Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa
File:                     4773b746-c511-41ce-a8da-8491af8ea281.roa (raw, json)
Hash identifier:          pDDN3DxgJkC3SjwLzGxdsofF8Ml42t+jogj+AKVu4S4=
Subject key identifier:   70:9A:3F:87:7B:36:9C:EE:B4:8C:14:14:73:D0:D7:F8:CE:43:47:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12081910094E2481BAFF8A6AD0345CEFC8891F3F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa
Signing time:             Fri 13 Jun 2025 00:31:08 +0000
ROA not before:           Fri 13 Jun 2025 00:31:08 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:19:10:09:4e:24:81:ba:ff:8a:6a:d0:34:5c:ef:c8:89:1f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:31:08 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=ab115a377ce1104a85e75f4f8a6177457ce90ee2efa967398261e04a4e58194c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:b3:00:80:84:f3:d4:2e:81:a1:a6:ad:97:
                    5b:d3:70:34:72:13:54:e1:4b:c5:68:75:98:ac:8e:
                    ee:42:7a:c0:aa:c7:c4:31:38:4d:a6:05:bf:dc:70:
                    21:66:f5:e8:9b:cb:7a:76:eb:15:63:ae:b4:0f:7f:
                    f3:7f:d3:1d:09:9a:74:3a:b3:9a:a5:92:ef:0d:79:
                    74:e0:bc:cf:09:57:95:68:e3:64:2e:4d:65:bd:43:
                    43:8a:55:df:4c:44:37:97:ed:be:87:a3:98:f4:c4:
                    04:b9:0c:48:16:15:d1:78:15:13:5f:79:03:83:15:
                    da:fd:6c:a1:6e:38:85:27:31:85:23:b0:37:60:20:
                    41:f3:3b:f4:d6:73:7b:4c:4b:31:58:36:6d:cf:f6:
                    43:09:de:b8:60:21:8d:fe:6b:75:84:fd:18:df:af:
                    97:98:43:fc:26:8f:47:35:54:97:79:1c:5e:72:70:
                    9d:fe:c6:2f:99:86:66:fd:1a:a6:70:fb:72:5a:b1:
                    f5:fb:de:b0:af:44:72:c5:b1:07:52:c6:59:3f:bf:
                    62:37:a7:08:ee:1f:98:46:f6:f5:91:30:ec:99:a2:
                    15:fa:55:1e:9b:2e:06:9a:9f:62:e2:57:07:7d:88:
                    bb:fe:85:ef:fe:21:78:c0:89:1a:3e:d6:70:43:29:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:3F:87:7B:36:9C:EE:B4:8C:14:14:73:D0:D7:F8:CE:43:47:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:62:90:7b:06:54:3d:21:67:56:f3:46:a8:3e:8f:41:e5:
         36:4d:9a:5a:95:fe:13:64:95:53:5b:1b:e5:00:30:af:f4:a1:
         07:17:7f:6e:59:d9:5d:bd:e7:d1:5e:0d:ad:09:9c:8a:27:cb:
         79:2e:aa:9a:78:34:12:aa:25:52:75:7e:75:14:e3:6c:58:55:
         6a:6a:2a:11:5d:6c:63:e7:d1:42:c9:39:9a:5d:3d:c4:a9:b8:
         fc:41:eb:cd:fe:45:39:15:3f:71:cb:12:ab:6a:c8:e4:1b:22:
         5e:69:b6:d1:85:be:4a:fc:61:3a:26:57:f8:91:01:12:23:49:
         82:fc:14:b5:18:c3:47:0e:2e:2c:d1:f7:87:87:35:41:ac:00:
         a7:c2:ff:22:04:52:e2:5d:c2:36:44:5c:f1:8c:a0:a6:6d:61:
         cc:d9:98:9e:d4:f9:cf:83:10:b7:a2:89:96:cb:5c:59:75:a0:
         57:51:90:de:18:4a:f3:d8:6f:c1:15:96:91:01:d7:08:cd:59:
         ce:2f:ae:15:3f:57:8d:5a:47:a1:0a:1f:cb:62:41:30:92:9e:
         4c:fd:c5:c6:6a:11:eb:a1:0d:87:c6:89:f3:9f:5b:71:f4:44:
         93:68:00:0d:0a:21:68:ff:1e:88:5f:9c:27:de:29:24:3a:0a:
         31:94:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:52 2025 by rpki-client