Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa
File:                     8e5cade7-274f-4d8d-9062-f019edfa1e70.roa (raw, json)
Hash identifier:          XJnKsofKrgf2yEN6tqBe+HmM+0xrZdZyjmNfcYNM8Gs=
Subject key identifier:   D6:AE:A1:BE:7D:F9:74:FB:24:4F:80:B6:0F:4B:54:D1:21:BC:BE:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56AEAB5FDD692263E745F91E88429A1B9A273ACA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa
Signing time:             Tue 03 Jun 2025 00:11:49 +0000
ROA not before:           Tue 03 Jun 2025 00:11:49 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:ab:5f:dd:69:22:63:e7:45:f9:1e:88:42:9a:1b:9a:27:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:11:49 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=d557eee16fb4c5cfa262ec8fec78132c6467e3604a01725621e2f8282ee69a6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:83:48:2d:22:9e:59:c9:be:61:da:5d:97:
                    6e:22:9f:10:a4:d6:81:03:91:15:99:e9:42:05:85:
                    3c:92:69:33:62:07:83:08:0b:21:ef:0a:3b:5d:d0:
                    f5:8f:8f:be:df:cb:4d:f7:a9:b7:a5:2f:54:7a:7d:
                    77:09:2e:41:15:6f:97:aa:10:af:0e:42:aa:2d:b0:
                    ed:ee:59:23:2f:c2:de:27:b6:14:8d:6a:0f:52:e7:
                    32:5f:19:f9:b4:c0:ab:30:b4:ce:9c:33:20:b2:a9:
                    f5:a7:1f:3e:ac:e0:fc:a2:95:a8:ad:f8:f9:ef:57:
                    62:85:b1:04:55:d8:82:08:9b:5e:3b:15:4a:7b:84:
                    8c:ed:9f:69:73:79:b5:96:b9:07:a7:11:ed:6b:62:
                    57:7b:ff:10:4b:fe:59:05:8f:8e:64:b7:3c:d3:a6:
                    b4:f9:91:b3:05:d2:1b:44:a2:90:4b:26:55:1d:a7:
                    73:08:b9:0b:11:33:9f:00:20:4b:8e:68:4a:2c:ed:
                    91:0d:9c:3f:0c:fd:e7:29:cc:ad:a4:c7:c4:a2:ac:
                    51:1d:5f:e9:5f:ae:5f:25:a5:92:2a:4f:6e:c4:1f:
                    e7:aa:a5:75:7b:70:15:29:c9:be:4b:f6:6e:9d:98:
                    1c:e4:95:76:51:ed:6b:3e:32:0b:c4:2f:09:54:f6:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:A1:BE:7D:F9:74:FB:24:4F:80:B6:0F:4B:54:D1:21:BC:BE:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e5cade7-274f-4d8d-9062-f019edfa1e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d9:14:76:17:85:87:c7:8a:5e:72:75:b8:95:21:b6:26:9d:c6:
         33:4b:23:a9:4f:40:bc:f6:7b:c5:57:4d:f5:e2:2f:84:1c:89:
         c5:1a:5a:b2:22:09:b5:91:47:92:93:9e:ee:11:14:4a:ed:66:
         7f:25:92:f4:4a:f3:83:c3:10:f1:c5:7a:5f:ac:b9:57:40:2a:
         f8:96:e4:1c:5b:a2:d8:2e:43:1f:1a:8b:7f:67:e6:34:8d:70:
         a8:75:a8:e6:f7:e8:20:e0:83:48:92:95:40:ff:6f:b5:29:51:
         ea:76:48:51:a7:8a:92:ef:1c:2b:15:d2:6d:ba:51:45:2d:cb:
         46:23:bc:38:a2:6c:aa:3e:39:1f:5c:c6:a3:a7:f2:5f:fa:05:
         18:38:87:a9:b9:e0:f2:06:2a:c7:7e:6f:24:11:f7:88:62:f6:
         78:36:51:03:66:4b:0e:ea:3b:98:a0:68:5a:2e:b4:86:79:00:
         84:dc:37:26:e9:94:b8:6d:67:a1:6e:b8:dc:1c:59:5e:8c:8b:
         aa:21:7c:e2:92:1e:28:cb:19:0c:3b:e1:5a:26:67:78:4c:f5:
         31:f3:9a:ff:a0:1d:b8:0d:fa:df:62:02:c0:eb:4c:4e:2b:d3:
         fe:cc:6f:04:f0:81:cd:41:b5:b6:a7:0b:0d:2d:42:4d:36:d7:
         eb:72:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:42:29 2025 by rpki-client