Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76cd6358-a53f-4c4f-aaa1-2788b83d5aee.roa
File:                     76cd6358-a53f-4c4f-aaa1-2788b83d5aee.roa (raw, json)
Hash identifier:          4FBcDPysH0fkBMAxoFxb0bzwnEHBWEy1HoEkC28dRaE=
Subject key identifier:   88:42:4D:E0:A8:41:E8:40:5E:A7:D1:88:06:5A:C8:19:AD:CB:D5:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AFCF481CAD4EF6C8AAB4633B6AFB7BF7CD46FD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76cd6358-a53f-4c4f-aaa1-2788b83d5aee.roa
Signing time:             Tue 05 Aug 2025 23:53:03 +0000
ROA not before:           Tue 05 Aug 2025 23:53:03 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fc:f4:81:ca:d4:ef:6c:8a:ab:46:33:b6:af:b7:bf:7c:d4:6f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 23:53:03 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=106133f74e61c911bc23d92f70ec52bb1252c4eef3198f48ad298e0d86f6cf1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:6e:1c:4d:a0:85:11:ff:38:c2:15:72:ff:
                    ae:1a:9a:2e:60:c8:c2:0e:2d:d5:ca:5a:af:b7:0b:
                    7b:f8:e5:a1:ea:77:d0:cb:99:0d:99:af:66:34:6a:
                    13:4f:bc:5f:0e:3d:e6:75:a9:90:71:09:fd:96:bf:
                    af:64:3e:e7:f1:34:78:3e:7b:8c:c2:6f:f1:a4:b7:
                    f5:05:95:45:fc:f1:d9:12:f7:d1:fe:23:1e:97:c5:
                    69:b4:00:1f:c6:b8:63:98:88:1c:17:45:ab:69:12:
                    cb:db:b7:c0:33:ea:b0:95:d8:d8:f7:7b:b2:67:e9:
                    cc:0a:fa:5f:d1:3b:46:8b:62:15:f2:98:12:7d:93:
                    6e:58:64:8c:fd:33:0f:31:49:1b:45:dc:e3:ce:13:
                    4e:35:50:57:30:75:c3:8f:d8:9a:72:97:72:f7:2f:
                    a7:bf:d7:93:dd:3a:3a:0f:ad:15:75:9f:d7:fe:1c:
                    4b:47:62:df:21:fb:9a:98:0f:01:84:7e:26:ec:2a:
                    5f:3a:32:5c:d6:fd:d1:67:c1:3b:29:a6:8f:fe:19:
                    05:d7:be:92:73:af:a9:af:eb:3e:8e:20:7d:c1:38:
                    e5:15:26:1b:4a:ca:d9:23:81:3b:d7:4f:70:16:c6:
                    37:5c:78:1a:ae:a2:f5:72:19:81:13:90:40:38:db:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:4D:E0:A8:41:E8:40:5E:A7:D1:88:06:5A:C8:19:AD:CB:D5:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76cd6358-a53f-4c4f-aaa1-2788b83d5aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:d3:7d:67:b0:22:43:1a:83:a4:d1:cb:a2:0f:fa:4a:b7:30:
         fe:19:40:ef:1e:1c:1d:6a:bb:4b:50:0d:dd:37:44:ca:41:ba:
         aa:02:31:1c:3d:2b:9a:04:5d:ed:87:39:e0:36:f9:02:cb:c2:
         0b:16:22:3f:8f:ee:0b:13:06:13:87:e2:a3:e2:5e:56:e5:1c:
         59:be:b2:82:2e:11:94:0b:b3:2e:35:04:8c:79:f6:32:09:d1:
         f6:dd:d9:2e:2a:b1:c6:50:cd:72:2f:44:a0:07:47:e0:5f:50:
         ca:c1:b5:11:52:b2:ea:7e:93:8d:d8:6b:5f:7a:65:58:36:ed:
         88:fa:68:b4:ab:73:33:04:23:06:db:01:36:43:cd:81:41:9a:
         c8:2a:52:9a:b1:10:3e:aa:70:bf:a2:3b:41:52:f8:d8:bc:22:
         ef:0d:4a:1e:5a:20:97:50:21:c1:55:ee:34:13:6f:62:65:33:
         8c:de:b2:b6:ca:16:0b:db:4d:88:52:10:2f:34:e7:fc:85:04:
         48:5c:c4:cd:64:0c:1a:61:55:cd:9b:88:48:20:81:3f:fb:14:
         f2:d3:2d:ca:02:e7:67:1a:01:01:bd:87:2f:b8:cc:80:26:8d:
         34:96:18:03:45:ed:2e:55:9a:f5:31:33:f6:58:0b:6f:ab:80:
         93:a1:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:29 2025 by rpki-client