Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa
File:                     9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa (raw, json)
Hash identifier:          56NMKbFT0xrn73wjMEi0Hf72oKO08Ih08EWyQvDkXk0=
Subject key identifier:   71:53:17:E3:4D:23:39:1F:2C:02:EA:12:FC:55:C3:B7:8F:B2:44:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4558FAC2B9917F696BF66FDC0D21E2C2989FF78C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa
Signing time:             Sat 07 Jun 2025 00:20:26 +0000
ROA not before:           Sat 07 Jun 2025 00:20:26 +0000
ROA not after:            Sat 12 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:58:fa:c2:b9:91:7f:69:6b:f6:6f:dc:0d:21:e2:c2:98:9f:f7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:20:26 2025 GMT
            Not After : Jul 12 23:59:59 2025 GMT
        Subject: serialNumber=26fea4b191d7afc5e7134c897d87c5a144a6a1d5399eba04ac0e6b903d77f1d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:5d:fd:ca:c2:44:cb:4f:23:82:9c:8b:a7:
                    6d:55:c0:4a:5c:74:db:bb:c6:98:e5:b4:ba:32:38:
                    4d:e1:22:76:49:b4:20:80:19:a7:ab:fc:f2:8f:60:
                    78:72:f6:c2:44:bb:36:6c:78:7a:bb:c9:73:eb:01:
                    21:06:67:f5:66:5a:b7:26:4d:a8:29:31:c5:24:43:
                    ff:bf:73:d4:67:f6:11:67:bd:1f:7f:00:7b:1c:34:
                    8f:dd:3f:7d:7d:96:d4:90:85:15:65:97:73:d0:17:
                    89:b1:1d:86:7f:94:b2:45:1d:8f:fc:89:07:94:de:
                    32:34:95:48:8e:7f:ba:0c:f4:06:ca:33:7d:16:71:
                    af:0e:88:4f:c7:82:26:15:95:02:d5:87:bd:a1:fd:
                    5b:f7:2c:b9:06:75:6e:5a:b4:7c:92:08:17:aa:b9:
                    1e:17:35:2f:a4:bf:37:3c:dc:b2:9a:e5:ce:a6:6e:
                    41:2f:06:1c:3f:52:91:c7:3a:8f:06:32:05:6e:e9:
                    5c:ba:ee:53:54:10:68:d6:7e:b3:ca:1d:c2:49:72:
                    a6:65:e4:16:91:34:52:54:af:17:b3:1c:d0:39:4e:
                    8c:46:ff:63:f1:75:05:31:ac:c2:ca:74:7d:0f:b1:
                    13:ec:ad:d9:d7:b6:36:8d:a3:22:45:ea:53:42:9b:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:17:E3:4D:23:39:1F:2C:02:EA:12:FC:55:C3:B7:8F:B2:44:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9515184d-12a2-49fb-b12f-8c4dfdddf2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:a0:d2:de:00:7d:73:14:b9:65:c2:f7:f5:e0:94:9c:9c:
         62:2a:a8:ae:83:bf:da:a7:86:66:3b:a3:8f:9f:20:dc:4e:47:
         b2:bf:91:14:84:ec:9a:88:b3:e8:ec:10:c4:45:7b:99:15:ad:
         4d:ba:f5:bd:28:a3:ce:86:67:bd:3b:f5:5d:6e:bf:e7:a3:9d:
         ce:32:0a:d5:ea:62:ff:78:4d:df:1c:49:a0:d9:2d:4d:c7:e5:
         16:a1:09:cf:65:52:24:6f:fa:e4:97:97:b9:6a:51:75:1a:bc:
         86:75:07:5a:cf:9d:4e:4a:41:bb:ab:62:85:29:28:68:43:f6:
         43:38:43:29:af:a0:65:b9:44:3d:dd:63:ea:3c:fe:7a:02:4f:
         3f:80:de:3d:20:51:5f:7c:17:00:57:98:10:dc:f4:b0:19:a1:
         6a:d0:94:dd:60:da:19:8e:1a:1a:cf:c8:8d:80:b3:18:bb:15:
         59:ea:41:5f:86:43:99:70:1c:a9:a2:e4:d0:ed:b1:92:de:a1:
         36:58:93:1c:70:a4:84:57:29:e3:cb:18:a7:83:aa:c5:b4:14:
         2a:0a:b5:92:ea:71:b8:ea:28:fc:44:71:a9:05:24:6d:4e:6b:
         a9:59:b6:11:f5:73:b2:46:80:71:e2:33:8d:a9:9a:91:a7:d9:
         00:a1:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:17 2025 by rpki-client