Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa
File:                     836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa (raw, json)
Hash identifier:          OD3RQBHVhj6LUALsWCjNH2yORI7EV5MYvLFLA2Kv/LA=
Subject key identifier:   85:D6:AC:49:64:88:3D:D7:3F:F8:AE:92:3B:8A:D0:60:A4:09:55:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0471F3E83CF5BB60B17B46EC2E59BABFCDA32737
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa
Signing time:             Wed 06 Aug 2025 13:38:10 +0000
ROA not before:           Wed 06 Aug 2025 13:38:10 +0000
ROA not after:            Wed 10 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.246.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:f3:e8:3c:f5:bb:60:b1:7b:46:ec:2e:59:ba:bf:cd:a3:27:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 13:38:10 2025 GMT
            Not After : Sep 10 23:59:59 2025 GMT
        Subject: serialNumber=36290594dcd02d2c0eeb79e28cf510f0c762bb84a604e1472454ea14220554f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:51:83:5d:47:9a:f1:cf:3e:ce:a8:f9:4e:
                    0a:bc:ec:a9:53:d8:af:6d:5d:ad:38:05:d9:4f:cf:
                    1c:3c:62:f9:d5:4b:91:ad:35:51:d4:26:fb:76:6e:
                    bb:92:83:ed:fa:a3:39:ff:4e:51:96:94:f1:2b:0e:
                    e5:b2:55:18:bf:79:59:10:a2:9f:d2:ca:4f:62:f3:
                    fb:b2:9b:68:8f:60:bb:1f:b3:c0:64:74:61:a6:67:
                    95:69:80:5a:f9:bc:0a:49:e2:c4:40:d1:d5:4f:76:
                    cf:71:d1:17:55:45:27:c8:45:dc:e9:6e:5f:9f:17:
                    4e:7e:a8:e5:66:4c:05:c6:bf:74:b2:c7:aa:0d:04:
                    77:a1:d9:ac:17:8b:12:75:6c:70:34:e7:b6:8a:fc:
                    a0:2b:44:7f:d9:f9:2d:35:48:a1:fd:04:60:94:e6:
                    a9:f1:c9:0d:5a:b2:27:ad:e7:cb:21:36:1c:87:ea:
                    2e:0c:00:2c:58:05:b8:b1:82:fc:22:d8:79:43:a4:
                    74:f4:2a:db:9a:6e:c9:92:4d:3b:56:77:cb:5a:0f:
                    14:f9:2c:cb:35:10:d4:04:5d:34:31:d0:a0:ba:fb:
                    57:44:00:bd:49:c6:0b:e2:ab:96:cb:84:02:dd:56:
                    a0:e1:a9:11:c1:c9:b7:2b:e9:59:6a:f1:7c:21:67:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:AC:49:64:88:3D:D7:3F:F8:AE:92:3B:8A:D0:60:A4:09:55:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:ac:cd:08:e6:3f:fe:ca:73:37:96:38:4b:88:fa:99:02:
         60:3b:f5:40:fc:d2:f4:c7:08:5c:74:69:d4:27:29:ef:e0:21:
         54:40:b8:7b:b7:0f:c1:2a:92:5e:85:e2:1a:79:7e:20:79:fe:
         f9:6b:ee:6f:9c:f6:03:4f:a7:82:5b:8e:b2:c3:bf:ae:2f:22:
         f0:1c:ce:e3:cc:ea:2e:2a:bd:6b:64:67:1f:3a:ad:67:9e:29:
         80:ba:95:cd:bf:c8:79:69:5a:58:62:7d:be:d8:23:27:d4:87:
         f4:36:88:c3:88:b6:38:54:35:5c:d5:9f:50:14:bd:c0:64:1f:
         44:6d:87:7e:1f:3e:a2:48:c1:55:eb:e0:c0:5c:41:d5:a6:eb:
         b5:7f:b3:ea:4b:cb:a1:ad:f2:96:ec:68:26:ec:47:52:1c:b4:
         1c:90:2c:52:7e:5a:79:82:ea:07:f6:ab:27:eb:e5:f5:2a:04:
         06:cb:41:28:f1:39:e6:ad:88:b1:6b:7f:18:ff:a1:e7:40:f8:
         c3:90:85:06:0b:6b:0a:45:b1:05:ab:92:29:4c:e9:83:0c:ab:
         9d:fa:53:8b:42:29:f5:00:dc:d2:16:e2:0e:4f:ca:22:fe:d3:
         d3:21:e7:53:ae:d5:e1:5c:d5:ca:a2:22:12:34:8d:cd:0d:5f:
         c3:8d:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:58 2025 by rpki-client