Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa
File:                     92b45372-6296-4c14-9868-0c159f1b5fed.roa (raw, json)
Hash identifier:          ub/HZUvASZEjSjJ9jpG9r+Rsjy0sMqxh/ZGfWYhocwo=
Subject key identifier:   28:4B:49:27:34:9C:ED:5E:D5:17:53:72:17:C7:32:5C:03:1B:C1:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62CCA63A82B759E21406EF4FB39399F7DFFAC206
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa
Signing time:             Mon 28 Jul 2025 15:30:37 +0000
ROA not before:           Mon 28 Jul 2025 15:30:37 +0000
ROA not after:            Mon 01 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.198.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cc:a6:3a:82:b7:59:e2:14:06:ef:4f:b3:93:99:f7:df:fa:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 15:30:37 2025 GMT
            Not After : Sep  1 23:59:59 2025 GMT
        Subject: serialNumber=f1e3d33fed337e91d4e0e0cdd1e8997139d1634f8e52b080ebd4b6c5d736180e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:29:6a:2e:92:36:4c:d8:c3:ce:ad:00:ec:
                    33:31:d8:77:23:90:e2:2f:bb:ed:e4:ac:e1:60:43:
                    b0:fd:6f:f2:66:7b:84:a3:2c:0e:80:2e:39:37:e4:
                    59:0b:cf:7b:9d:6a:fd:af:f8:32:5d:e1:fe:fe:81:
                    67:1a:0a:b1:cd:cc:ca:c6:01:d7:c6:ed:d9:63:e2:
                    9c:8e:bb:fe:e8:ad:06:31:b6:33:8f:4c:d8:bb:ca:
                    cb:9c:5b:fd:f0:ae:46:d1:ca:76:bf:30:da:95:2e:
                    ce:a2:b6:d8:04:0f:c0:d7:7c:04:c7:d7:59:cd:36:
                    ee:8c:47:51:31:21:cc:6d:dc:ac:fb:a2:64:6a:b8:
                    65:57:4b:e8:e1:c9:ac:99:38:2d:42:61:20:e5:94:
                    88:7f:fd:f3:15:6f:8e:16:9b:89:96:fd:cf:bd:dc:
                    a1:11:7d:20:3a:f5:05:eb:6a:08:c4:1c:1c:68:1f:
                    37:4b:af:6d:6c:1f:7e:0d:ed:9e:b3:1f:86:8a:2c:
                    6d:3c:e5:51:fb:47:9a:31:e5:7b:d4:e8:02:ad:5e:
                    c5:51:35:4d:83:1c:91:9b:93:40:b3:0f:50:76:c2:
                    e8:9e:55:14:8f:69:f3:87:05:eb:94:ef:44:0c:5f:
                    25:d1:81:02:fa:d0:1c:58:dc:9d:c6:0e:e8:dd:9e:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:49:27:34:9C:ED:5E:D5:17:53:72:17:C7:32:5C:03:1B:C1:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:00:9d:dd:4d:08:44:b1:32:35:b2:00:95:20:a9:ce:4c:
         2c:a1:ab:7e:96:5a:99:e4:d3:9d:d9:1d:7e:fd:a7:b9:93:be:
         9b:fa:e5:71:9d:20:b4:af:c4:e1:42:75:ed:02:5a:3f:ac:53:
         6b:13:92:09:22:02:74:60:db:80:05:54:73:d6:4b:94:ee:b6:
         e9:d0:5f:be:a2:42:c2:a9:b5:b6:70:f8:7a:49:82:d4:f9:c2:
         79:f2:ad:65:92:1f:18:eb:17:9a:c3:8c:1f:b8:11:f3:c8:fd:
         13:70:22:a3:db:24:76:77:b2:ac:a0:21:13:af:6c:88:8e:75:
         7d:d0:4f:35:99:b3:d1:f3:8d:fa:e7:e8:52:c5:9b:5b:8b:48:
         67:d8:36:f3:d9:5a:ba:6b:38:64:23:77:84:86:d5:87:9e:22:
         a3:e7:47:ef:d3:46:5a:6d:bc:1b:7b:05:65:cc:f1:73:73:db:
         20:bb:53:fa:f9:ff:42:1a:9c:df:0f:2b:b9:2e:b2:cf:3f:f6:
         c6:a3:be:42:f7:6d:dc:a0:f2:dd:0a:6a:42:ba:a4:41:fa:d2:
         72:41:ef:0a:87:9c:d9:c7:5d:2e:46:a5:32:38:2c:d9:75:ba:
         9f:15:f2:05:e1:b0:b2:bd:d9:c9:1d:4e:a8:1d:06:ba:82:97:
         b8:7c:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:05 2025 by rpki-client