Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa
File:                     47f76ec9-1410-4f5f-930d-b1663472dcc6.roa (raw, json)
Hash identifier:          hOV77ayn8f7RbB2waNmr2SgR5a6acikn/7b4YRRlsgg=
Subject key identifier:   35:BA:7D:B4:FB:B0:AB:53:DB:83:A6:E7:1B:55:47:0E:2C:D7:36:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12B6519D94820674C7BDF7152DFCF39B3233053C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa
Signing time:             Sat 14 Jun 2025 00:41:33 +0000
ROA not before:           Sat 14 Jun 2025 00:41:33 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.214.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:51:9d:94:82:06:74:c7:bd:f7:15:2d:fc:f3:9b:32:33:05:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:41:33 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=9137f7af2abeb56cbc0376916ef9d99729cb96fc408b8a1990b7e00fa57309d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:34:4e:7b:35:2a:ea:ea:ba:b4:a8:9b:e7:
                    f7:89:b8:7d:26:3e:4b:08:a2:c4:42:85:a6:3c:fe:
                    c3:17:11:77:1e:f9:5e:d7:b8:d1:f5:36:66:b0:f3:
                    56:67:ab:22:86:99:cc:5e:83:31:ee:4b:60:4a:95:
                    ee:a8:9e:91:15:91:b6:40:d1:52:46:2a:ae:24:25:
                    cb:45:6d:3f:a3:d8:6d:f7:be:2a:7a:a7:46:8b:15:
                    7a:23:d1:a0:af:21:a6:ff:12:1e:87:dc:92:f9:2d:
                    3b:9b:8e:88:d4:fe:f0:ee:c6:f2:aa:26:c1:43:5b:
                    8f:e7:16:00:81:83:52:98:36:4c:25:99:ae:d9:dd:
                    52:73:cc:d4:cd:3c:90:6e:33:d6:bc:75:86:f5:52:
                    ea:b6:e7:7c:a6:a2:49:fa:2c:61:73:d2:d3:f8:d4:
                    6e:c7:fe:92:93:37:06:f1:56:6c:cf:b5:1a:01:97:
                    40:54:a2:fc:45:2a:c0:d8:9a:f2:35:f4:80:ac:f0:
                    3a:88:4f:95:17:2d:ba:8b:02:3b:cc:f8:32:30:c8:
                    39:8c:95:ae:be:74:8a:27:3b:94:93:ae:cd:3b:29:
                    f9:3d:49:d3:20:ea:f2:67:97:6d:76:b0:1f:b6:f3:
                    8b:62:2e:e5:b3:2d:f6:0d:8c:94:a9:0b:3b:ea:d2:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BA:7D:B4:FB:B0:AB:53:DB:83:A6:E7:1B:55:47:0E:2C:D7:36:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:75:7d:11:82:03:14:5c:97:23:10:8d:20:b1:ae:5a:a4:0f:
         42:06:ad:11:a8:48:3d:b2:d6:28:ed:a3:6b:16:55:5f:3e:93:
         2f:2a:74:0c:44:d9:2e:45:89:a3:2b:db:31:3b:38:ae:79:59:
         66:ce:68:af:3a:73:92:7f:a4:f3:b7:37:5c:b0:70:6b:7b:94:
         c3:cf:3d:d5:b5:df:9a:50:ff:fe:56:02:ba:2a:be:ea:c0:f2:
         54:d4:db:a6:c8:bf:61:8d:cd:24:35:8a:35:2c:47:a3:49:c1:
         c9:b8:62:23:3c:e1:4a:8f:01:6f:4a:98:13:3e:46:1c:e6:20:
         20:0e:b1:a3:bf:94:85:7a:37:93:43:60:ab:d0:18:3b:73:98:
         bb:84:cc:01:27:1e:35:2e:5a:7c:08:eb:ec:ef:ab:1e:3b:b1:
         64:81:ff:11:05:68:d6:22:02:1b:d4:a4:d8:ae:0b:79:16:6c:
         9d:a1:6f:4b:d4:59:00:ec:a3:f6:d9:24:5c:a2:28:d2:87:d6:
         1b:bf:05:d2:f6:d9:21:a1:92:ea:8a:d2:a6:93:03:6d:3c:0c:
         bd:35:bc:ab:ee:23:47:64:c7:d4:08:7c:6b:7b:07:aa:2e:47:
         36:c1:9b:18:16:ae:d8:08:9a:eb:41:7e:24:3e:5c:1a:45:bc:
         3b:1d:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:59:47 2025 by rpki-client