Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
File:                     d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa (raw, json)
Hash identifier:          ha18m0w7N3onT5E0COrBy5sHypnwjIOzU13uKnPGTOM=
Subject key identifier:   29:8B:9C:94:9F:B5:22:8B:BD:68:94:D3:E8:F9:3F:3A:CC:70:D7:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A66EEB3F6A877D2C373477A4B91ADBC25551944
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa
Signing time:             Fri 13 Jun 2025 00:50:24 +0000
ROA not before:           Fri 13 Jun 2025 00:50:24 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.63.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:ee:b3:f6:a8:77:d2:c3:73:47:7a:4b:91:ad:bc:25:55:19:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 13 00:50:24 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=342cf553d21e1fb7c0a7fd92ab115b17b137c0afbf7d302e9b624fb07d7d8ee1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:e2:de:f2:14:9d:0d:d7:94:21:eb:90:d7:
                    3c:46:51:91:ba:4d:ce:21:e4:e6:ed:7d:49:d7:6e:
                    31:48:2e:3e:95:8f:3a:44:99:0d:8a:0e:80:0a:31:
                    1c:8d:f5:fb:78:bc:b3:e8:9c:bf:72:41:d4:d4:3a:
                    55:5f:14:af:3e:ba:b9:f7:3b:e3:51:9b:77:4f:c6:
                    d9:73:15:ec:4d:12:d7:4d:17:9d:b5:26:82:83:a0:
                    c8:22:c7:e6:91:89:2d:ba:a4:78:6f:2e:31:1f:e7:
                    88:c5:7b:f9:d8:e8:ea:9b:1a:d1:b7:16:62:0b:e3:
                    15:fe:95:37:a1:15:6a:96:ca:a9:5b:7a:58:47:4b:
                    dd:2b:cf:15:71:03:b5:0e:3a:d2:2e:18:85:15:cf:
                    0e:e6:e5:d3:be:dc:e7:63:9f:58:19:bb:34:2a:85:
                    1a:7c:4f:f5:61:d2:05:e0:ac:d0:37:cb:fe:91:e4:
                    15:77:fd:01:a0:e7:68:cf:37:4c:09:42:dc:1a:b4:
                    f4:dc:b4:61:c4:ed:49:5c:fe:2e:f9:d7:b1:35:c6:
                    16:8b:05:72:a6:3f:64:d2:ff:16:43:cd:b8:b2:36:
                    ee:bd:75:09:6c:6e:12:19:c1:cb:53:31:d7:24:47:
                    2a:05:05:3d:1c:af:7a:8a:be:e6:63:fc:d0:27:e3:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:9C:94:9F:B5:22:8B:BD:68:94:D3:E8:F9:3F:3A:CC:70:D7:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.63.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:01:b5:15:a2:b0:c1:2a:85:53:42:d8:70:d5:ca:42:58:47:
         b0:c4:80:87:eb:64:70:f8:45:02:a4:42:c9:53:96:57:2a:3e:
         bd:86:7f:2b:4e:3a:e3:23:6b:0a:56:de:4b:06:26:d5:c4:6b:
         09:62:9b:82:d9:46:f2:04:d5:cd:cc:45:6f:d7:42:bd:3b:a7:
         62:10:7d:98:8b:77:c9:2a:bd:58:53:2f:c6:1f:36:13:ba:cb:
         a0:4f:f0:6b:f4:28:47:0f:3b:d3:c9:9e:53:41:04:7b:79:56:
         01:48:4a:48:6a:85:13:fa:51:65:d0:f2:d4:3f:0f:af:6e:d8:
         a2:6a:a0:f9:fc:41:11:8c:0e:b4:ee:e2:a9:37:9f:b2:f0:7f:
         6e:7f:8b:20:9f:19:8c:72:7d:37:e1:fd:f3:9c:76:dc:02:f9:
         5d:5a:25:ee:b4:55:f7:ef:43:8b:76:23:86:b0:c4:63:ca:ee:
         a8:dd:6e:8d:39:1d:1c:9d:8e:cb:da:0e:6f:9b:14:1f:72:71:
         bf:b0:7a:35:77:c9:80:83:0b:ec:3c:4a:47:0a:5c:f9:e0:22:
         9b:0b:a4:66:25:c4:1d:bf:ad:14:e0:74:7c:30:1a:f1:26:16:
         0e:a0:09:43:06:44:08:a6:4d:17:81:85:4e:41:e2:48:af:1a:
         ba:a1:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:14 2025 by rpki-client