Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa
File:                     5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa (raw, json)
Hash identifier:          DLhCW522vRACzbBRR4qD/2RUm9XdsdCK4u0GFYPBi44=
Subject key identifier:   F4:DC:14:D2:08:AC:4B:19:88:2A:A6:92:92:B5:37:A7:29:9C:47:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7192ECD3BC26A4D8DC6E75272A463D014703B5A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa
Signing time:             Mon 02 Jun 2025 15:11:01 +0000
ROA not before:           Mon 02 Jun 2025 15:11:01 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.154.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:92:ec:d3:bc:26:a4:d8:dc:6e:75:27:2a:46:3d:01:47:03:b5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:11:01 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=ba44a67338153a3ead1e18c218a85d16071638e8d96e74b33fdb41bc92900e7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:98:b5:ee:c5:c6:07:59:85:23:f3:f6:a9:
                    6c:45:15:5f:2c:bd:bb:f2:4c:a1:51:d6:d2:e5:18:
                    fd:69:b5:70:56:38:d3:0f:de:6d:a9:67:b6:76:54:
                    62:33:db:52:72:3d:1a:4a:7f:85:8b:69:d0:79:ac:
                    50:5b:bc:a5:87:72:4f:0e:bf:25:23:ef:51:1b:dd:
                    1e:59:02:09:4d:fa:7c:17:72:e5:b6:5e:98:b8:b9:
                    a0:ef:83:7f:76:9e:bd:e1:4b:8f:1b:01:fc:8c:7b:
                    bb:ca:1b:ca:19:24:8b:a3:23:8b:b9:44:90:83:74:
                    10:39:f5:66:91:cd:20:4a:9d:a9:d0:0a:8b:00:c8:
                    77:5c:03:17:dd:49:29:b4:37:39:88:9f:c5:71:d3:
                    ed:dd:d9:95:ea:70:0b:36:10:26:02:9a:b3:65:86:
                    7a:45:69:ee:1a:28:14:b1:cc:af:12:3d:cc:7e:60:
                    1c:03:08:57:ba:8b:0b:cf:78:c0:84:b2:4d:33:49:
                    67:11:e2:4f:40:0c:2b:dd:b6:29:d1:12:63:84:7b:
                    ed:71:e4:03:42:c1:c9:24:22:ae:ca:be:60:42:03:
                    01:b3:87:8e:73:d1:af:9b:13:b9:70:22:4c:11:8a:
                    55:1f:5d:e8:da:03:7c:ab:d4:e5:00:1a:be:80:97:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:14:D2:08:AC:4B:19:88:2A:A6:92:92:B5:37:A7:29:9C:47:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6c419c-e8ef-461b-8110-169dc4c8bbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.154.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:a7:63:23:35:43:fc:1c:6c:33:b8:42:23:55:9d:52:15:ea:
         5d:5e:87:99:87:e7:6f:9e:ff:00:12:ee:2f:e0:bb:b3:45:42:
         46:e7:9f:4a:2c:be:2d:0b:f0:82:22:98:e8:37:53:3b:6e:7b:
         50:01:65:c6:40:65:56:11:5e:43:1d:e1:9c:20:2e:22:48:f3:
         df:81:64:44:b8:aa:5b:be:7a:9f:e6:93:67:f2:dd:ab:43:6a:
         62:35:34:7e:48:8d:a6:ed:94:b6:5d:13:d8:af:11:c1:08:7f:
         a5:4c:36:e9:9e:9b:70:57:65:35:2a:24:47:b0:1a:8a:61:dd:
         53:62:5f:d9:51:c8:80:0e:16:f1:06:17:10:17:75:dc:76:95:
         fb:4b:56:ae:4c:ae:3e:20:6a:fc:fd:97:d0:e0:1b:0a:c6:4f:
         41:6e:62:3b:88:f9:ce:ca:78:09:d6:32:2e:d2:fb:6a:db:36:
         6f:26:77:c1:0d:98:f6:62:b3:12:bc:a7:2b:8d:a6:2c:b1:03:
         2e:aa:79:e8:df:01:7b:f7:1c:9d:c3:19:33:5a:76:47:ce:98:
         0a:15:d2:0c:ea:38:d6:66:36:2b:14:b7:e5:85:30:e5:56:7e:
         51:75:7d:6b:de:9c:68:5f:4c:14:43:e1:75:e0:61:47:c1:40:
         dd:3d:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:18 2025 by rpki-client