Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0ad2af-5d81-4a6f-ae25-f847eed45374.roa
File:                     6c0ad2af-5d81-4a6f-ae25-f847eed45374.roa (raw, json)
Hash identifier:          Qj7sREfHHEYRqu4Z5+wvwmjsvP5IH/xqM1SQ8bXcOO0=
Subject key identifier:   B1:61:B7:8B:43:5C:95:93:8B:C7:69:FF:A1:F8:DA:46:D7:CA:04:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B7E244AD78360B8658CD4D7F09517FA77E0D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0ad2af-5d81-4a6f-ae25-f847eed45374.roa
Signing time:             Mon 02 Jun 2025 15:30:27 +0000
ROA not before:           Mon 02 Jun 2025 15:30:27 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.215.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7e:24:4a:d7:83:60:b8:65:8c:d4:d7:f0:95:17:fa:77:e0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:30:27 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=5d7beab517a8580a55f1487ce9fc8ee4218ac2beb4301d7121cc2fc1f6315636, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:72:25:e4:62:d7:4c:59:c2:45:d3:f8:d9:
                    5c:48:6a:cd:6a:48:e1:43:e1:b9:87:94:aa:ed:2d:
                    ef:85:7a:4f:e1:e9:76:95:01:9c:7b:00:be:7e:26:
                    4d:92:57:e2:0b:d8:bf:80:42:3b:75:a8:95:cd:17:
                    81:3b:1d:2d:40:80:af:3e:b3:3e:2c:8d:07:80:bd:
                    ff:3a:43:5a:c3:69:86:29:90:43:d1:22:aa:08:1c:
                    f2:c8:81:ca:3a:61:c1:ca:aa:eb:75:ff:19:b0:88:
                    2e:87:e7:4b:be:a8:65:49:9a:f5:cb:2c:0f:59:25:
                    a1:84:a1:f7:2d:38:96:41:e1:07:73:9b:fc:07:b4:
                    bd:3e:ad:bd:69:3f:2b:a3:46:02:d7:11:8d:1c:97:
                    cb:54:50:67:14:ba:66:a3:ab:54:92:19:bb:ac:f1:
                    5e:aa:7f:6b:4d:39:20:f7:c6:a0:e2:1a:e1:1e:5d:
                    45:05:c1:9a:7d:48:90:e3:27:2b:43:d0:16:68:c5:
                    53:07:cb:3d:65:b7:e0:74:3c:d4:e3:66:93:5d:0a:
                    a6:5b:ed:d2:21:2c:17:3f:8b:dd:6d:f5:95:12:32:
                    7e:ec:12:f8:cd:27:6c:2c:c8:c2:7c:05:a1:30:d6:
                    b4:e2:5e:db:38:87:7d:cf:34:9a:e0:4f:cb:e0:45:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:61:B7:8B:43:5C:95:93:8B:C7:69:FF:A1:F8:DA:46:D7:CA:04:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0ad2af-5d81-4a6f-ae25-f847eed45374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.215.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:03:c3:1c:0e:29:89:d5:42:ff:e7:c3:a3:13:81:9d:b2:ce:
         78:d2:f9:61:88:81:68:cc:0c:1e:45:78:f9:2e:02:18:67:79:
         14:52:65:2c:b2:ed:2a:89:ad:af:eb:32:2c:14:18:d7:34:9d:
         be:b4:79:77:2d:b9:61:79:15:4a:55:e9:de:bb:35:7a:20:a5:
         51:07:a4:84:61:4e:66:e4:3b:4b:3f:12:8a:4d:ae:c1:a4:17:
         69:57:36:88:5e:b8:11:45:4d:2d:b1:22:c9:1d:c2:86:7a:04:
         f8:83:20:59:0b:3a:8e:e9:32:c6:2c:07:38:ef:80:95:96:cb:
         dc:20:30:3d:9b:b3:3a:b5:10:e3:d1:5d:17:9b:12:20:08:e2:
         c2:6a:2d:94:ec:71:c1:b9:6b:70:0c:22:80:8b:6a:43:4e:2d:
         b9:8b:bb:0f:71:ff:9d:91:85:13:df:21:0c:a9:03:08:69:38:
         cb:46:c2:b4:55:34:f4:f0:61:b7:36:8d:00:52:a9:f9:3a:b0:
         d1:75:bd:25:d9:87:e1:cc:61:11:e3:8f:97:58:96:37:10:55:
         31:6a:3a:f7:4b:2c:51:2d:09:b5:52:54:5e:4d:26:4d:14:29:
         e2:92:c6:28:c6:61:06:b3:2e:b6:2e:ff:d9:d3:7b:d2:3c:c2:
         57:87:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:13:58 2025 by rpki-client