Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa
File:                     a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json)
Hash identifier:          eCQXgFSsUGaotBpMzqJwh6Q30xN8za7dhYeovt3P/rQ=
Subject key identifier:   37:B8:16:8D:A5:6C:A5:8B:4D:28:4C:44:E9:49:84:A0:8B:5D:76:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0D3086E392135930F04B91FE2C5D5A2F3C0D418A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa
Signing time:             Tue 03 Jun 2025 00:21:05 +0000
ROA not before:           Tue 03 Jun 2025 00:21:05 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        198.13.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:86:e3:92:13:59:30:f0:4b:91:fe:2c:5d:5a:2f:3c:0d:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:21:05 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=1863519591c679ed2d6fd3663ce750c6349b332efe4471bae5060c820a539a4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:5c:24:53:33:82:0c:08:72:0d:0b:6a:d1:
                    eb:68:6c:07:7a:7a:eb:28:01:d5:4c:1c:c4:ce:e9:
                    96:f9:01:34:d9:f3:70:6b:cb:90:cc:12:1e:9a:af:
                    8f:e4:a8:a5:85:dc:53:ff:58:07:cc:93:54:05:22:
                    b5:6a:07:a6:b2:ed:f9:91:2f:35:47:9a:82:0b:82:
                    35:df:eb:b9:70:ed:fe:a6:5d:ff:6d:75:e8:dc:dd:
                    f7:27:87:c7:93:32:59:5a:4a:60:96:32:3b:d9:5f:
                    f2:21:fd:b2:ba:82:3e:90:04:a4:21:f1:57:fc:25:
                    55:7a:30:2e:d9:3f:87:73:3c:b8:44:48:6b:4d:34:
                    05:ca:f3:ee:f4:43:81:3c:85:56:09:4c:8d:33:ca:
                    27:c2:7f:e9:42:c2:a4:87:af:29:e2:fd:88:a6:fe:
                    90:15:d4:a8:e4:ce:c5:4c:4e:03:7e:70:53:ba:11:
                    17:3c:d8:ad:7f:72:26:16:da:92:46:9b:b2:36:08:
                    c1:0b:f8:23:95:40:47:cf:81:c2:7f:e3:0f:1c:d4:
                    5d:90:45:8e:9a:48:9a:04:a2:49:c3:a5:af:06:98:
                    b7:91:6e:ac:77:fc:02:2f:9a:3a:64:fe:81:e0:4e:
                    ea:4c:aa:f6:96:db:e7:1d:b2:64:af:0e:8a:a9:3f:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:16:8D:A5:6C:A5:8B:4D:28:4C:44:E9:49:84:A0:8B:5D:76:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:35:f2:aa:65:ed:fb:d2:60:a0:a2:ef:43:15:3c:ad:7f:3a:
         25:43:6b:be:4c:79:ca:9b:f3:69:b2:42:5f:cf:0c:2a:20:e1:
         fe:ba:b9:88:f7:91:ba:c0:fa:f3:bd:d4:e0:ce:c0:57:96:23:
         8e:52:e2:1e:68:45:a2:94:82:2a:71:d9:e6:4d:f4:df:bf:e9:
         50:0e:79:70:0a:fe:08:b7:dd:27:15:48:ab:bf:d7:d9:17:3e:
         cd:45:0f:6c:13:d7:b4:69:b3:27:2c:14:d0:fc:ae:e7:d7:c5:
         56:66:cf:6b:9e:fa:3c:2a:b5:69:21:a4:9e:93:34:1f:7a:53:
         a1:23:97:27:6e:8d:41:f1:c8:ed:db:d3:d0:fe:79:85:63:8f:
         41:24:64:ec:99:d3:50:79:29:df:5d:76:84:19:1c:fb:db:34:
         09:37:be:08:b6:f2:07:db:6a:40:b9:92:ca:8a:09:6d:a2:70:
         77:2f:98:7b:31:b7:37:1c:de:df:40:8c:20:35:c9:61:eb:75:
         e6:a9:4c:fa:7b:3b:33:eb:82:5c:56:e2:7e:47:a3:f0:d0:f4:
         33:1a:82:af:7c:ac:a7:7c:6c:3d:0a:64:79:23:42:7a:c6:5e:
         b8:af:85:d4:f0:44:e4:d7:52:ef:e2:8d:b6:0e:bf:f0:fb:7f:
         cd:04:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:30 2025 by rpki-client