Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa
File:                     694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa (raw, json)
Hash identifier:          2XwitqevJZW6T8lAY8KMfS1DY9nJuXcmBinum83jYZk=
Subject key identifier:   FD:7B:78:D5:64:9F:7A:9A:D0:C7:69:73:70:4F:A8:33:7D:94:9D:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29DC5936330187A4D7C47150791018661AAA5153
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa
Signing time:             Mon 04 Aug 2025 17:41:12 +0000
ROA not before:           Mon 04 Aug 2025 17:41:12 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.81.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dc:59:36:33:01:87:a4:d7:c4:71:50:79:10:18:66:1a:aa:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 17:41:12 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=4a06a93cb70db324b4f4f0d89851d108753ed6422621db3fb55e5cb172510c09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:0d:7d:5a:a3:e4:cd:ca:8b:60:39:99:f5:
                    c7:25:db:f0:fb:03:7e:46:d5:ea:50:19:48:99:8f:
                    c5:36:2a:06:18:3b:2f:8d:5d:85:11:db:42:b6:13:
                    be:20:55:c6:c5:10:ce:90:4c:c3:39:22:9a:38:e2:
                    db:9f:6c:cb:db:8a:ff:0d:07:af:52:5c:06:4d:25:
                    b6:d6:f9:24:c1:51:71:54:22:b1:b6:dc:0e:e3:a3:
                    8f:60:34:43:26:9c:a4:b4:21:ab:18:96:03:7c:27:
                    db:5d:7c:e9:a2:a8:4f:12:6b:54:7e:f4:4c:c1:f4:
                    6b:d0:cd:f4:79:ad:8e:01:f9:a7:39:4c:1b:3d:d8:
                    07:95:29:9c:79:45:3e:60:a3:78:46:e2:6c:ba:f3:
                    69:6e:e1:06:4c:be:b1:6f:e7:8d:7d:75:5c:92:6c:
                    32:6c:9e:63:72:4e:31:34:c4:45:1b:81:68:f3:6a:
                    dd:ac:8d:8a:41:21:da:89:4c:7d:5c:eb:19:b6:bd:
                    f1:51:b9:0f:ac:74:30:d8:52:43:45:78:4f:2b:64:
                    89:29:f1:1b:56:bd:86:1b:1e:10:1c:30:55:4b:00:
                    34:ac:ae:37:7d:9b:3f:a9:b0:19:3a:b4:e3:b6:13:
                    91:22:b6:fb:e4:c3:c4:99:20:6c:a1:3c:3a:08:e1:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7B:78:D5:64:9F:7A:9A:D0:C7:69:73:70:4F:A8:33:7D:94:9D:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/694cc990-6ba0-42d8-90f9-1c5d8b78a034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:f9:af:34:e0:29:78:2d:82:c3:62:2f:77:de:6c:1a:fb:
         d9:d5:cb:05:b9:a8:2e:59:db:7f:2f:ec:88:16:08:02:5a:c3:
         56:e5:17:f9:28:f1:bc:03:bb:d3:44:83:00:c8:f1:c9:d7:0f:
         fe:46:44:4e:08:0d:c4:9d:50:47:9f:49:3d:38:6e:d0:d1:b3:
         9c:b1:86:ce:ee:ba:f7:52:79:1f:77:94:e3:f9:8d:a6:72:b2:
         3a:04:bf:58:7a:92:03:6c:48:11:33:47:86:b6:e4:2f:e8:66:
         1c:26:d4:e9:58:ef:21:de:68:ca:64:a3:39:d0:fb:34:1e:62:
         b3:2c:19:72:d4:13:fb:df:ec:70:87:73:7f:55:59:f7:38:66:
         d6:3e:34:3a:72:e8:42:8f:a0:a5:45:bb:23:a0:ec:7e:13:44:
         39:62:68:7e:91:2e:1a:93:83:32:18:d3:89:b0:0e:0d:73:da:
         ca:b7:6e:1b:74:1e:be:bb:04:22:48:86:c4:8e:ba:08:5b:20:
         ba:0f:7b:1b:ab:f3:5d:30:da:e0:ef:1c:5d:0b:f7:ec:c8:72:
         09:0e:4b:f9:8a:7c:97:3a:29:47:2c:63:95:77:06:25:9d:ff:
         50:bc:0f:02:21:a5:1c:ae:fc:af:98:11:2c:40:27:e0:e5:70:
         27:c2:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:56 2025 by rpki-client