac089, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:02:05:50:2b:48:56:72:18:38:9f:8e:f8:
                    92:08:e1:a0:30:84:b0:33:01:41:8d:af:b6:69:5d:
                    93:83:51:d8:d0:ff:4a:23:3e:52:2e:a0:14:2a:d3:
                    ef:fe:1d:b2:11:81:a4:2d:c1:0f:59:a2:0f:18:39:
                    e1:da:41:3d:d1:48:93:5e:92:93:e8:b5:36:d4:6b:
                    0a:ef:38:48:e0:12:7f:2b:a8:56:ef:42:b8:7b:d5:
                    1b:30:9c:12:46:6b:bb:54:e3:c4:82:6f:ce:54:ce:
                    b9:e8:96:a3:cd:b1:c8:15:f6:d7:93:c6:1e:2f:85:
                    9c:31:be:14:50:c4:14:b6:a1:0d:8b:51:b4:eb:5c:
                    01:22:26:82:31:01:fc:72:5b:68:5a:46:50:a1:9e:
                    d5:48:c3:9e:29:f8:2a:eb:09:f4:0c:74:89:68:19:
                    85:cd:6f:e5:cf:e0:05:04:d6:d1:d0:31:c1:25:e6:
                    2d:67:40:ea:5f:96:7a:fc:9d:92:54:4f:26:1d:a2:
                    d2:dd:73:63:0a:dd:e6:d7:7b:06:f0:e9:da:a8:7e:
                    28:72:5d:28:97:25:cc:ff:a8:69:5d:7e:05:95:e1:
                    cf:eb:76:f5:f2:f5:74:b3:dd:4d:cc:a0:64:78:6a:
                    ce:4d:96:ab:0e:54:f1:82:3f:80:b5:f2:3c:09:60:
                    9f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:1E:66:DE:6A:6C:11:F6:EF:F9:D2:B5:F5:0F:61:C9:C6:6A:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:8f:13:a0:5c:fb:26:36:cc:27:49:97:20:83:4d:1b:0f:b1:
         bb:7f:04:bd:b4:bf:15:60:cc:ef:5a:81:ec:2f:d9:10:72:9a:
         32:41:47:67:35:1f:4b:74:76:ad:02:94:7e:35:61:95:35:93:
         a3:a3:4e:0d:97:88:6d:5e:92:05:9e:7c:f2:09:9b:b6:1c:ba:
         5e:9f:27:f4:42:33:cc:e2:d9:74:00:ec:f4:b9:8f:fb:c0:ee:
         e6:04:f2:41:bf:b3:8a:41:d8:ea:89:21:b9:1f:00:7c:de:48:
         de:24:db:08:ed:e5:b1:fb:ad:bc:19:d1:ff:4c:0d:cf:80:15:
         db:d3:3b:31:ce:43:dc:5f:c5:9f:63:b4:b8:22:45:69:8f:4a:
         b0:e2:9b:ab:7f:a4:fa:a3:9b:2a:3b:b5:0e:d5:45:ac:db:77:
         4f:d1:2f:8b:17:db:2c:90:4e:d3:3a:35:c3:19:e7:8a:b8:33:
         eb:f2:0b:a4:01:61:68:f9:f7:4d:fb:53:b5:d2:6d:a6:07:2b:
         8d:16:c2:e0:91:c0:28:75:7b:14:1f:5c:ab:7e:f0:c7:b5:57:
         e6:db:ac:cb:03:8e:f0:72:4b:10:c6:4e:27:1a:df:22:31:4c:
         1a:3c:57:ca:d8:d4:cf:05:55:cb:14:e3:da:5f:ad:b2:bc:37:
         77:03:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:04 2025 by rpki-client