Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa
File:                     511398d8-4b16-401f-b4eb-862b98bc0a55.roa (raw, json)
Hash identifier:          6Z6dVMZqF7hhObpMEtikWgslqSK90MU9nFDz8183ATM=
Subject key identifier:   9C:FA:90:28:86:3A:7A:6F:9C:A0:52:32:C8:EF:28:1A:34:AA:42:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       738A8C1F58B5EAF926EDE5F04B0FA587511D5D51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa
Signing time:             Tue 05 Aug 2025 00:00:27 +0000
ROA not before:           Tue 05 Aug 2025 00:00:27 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.58.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:8c:1f:58:b5:ea:f9:26:ed:e5:f0:4b:0f:a5:87:51:1d:5d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:00:27 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=f414deb44c5a49f99af3be76f529157ff1b444b2a97f664eb8af32c246c1ff48, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:30:58:80:92:67:ac:18:88:5b:e4:c8:35:
                    b0:9f:8d:8f:2b:dd:2d:46:fb:9f:bf:11:d4:b9:23:
                    bc:1e:79:4a:f0:59:f1:d8:56:d3:a7:d4:95:45:7e:
                    ac:ee:37:97:cf:43:10:8b:86:4c:c9:41:96:e7:72:
                    8c:41:9d:3c:88:4c:c1:43:be:b2:cb:bc:1e:f7:19:
                    5d:dc:6b:27:8a:ae:85:3f:3c:84:54:3f:5d:b9:c8:
                    7c:8a:a6:d8:23:47:42:ff:e1:81:af:29:a4:58:cf:
                    50:ed:94:9e:9d:2f:d2:dd:70:a5:ce:f4:8f:d1:cf:
                    88:59:1d:77:b7:cd:73:0e:9d:40:8d:fd:cb:95:ed:
                    2c:5a:c7:66:61:53:80:d8:f1:97:78:ae:bf:8a:21:
                    b4:8a:82:89:a8:53:f5:f2:9e:21:ac:4a:51:30:8f:
                    bc:f9:8b:8a:0b:0a:2a:db:b7:25:dd:58:17:13:ca:
                    7d:a6:8f:6e:d6:74:d1:8f:f1:6a:61:a3:e8:97:d9:
                    36:77:27:55:5e:e0:35:89:e2:54:e7:44:76:b8:2f:
                    67:c8:97:8d:cc:f5:7b:42:01:c2:ba:cf:12:8b:c6:
                    02:04:59:f0:15:63:54:de:eb:39:d4:1f:60:14:58:
                    50:f7:40:25:45:0d:17:8e:43:4b:17:d2:44:a0:d6:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FA:90:28:86:3A:7A:6F:9C:A0:52:32:C8:EF:28:1A:34:AA:42:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511398d8-4b16-401f-b4eb-862b98bc0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:85:64:46:5a:c5:d8:0b:c0:51:21:b7:d0:89:e3:6a:65:bf:
         0d:56:43:ed:ba:8f:5b:14:da:c7:49:b2:dc:78:62:c9:b3:4f:
         b6:ad:08:c3:ca:c9:30:5c:37:f7:a8:a9:da:bb:45:90:80:29:
         64:be:4e:6b:5d:cc:d1:96:c5:7e:5f:3f:d2:f8:64:44:40:10:
         c7:12:c9:64:ea:7d:be:4c:b7:06:bf:6c:14:02:8f:5d:d0:df:
         dc:00:7a:84:55:b2:8c:70:d0:da:8f:b6:1c:63:86:87:ae:9e:
         f4:1d:de:64:46:a1:ae:30:3f:b2:65:7e:ee:df:ba:8b:f1:fe:
         7e:35:ec:fc:45:56:88:ec:d9:ce:5d:e1:33:a6:e7:65:54:50:
         a5:be:87:6d:75:38:77:bc:44:b3:67:84:61:df:21:e1:26:93:
         27:49:7b:78:8c:b1:f1:c6:6a:cc:b8:29:4d:b0:a0:7d:1f:cb:
         64:06:54:55:5b:63:fc:c5:5d:d6:69:03:b4:7c:6a:15:90:d2:
         d1:0f:53:a7:4f:c4:11:88:29:95:ad:ea:8a:51:e1:a2:b7:8c:
         b3:1d:0d:82:25:f4:ba:1f:e6:a2:4d:8a:24:c4:2f:49:c5:54:
         06:07:bf:6b:9a:98:c1:f6:a6:6b:42:d7:62:6c:63:61:b3:7a:
         65:4e:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:43 2025 by rpki-client