Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          1y5Q5msY2ri7vXBc3//AmtHIW41E6qmSnFxKooGEWiU=
Subject key identifier:   5F:AC:AA:AA:2C:18:1B:FB:11:92:90:6E:8E:5C:D4:4D:D6:50:F8:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C6EF70273C728880D637DC14AF553105736EEE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Fri 25 Apr 2025 15:10:45 +0000
ROA not before:           Fri 25 Apr 2025 15:10:45 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6e:f7:02:73:c7:28:88:0d:63:7d:c1:4a:f5:53:10:57:36:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 25 15:10:45 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=6f7e7a3274b2c0b47c6564e75d889824106564bd51d3801172eb6c6e28d97dd4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:72:0b:e9:fe:cd:b0:3f:1e:71:03:13:a2:
                    ac:e1:38:b6:ed:bf:5e:b4:dd:8e:8e:63:20:ed:01:
                    66:3e:f6:22:ef:29:73:07:d9:11:d0:e4:44:27:f7:
                    e0:0f:48:6b:1f:71:17:db:5a:f3:e1:19:a1:02:e9:
                    75:b5:7e:ec:72:72:d2:f3:0f:d0:7c:09:7e:bd:62:
                    37:57:ad:08:c1:f8:9f:d2:0e:ff:23:42:c5:31:31:
                    ec:33:f2:f4:22:df:69:5c:69:3e:9f:16:26:f1:be:
                    f0:3a:7c:f3:4c:f1:af:a4:0b:94:b9:99:4f:54:3a:
                    30:00:db:d9:a2:78:ef:b4:35:32:4f:4a:dc:b0:dd:
                    31:68:0b:d4:25:d1:59:36:1f:02:05:72:b7:27:fb:
                    d7:6e:c4:3a:de:99:29:0a:5f:8c:bb:09:f8:cc:55:
                    37:1d:38:01:97:dd:e3:c8:78:5e:3d:9d:68:54:39:
                    35:ea:42:82:68:8f:b7:3a:13:61:65:f5:ab:4e:78:
                    9c:ad:fb:5c:e7:99:7a:70:5e:59:e4:74:dd:61:e8:
                    a1:4e:27:6e:12:30:e0:c8:06:03:37:de:da:18:d5:
                    87:82:64:f6:59:48:94:bf:ae:15:22:05:45:97:4e:
                    da:05:71:ef:2a:bf:d2:c2:45:2a:b8:56:82:18:ca:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AC:AA:AA:2C:18:1B:FB:11:92:90:6E:8E:5C:D4:4D:D6:50:F8:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:30:84:b2:76:67:2e:24:b6:6d:b7:aa:1f:25:6f:1a:4c:
         11:f6:3a:b4:b4:12:53:86:7d:d5:a8:b6:12:46:41:d7:92:71:
         fa:0d:0d:e5:d1:39:42:bd:3f:ce:82:a4:93:fe:85:d3:08:8e:
         11:03:ba:92:5c:69:8d:9d:5d:fa:d8:2c:d2:c8:52:62:e2:75:
         d7:a7:cc:e6:b7:c3:5f:56:cd:eb:06:ee:62:1e:fb:3b:05:5b:
         61:ee:b2:50:b0:68:b0:e7:0a:df:47:6c:01:e3:47:83:a4:43:
         4e:d7:f4:bc:22:30:80:d3:0f:3e:ad:ca:96:ed:e8:b8:52:58:
         a8:a3:c5:f9:22:c0:80:f9:37:c3:7f:ed:e2:b3:0e:1d:39:d8:
         2e:29:fe:7d:87:0d:fd:91:67:e7:5d:af:a8:35:f6:4b:c1:6e:
         3b:3a:0c:b0:a1:78:d3:ce:52:b8:f8:eb:fc:63:7c:c2:58:a9:
         e3:4e:ba:11:00:b6:b4:bd:ca:5d:16:ed:76:42:51:26:cd:96:
         c8:3f:60:70:ea:21:e0:10:48:b5:45:c5:f4:90:d1:19:a8:d1:
         bf:19:ea:7b:32:cd:e8:64:19:52:98:ed:ed:eb:13:9e:78:f6:
         54:9e:80:bd:92:a8:56:00:10:b2:a9:c6:cd:a9:72:90:5a:40:
         66:01:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:24 2025 by rpki-client