Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa
File:                     3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa (raw, json)
Hash identifier:          RKpEhu4dkQ7FktD/2HJEfx8GnEZtXVqbFeV1zSoGqdo=
Subject key identifier:   71:43:62:36:33:FF:50:48:E4:D5:96:35:7B:57:FC:C4:03:3C:EE:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A4BA3EA1B09190E6F70488908E844737085000A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa
Signing time:             Wed 06 Aug 2025 10:08:31 +0000
ROA not before:           Wed 06 Aug 2025 10:08:31 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.54.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4b:a3:ea:1b:09:19:0e:6f:70:48:89:08:e8:44:73:70:85:00:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 10:08:31 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=6b9760a80e3fc43b5f5d80e5aeb82f30b007948a9d4404cfca9c70a01fd6d7b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:ca:ce:8a:a9:83:95:76:ae:6c:57:0a:9f:
                    2f:0e:07:8f:d8:0d:9b:ba:a5:7b:eb:54:da:0c:23:
                    c4:61:5d:3a:18:73:70:68:7c:0f:c3:af:bd:fe:77:
                    bb:98:12:a9:de:93:94:07:34:df:94:98:c6:76:0c:
                    4e:2e:21:7e:8f:a7:79:5f:96:b5:be:5e:9f:81:fe:
                    33:31:93:22:ab:ae:8a:f7:36:94:0d:0f:e3:d6:41:
                    56:eb:f5:ce:f0:8a:d0:b5:7c:a9:ad:54:a6:1d:95:
                    4d:4e:24:99:75:e8:93:56:c7:dc:c9:98:ee:f7:73:
                    db:b8:88:93:32:3a:dc:27:4a:c8:99:87:20:ca:9c:
                    32:b7:6d:61:5d:48:92:8d:af:fc:3d:4f:8e:2b:05:
                    e8:56:c8:1b:92:42:da:7c:8c:8d:34:e2:5e:37:e1:
                    e4:d7:11:de:8e:f2:83:83:ff:6a:34:25:22:c4:c6:
                    c9:c9:e0:46:b3:c6:80:f6:61:2b:f3:c8:3f:02:ab:
                    71:a7:75:40:de:22:49:b6:a2:96:23:a3:88:a6:fb:
                    ba:83:d1:b5:b9:2b:e4:ca:f0:60:6f:25:cd:8e:49:
                    29:19:9c:9f:47:5e:da:86:5b:8d:af:97:fc:bf:2e:
                    cc:00:b5:ef:76:f5:bb:ea:90:39:5d:ea:d8:f2:04:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:43:62:36:33:FF:50:48:E4:D5:96:35:7B:57:FC:C4:03:3C:EE:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:20:2a:34:2d:ed:ff:8c:9d:2e:8d:92:9e:0e:e4:10:c6:be:
         38:b1:ea:42:19:f1:c9:c9:59:58:4b:13:f6:a2:7c:d5:2c:80:
         12:25:1f:39:0e:a0:7b:c8:71:07:21:59:e1:5a:fb:23:9f:f5:
         39:6b:e2:f1:d8:7e:af:21:ae:3b:d4:c3:ac:c0:e7:17:a4:15:
         04:fb:39:18:c4:07:c2:e3:3c:a5:43:6a:3d:c3:26:60:f4:f0:
         2f:82:e7:e2:3e:89:47:6b:ba:23:60:cb:37:a5:44:8a:38:37:
         0b:08:a2:ae:16:4b:9f:70:a0:50:9c:bc:c7:e9:e4:4f:fe:1e:
         fd:d7:1d:ac:3c:72:4c:17:3d:da:0c:75:b1:de:7f:7e:93:a2:
         5d:ff:8d:9f:ae:d7:c8:f2:ce:11:f6:e7:22:3e:6d:48:90:01:
         28:ad:2b:ae:b8:4c:59:6a:70:d7:f1:5e:06:f0:95:ff:42:e8:
         62:11:d0:95:37:65:47:d3:ed:eb:3f:17:db:3b:da:e3:cf:fa:
         85:06:1a:01:a4:e1:be:7b:30:7c:d6:4d:56:7f:ee:5a:f5:be:
         ba:2b:58:eb:39:a3:f3:22:95:e1:b8:40:49:83:4b:71:96:16:
         8c:fe:6d:e1:5d:78:61:89:2f:92:47:65:f6:bc:9d:d1:18:7d:
         d7:80:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:40 2025 by rpki-client