Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aec83-7583-444d-bcf3-8a330c25dcb2.roa
File:                     475aec83-7583-444d-bcf3-8a330c25dcb2.roa (raw, json)
Hash identifier:          IYvAPwk/SNdQ61FbcODUIi7ee80XyEG47/if6jl+IBI=
Subject key identifier:   36:A1:8C:99:FE:C0:47:58:67:2B:DE:7E:5D:F1:56:22:45:C9:F5:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19DC8404FCFCB195E966DF41AC89D977E0229540
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aec83-7583-444d-bcf3-8a330c25dcb2.roa
Signing time:             Sat 14 Jun 2025 00:51:41 +0000
ROA not before:           Sat 14 Jun 2025 00:51:41 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.1.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:dc:84:04:fc:fc:b1:95:e9:66:df:41:ac:89:d9:77:e0:22:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:51:41 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=b6a4d38f1d660615eee7510efdbba7565790fa06805b130294e9bb71dbe28ea3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:bd:14:82:56:b0:92:db:77:41:b5:30:d4:
                    cf:42:74:77:4c:b8:0f:4b:28:1a:ef:81:2c:1d:5a:
                    a6:df:fa:e2:45:d1:32:0c:7c:10:4d:31:ca:8b:36:
                    e1:d6:29:d5:0b:4b:6d:68:2f:76:3c:15:d7:d1:7d:
                    e6:c9:6a:05:08:91:8b:66:0d:45:c8:36:de:6d:7f:
                    be:07:50:38:8e:f3:29:d9:48:3c:5c:74:92:5a:01:
                    83:85:9b:d6:64:5f:53:01:93:5d:27:13:51:28:ad:
                    72:46:80:cb:7b:c8:58:81:c0:37:e4:eb:10:76:b7:
                    dc:5f:13:0b:24:1c:ef:a5:a3:76:a4:7a:59:fb:c8:
                    8b:4c:19:cb:0d:89:6d:aa:c0:d2:16:21:ff:00:e7:
                    77:60:15:42:89:26:e1:d4:51:75:70:1b:4c:16:1c:
                    6a:99:31:2c:11:5c:84:c7:bb:a7:a5:c3:3a:de:e4:
                    00:ec:8b:51:c1:10:32:00:49:4c:e4:47:8b:e0:61:
                    be:05:72:79:64:b3:b9:79:ae:29:0b:bc:11:f7:5d:
                    da:63:14:20:3b:b9:c5:62:d9:34:4b:f5:aa:ec:3c:
                    0f:05:1d:f4:7d:86:f1:c9:ba:30:fb:30:8b:fc:a8:
                    70:5d:b7:ae:ac:63:ef:ec:f1:e9:6d:d8:17:4b:44:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:8C:99:FE:C0:47:58:67:2B:DE:7E:5D:F1:56:22:45:C9:F5:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/475aec83-7583-444d-bcf3-8a330c25dcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:25:e5:ad:25:4a:0a:e9:f6:53:96:be:0e:65:db:d4:0e:
         ce:aa:d1:1c:31:5a:2e:d0:24:84:dd:09:02:74:13:89:65:74:
         e0:46:28:04:84:28:9d:68:c0:43:19:11:d7:af:44:6e:3f:f9:
         fd:e8:a5:b1:75:52:31:7b:6e:cc:c9:83:81:5d:3a:f4:f7:06:
         d8:34:e7:2b:7c:0d:24:27:46:03:3b:27:35:ad:3b:49:32:4e:
         b0:1c:26:0c:be:1c:16:56:75:d9:23:ff:1f:bd:b3:9b:72:49:
         2f:30:72:48:c0:68:af:44:ed:63:b2:75:93:28:64:98:76:37:
         aa:55:64:5e:05:06:8b:f5:27:d8:25:78:03:60:76:2d:be:25:
         69:a6:d0:88:f4:49:ed:47:fe:44:b4:15:21:82:8b:6c:f4:6d:
         19:5c:30:3f:24:81:d4:e6:9f:1c:8d:9f:ca:a7:55:12:8f:d9:
         e8:56:1b:96:b3:79:5a:fd:37:09:e1:01:d7:f7:d2:16:46:d2:
         66:6a:7c:cf:00:7b:30:a3:e7:f7:a4:c6:9d:f7:94:b1:e2:7e:
         12:92:dd:cf:2f:5e:bc:1c:f5:01:7f:48:32:23:87:18:e8:76:
         c0:35:86:19:64:8d:4b:32:72:0a:db:bf:30:29:18:a5:3a:4a:
         66:d8:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:31:15 2025 by rpki-client