Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa
File:                     6201dd74-1213-4bad-b129-0b23803b936f.roa (raw, json)
Hash identifier:          1RyqFcLJ/j9DvJ2qhNiOhCInLZfdfDSpZGJTOyotinU=
Subject key identifier:   66:92:EE:4D:56:B6:A3:AE:02:C8:6D:BD:B0:27:2E:FF:A3:21:E0:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B985323322020DE2638E8F41462BC6B818036
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa
Signing time:             Tue 03 Jun 2025 00:21:42 +0000
ROA not before:           Tue 03 Jun 2025 00:21:42 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:98:53:23:32:20:20:de:26:38:e8:f4:14:62:bc:6b:81:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:21:42 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=917c406995228c9b14eeaf9bc3e4623fef4aaf2e38f858cbd50c063be778ac37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:91:8d:4c:ed:41:08:07:fa:34:d5:3d:43:
                    b5:27:b6:09:eb:41:69:64:4f:24:99:55:a1:86:37:
                    39:f1:5c:50:a3:72:d4:81:f6:ac:1f:34:cd:6c:90:
                    99:b4:dc:1d:42:32:4c:86:7d:d0:56:f2:fb:5b:2f:
                    52:6d:f4:3f:ce:72:51:de:6e:86:03:35:4b:09:7f:
                    3c:86:b1:c6:59:ee:02:6d:e9:02:04:4d:2e:9c:f0:
                    09:76:f9:dd:06:12:8c:41:ef:c5:aa:bd:db:0a:55:
                    46:9d:4c:cd:60:db:b4:f0:3d:e2:78:da:62:9b:15:
                    b8:5f:7e:e3:88:2d:39:8f:aa:36:57:26:2e:02:7c:
                    a0:cf:1e:7f:96:64:f7:15:ff:f8:74:b0:13:cb:58:
                    43:18:40:77:c6:9b:c4:bf:42:68:0a:6b:a5:58:46:
                    07:84:8a:bf:ec:8c:1f:32:af:a1:1c:0b:dc:4c:27:
                    76:66:0f:97:4f:41:a1:79:87:ae:22:77:b2:ce:a4:
                    9a:29:07:fb:20:5a:84:ee:e9:31:12:52:57:d1:ba:
                    0d:55:be:f5:07:17:68:55:92:ee:b3:f2:f3:ae:70:
                    95:f4:9c:2c:2d:1c:db:0c:a5:e1:0b:cf:54:da:a1:
                    2f:af:3c:24:92:a4:7d:21:38:e2:0a:56:d2:46:23:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:EE:4D:56:B6:A3:AE:02:C8:6D:BD:B0:27:2E:FF:A3:21:E0:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:1d:2e:d0:24:17:11:06:c1:9d:d1:87:af:9b:3d:cb:2a:30:
         e5:d6:59:72:31:b7:37:fb:3f:b0:da:02:62:00:93:7d:cf:b1:
         29:e9:33:2e:18:39:16:39:9c:e4:ce:47:3c:4d:17:d7:c1:ee:
         c5:6a:90:b4:ff:ef:53:8a:41:09:b6:0d:28:50:5d:9c:21:f0:
         f4:2d:af:09:0a:54:44:b4:73:3c:32:1c:6b:7b:e2:7a:ae:2d:
         ac:96:ec:7c:d6:22:5a:29:75:dd:eb:6c:b6:64:76:04:06:c8:
         88:aa:6e:55:2e:53:68:1a:85:86:e2:e9:95:50:76:f2:fc:a6:
         97:83:41:ae:18:de:f2:53:12:79:ee:fb:4a:21:e5:af:46:b5:
         03:2f:21:42:69:22:7c:43:f4:f2:02:77:04:a0:2b:5e:c5:ff:
         68:8d:6f:a2:67:03:e1:a5:8c:f9:d4:fc:c6:73:13:8d:97:97:
         aa:18:82:bb:c4:f7:7a:29:e5:02:f8:86:30:bd:68:ad:b2:90:
         61:0d:88:a9:d7:34:c7:44:f4:b8:70:84:e3:a4:01:da:40:6a:
         a4:15:79:11:a6:b9:78:6d:1a:b9:98:05:23:ea:e5:49:78:89:
         6e:56:28:1a:f7:e7:c5:75:be:d1:6f:6c:92:fb:71:14:f8:2d:
         46:eb:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:20 2025 by rpki-client