Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
File:                     36d79548-8ba4-4d88-8edf-6092cba143a6.roa (raw, json)
Hash identifier:          D/qtZykPhxCX9qfxQT41+sJ5Jk57/985Lp15dvPbNPo=
Subject key identifier:   CF:73:D6:74:03:04:78:BF:DE:C0:71:27:2F:4A:B7:FB:AB:D1:9A:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       425CF71CADF4B7271BC86AB463434F0BAF0825FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
Signing time:             Wed 06 Aug 2025 11:06:55 +0000
ROA not before:           Wed 06 Aug 2025 11:06:55 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.113.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:f7:1c:ad:f4:b7:27:1b:c8:6a:b4:63:43:4f:0b:af:08:25:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 11:06:55 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=9f43d24f67113183c6e1b0d506b6d1b437a079fd09de09ea752e45ed74ce41c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:3e:48:dd:03:75:44:1b:5a:fb:a7:2d:6b:
                    7f:17:0d:74:0c:84:8f:d5:5c:b3:67:26:0c:df:0c:
                    0e:f7:8b:22:a8:e7:e7:78:bc:f3:bc:6d:a4:44:30:
                    02:e6:3b:63:10:a6:4e:89:46:8a:e9:81:b2:20:ba:
                    45:38:57:1b:c2:0f:8c:8f:e3:cf:80:f0:91:c4:3d:
                    9f:c2:b9:ea:b9:90:94:31:5c:ad:f2:b2:0a:b1:3b:
                    6e:7c:c1:20:4a:4f:30:0c:7d:44:67:85:b2:6a:c5:
                    9a:1c:b0:cc:7f:1b:2b:76:6e:2d:7a:b1:37:d0:81:
                    0a:cb:ef:86:98:4b:22:2d:70:15:bf:c1:79:6b:06:
                    e1:bb:94:10:85:71:8c:b7:c2:7e:8d:36:1d:ad:d8:
                    bc:13:af:70:ef:ab:d2:8c:82:40:49:b7:57:b0:04:
                    e8:59:60:f0:28:53:98:ae:63:02:7d:a8:6c:cc:3a:
                    1a:be:a7:d1:33:67:a0:a4:d0:ff:58:a7:ed:39:7d:
                    bb:39:76:bd:1f:58:9c:f8:f9:d8:ae:87:d2:f0:8e:
                    b4:51:29:80:15:00:6b:5d:62:31:86:4b:ef:a7:c7:
                    94:40:c4:c1:0b:5c:90:b1:bf:07:17:09:b9:70:26:
                    ba:15:ff:80:d8:8f:5b:90:c1:bc:5b:b3:5d:49:31:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:D6:74:03:04:78:BF:DE:C0:71:27:2F:4A:B7:FB:AB:D1:9A:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:af:be:39:58:64:4f:c7:7a:13:34:2c:24:6e:38:7c:de:
         27:79:86:44:13:5c:3e:e2:e1:5a:44:f7:fb:47:b5:8d:90:40:
         ba:f2:a8:b6:0a:7b:6f:33:3f:4e:dc:f3:77:c3:bc:5c:95:b8:
         9e:d2:88:16:76:ff:67:00:97:b2:e0:2a:34:8e:32:15:37:d2:
         22:57:5c:11:59:e0:d5:fa:8a:ec:1d:85:f5:48:de:9f:79:48:
         4f:14:b9:46:bb:3a:31:d7:af:63:22:a6:2f:69:10:6a:e8:fd:
         cf:a7:81:c4:e5:e4:64:c3:b1:55:ab:23:c7:36:df:eb:a5:e9:
         f3:d2:cb:02:6d:59:3b:95:93:1b:a1:4e:0b:d3:18:ef:12:b0:
         80:93:8f:4a:34:25:40:eb:c6:bb:26:e2:01:9d:a4:93:47:4c:
         41:ea:0e:a3:40:86:5b:ab:38:e4:3f:0d:e8:3d:1f:b3:48:05:
         ad:5c:00:0e:de:e9:26:d1:16:c2:1c:80:6f:0a:d4:89:06:7d:
         7d:75:c9:77:0d:b6:4d:69:a4:5b:c5:27:8d:c2:4a:10:9b:e3:
         25:e7:4a:71:e1:e9:d3:ad:35:2c:c2:88:1d:62:6b:c1:98:c9:
         49:83:56:ce:e2:8e:51:09:db:90:9b:16:5a:f8:8e:d8:94:b5:
         52:78:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:52 2025 by rpki-client