Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6316716a-9487-4213-97b0-541f76036d84.roa
File:                     6316716a-9487-4213-97b0-541f76036d84.roa (raw, json)
Hash identifier:          rAzm495Jxyt7L280garOIdxDTAIep5FYR7jB8HUqAjk=
Subject key identifier:   AF:8E:5D:97:88:BE:3D:E6:00:4C:C7:7B:74:95:51:21:4C:64:BC:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AE3A196625B3C4AA6A7C425F200FFDE61DC3688
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6316716a-9487-4213-97b0-541f76036d84.roa
Signing time:             Tue 22 Jul 2025 15:02:07 +0000
ROA not before:           Tue 22 Jul 2025 15:02:07 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e3:a1:96:62:5b:3c:4a:a6:a7:c4:25:f2:00:ff:de:61:dc:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 15:02:07 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=314f5c33950a6a2b2b94718c3dd5f87a09e87a62c64322befe1dfa983c4f1ba7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:ec:9b:c9:a5:b1:4b:cd:0c:49:bc:76:c0:
                    5e:60:89:b6:f7:c0:b4:06:cc:f0:4a:af:d9:3a:09:
                    b1:e9:b2:f5:d8:92:b5:d6:c6:60:e9:9d:34:4f:d0:
                    a9:e9:55:04:71:e7:5b:5d:77:8f:e3:91:af:c1:7d:
                    f7:1a:cc:07:ec:12:5c:4c:e9:92:1a:23:41:b8:4b:
                    db:ee:9f:14:c2:0b:66:1b:08:55:6e:07:9d:d1:9e:
                    80:7e:74:5d:55:e1:81:3c:55:f9:5d:b7:24:6e:5d:
                    ac:2c:d6:90:16:a8:de:8c:52:7d:b5:f0:d9:7d:16:
                    ee:49:00:c3:aa:2c:55:32:09:78:47:c4:5e:54:57:
                    fd:9d:51:d2:49:7c:3e:8d:5e:17:2c:c2:51:e8:69:
                    9b:98:12:a2:27:a7:c6:7c:9c:b9:62:48:38:28:aa:
                    42:c3:12:7d:14:86:76:7a:9a:cf:72:85:ae:da:44:
                    05:97:1e:54:a5:b1:51:9d:57:3d:72:a1:a4:21:a1:
                    5c:f7:3a:33:b9:e2:9f:ef:6e:f6:c3:57:b6:b7:56:
                    78:77:63:d8:7e:83:27:4f:4d:99:22:0e:7a:ef:a4:
                    64:d0:18:0a:ff:36:4d:a6:8c:b5:32:92:c4:2f:f3:
                    fd:d1:79:9b:57:54:da:c7:25:ef:df:3a:8a:a9:3a:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:5D:97:88:BE:3D:E6:00:4C:C7:7B:74:95:51:21:4C:64:BC:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6316716a-9487-4213-97b0-541f76036d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:94:0c:3a:74:d8:c9:29:17:e6:04:5c:38:c6:cd:b0:83:
         88:60:22:7a:06:0b:d9:dd:1c:f6:00:00:63:83:85:29:0c:2f:
         6a:d5:1c:b6:f8:31:c6:c7:de:0b:96:b1:35:63:5d:38:85:b3:
         d7:b4:9b:b6:62:6e:92:0b:2d:aa:7c:5a:2c:44:a5:d0:96:14:
         3f:29:3c:ff:d1:a7:3c:d7:0a:db:8e:86:23:7f:b3:2d:18:31:
         bd:01:72:3b:c2:14:33:2a:1d:20:64:86:e6:d2:36:51:b5:d6:
         72:29:03:65:f7:f7:6b:27:02:57:81:38:c5:dd:d3:fb:fa:7c:
         d6:cf:21:28:6f:9a:a8:b8:b1:9c:50:f9:bc:df:a2:09:52:9b:
         57:77:d2:6b:49:88:6c:63:ed:e2:76:ab:50:8b:30:71:ab:6c:
         b1:4c:30:90:db:c9:b0:c6:46:a1:5f:53:ab:3a:87:b1:c2:40:
         7a:a8:ad:93:20:81:a6:39:d3:db:44:52:6d:75:f0:ec:e5:35:
         79:a7:e5:95:36:3b:de:13:50:13:20:97:c6:15:5c:54:b9:6a:
         0a:c0:0a:1d:66:b8:95:78:90:05:f6:20:63:ee:1c:0b:e8:92:
         45:bc:18:86:35:08:b7:42:38:f6:95:e2:04:4c:90:61:17:63:
         e6:c6:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:54 2025 by rpki-client