Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
File:                     c7b638b3-e41e-4f83-bc95-3722c08205ca.roa (raw, json)
Hash identifier:          vHwAJs/+dVHIlq7TTDkzGXxxsd2Ai2X0+Sm2L67OHhs=
Subject key identifier:   66:0C:6B:8B:4E:70:7D:32:DD:2A:11:6E:E1:3E:07:40:8E:08:94:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31535133E4B5FCBAE4F41502006888C4025F7484
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
Signing time:             Tue 05 Aug 2025 00:50:22 +0000
ROA not before:           Tue 05 Aug 2025 00:50:22 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:53:51:33:e4:b5:fc:ba:e4:f4:15:02:00:68:88:c4:02:5f:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:50:22 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=a04810b2687dd40b4193c624e6645b95b4bbd9fb12c52f3b2a650da72c5bcca4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:bc:f6:d7:f5:f0:e5:56:62:0a:46:8f:15:
                    e6:d2:fe:f4:8d:9a:62:af:81:3a:cf:c0:8e:a6:ad:
                    54:f4:3d:72:b1:b5:56:13:d8:ea:36:d4:12:3e:b0:
                    f6:1e:c4:7b:5e:4a:8e:d9:ae:53:cb:69:9a:d4:95:
                    28:75:93:bc:3f:9f:5c:47:cf:cb:3c:0d:f1:d1:08:
                    5a:e5:e7:6d:43:aa:d9:01:ef:f1:59:c1:32:f6:08:
                    9c:95:cb:e2:1b:e9:44:83:df:81:64:ea:9b:f7:f2:
                    44:9d:2a:46:ae:e6:cc:4c:47:9b:60:29:e7:00:00:
                    8f:04:0e:c3:73:9e:77:f9:29:3a:80:69:17:af:7f:
                    c8:48:ce:4c:3b:73:a8:94:b3:6e:c1:6c:60:63:18:
                    1f:2a:d1:c1:bc:d9:1f:2c:f3:d8:75:44:f1:e6:5d:
                    a5:be:a5:07:cd:4f:e6:65:d8:27:0c:cb:00:0d:5b:
                    4b:e0:6f:f2:fc:9d:2d:e8:27:64:2f:e7:7c:db:87:
                    aa:2e:99:63:d0:1e:af:5e:d9:cd:8f:70:fe:42:f7:
                    ed:d4:84:76:c8:66:b0:8d:b7:24:25:20:f6:8f:c4:
                    08:b3:d3:a9:46:50:fc:ad:22:50:2f:9f:70:c8:c5:
                    0b:e2:8a:b8:d0:fb:11:c8:bf:6d:95:fd:27:50:28:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:6B:8B:4E:70:7D:32:DD:2A:11:6E:E1:3E:07:40:8E:08:94:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:27:33:c9:a8:86:0f:bc:a3:63:b7:7b:d5:f2:8c:7b:42:10:
         57:cd:d1:83:4d:3c:94:b2:17:e0:45:01:ad:46:c5:65:fa:80:
         06:fb:b5:86:5f:eb:8f:be:65:0c:c2:53:fd:45:dc:db:4c:ab:
         b0:2a:ce:f1:d8:e2:2e:4c:ec:20:57:d8:f3:aa:4e:a3:36:5f:
         3f:1e:57:71:d5:2e:a6:63:35:83:6a:37:b8:88:9a:cd:b4:b7:
         7a:88:2c:b6:cb:23:9c:ed:50:0b:4f:40:2b:8f:3c:92:90:c4:
         00:59:6c:6e:9f:ee:44:4c:eb:fb:f5:cf:62:09:05:0d:d6:92:
         cd:e3:08:a8:03:37:0a:90:9c:a4:e4:e2:28:c4:73:52:bd:69:
         05:2a:74:2a:07:53:c9:1b:26:72:7d:cc:7f:03:32:6f:e3:7d:
         d0:19:6a:08:fd:67:f5:2c:5d:47:e0:00:d4:2c:bd:53:3e:cd:
         df:c1:73:02:18:3d:c0:be:6a:65:c9:54:db:16:65:e6:a5:76:
         13:2c:f3:2c:6c:18:8d:cc:c8:58:8a:2e:a4:44:3b:16:9c:b9:
         70:7c:b9:c8:11:95:c7:21:96:8f:da:28:e1:fe:55:89:f9:aa:
         6b:1f:d8:fa:d8:92:17:31:c1:dd:0d:77:77:2f:9a:44:59:bc:
         1f:87:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:07 2025 by rpki-client