Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa
File:                     a5459b61-4765-4284-9582-9c6c304ff03b.roa (raw, json)
Hash identifier:          jjOVyQRQeEYMwrQKG8Zav6fZ1k25llALxLg5utLOQzc=
Subject key identifier:   46:A0:96:F3:BF:CA:BF:2C:14:D1:D7:E8:AC:0C:5C:FC:B1:A0:94:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       758075286779560AAF621B479AB0A9827EF69D46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa
Signing time:             Fri 13 Jun 2025 17:40:58 +0000
ROA not before:           Fri 13 Jun 2025 17:40:58 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        5.179.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:80:75:28:67:79:56:0a:af:62:1b:47:9a:b0:a9:82:7e:f6:9d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 17:40:58 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=862d78ef23d9b735ba417e47a3b3a132d77007298f824ff6c9410317314227ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:68:03:d6:9b:d2:2e:cf:25:1a:49:7d:bf:
                    f1:5d:f7:3f:b6:e5:e7:4f:18:ba:bd:a1:6d:7c:b7:
                    d1:e3:9c:8c:7c:78:11:c1:9e:78:9d:ff:5a:2d:3d:
                    b6:5b:59:b2:54:a3:67:c4:c0:62:f6:74:93:86:77:
                    71:18:bb:b8:97:67:b9:13:39:42:f9:df:9a:e5:60:
                    0d:7c:e7:8c:6a:63:87:09:62:a0:ce:20:84:40:a1:
                    45:a0:90:f2:cf:a2:55:ba:c7:29:0d:00:55:42:c0:
                    fc:49:30:85:fe:b9:26:66:fd:65:94:68:18:ba:44:
                    54:35:2a:51:cf:11:77:6b:2f:8f:67:13:de:91:a9:
                    4b:e9:2b:ec:9b:7e:b3:17:ad:44:06:36:96:99:eb:
                    ed:da:49:ce:ab:a1:c6:bd:2a:92:9f:52:e5:2e:5d:
                    46:86:4b:c2:bc:64:b0:83:31:f4:f5:cb:be:6f:62:
                    6c:28:7a:89:3f:37:65:96:41:79:0a:1b:ac:85:ac:
                    25:b8:ef:10:ae:a2:c9:45:dd:d8:08:d5:4b:f9:e2:
                    9b:1c:1e:16:ce:af:b8:62:41:59:2f:d3:b5:d1:16:
                    a8:5e:2c:01:c1:12:46:ae:d4:e8:89:4b:9b:69:ca:
                    13:b7:ab:ba:3d:be:d4:59:c3:52:eb:90:68:dc:83:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:96:F3:BF:CA:BF:2C:14:D1:D7:E8:AC:0C:5C:FC:B1:A0:94:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5459b61-4765-4284-9582-9c6c304ff03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.179.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:75:42:6c:ba:f5:29:55:5d:77:0c:a4:88:52:85:30:01:
         83:be:f5:60:9f:18:9c:8b:8a:b1:3f:47:d1:cf:1a:81:b3:01:
         1a:f9:0e:67:32:a5:e8:4c:ac:38:28:e8:ec:e6:5f:72:5b:1f:
         44:12:7d:72:01:16:75:0d:35:d0:9e:29:ae:36:2d:93:37:5c:
         35:80:24:fc:7e:01:e0:f4:c1:b3:b7:bb:7c:ec:60:ac:73:1b:
         ff:8f:60:bc:c7:17:f1:db:b1:86:86:12:c4:1a:4a:8d:4e:a1:
         4b:07:46:92:09:3e:6c:ae:7f:bb:3c:91:49:40:30:d0:3b:55:
         6d:e4:c1:2d:9e:87:98:7d:5c:80:28:23:55:cf:f2:96:22:95:
         1a:1e:af:e1:d8:10:f3:10:04:26:81:c2:66:d2:11:61:3c:d9:
         6f:2c:ab:e3:18:75:c5:62:f8:f7:91:a5:2c:b9:73:42:b3:78:
         66:a6:1d:92:20:67:e0:9d:d4:66:c4:c9:13:16:58:19:24:b1:
         a9:c3:f9:92:ee:d8:b0:54:65:4d:f4:f7:42:b8:71:50:ad:e8:
         96:dd:60:6f:0e:30:1e:5f:69:d7:71:d0:19:94:6c:b0:bb:a3:
         40:12:bd:0b:48:23:93:7a:98:53:e4:de:0a:da:f9:6a:3b:3e:
         7e:6b:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:55:39 2025 by rpki-client