Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa
File:                     e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa (raw, json)
Hash identifier:          lcf0+kKf2Y0lnTX+Ydc1P4sNLyawQr91MJmkaflZyr0=
Subject key identifier:   F5:73:06:B9:BA:74:6D:0C:4E:8C:2F:31:10:23:A6:AD:7D:2E:F0:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C9232D4CB89111C5F781559DAED27AB6F8ACA89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa
Signing time:             Tue 05 Aug 2025 00:31:57 +0000
ROA not before:           Tue 05 Aug 2025 00:31:57 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:92:32:d4:cb:89:11:1c:5f:78:15:59:da:ed:27:ab:6f:8a:ca:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:31:57 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=232a0425f179dab1e05c6037cd01db73e742ef2b39f25c23161446328000006f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:d3:35:08:d9:94:cb:84:58:b2:1a:cd:1a:
                    03:af:e9:3f:ed:0f:29:5a:00:be:15:9d:10:11:02:
                    a6:fb:31:13:e2:9e:ba:50:07:e9:fd:dc:d3:a8:12:
                    9f:dc:0e:83:fa:be:06:47:0e:c5:63:fa:ce:3c:99:
                    c4:ab:59:14:fe:ef:45:8d:69:60:75:d7:21:ec:95:
                    5e:3a:71:c2:b3:37:6c:9f:8a:f7:e2:ac:4e:44:84:
                    18:84:28:94:03:aa:21:97:ff:3e:81:15:6e:7b:d2:
                    84:c0:b0:de:62:d4:4b:73:bb:83:91:c3:44:c1:94:
                    cc:d5:79:9d:c5:88:4e:df:38:04:8c:7b:45:2e:e5:
                    93:1f:38:f8:95:a6:91:90:90:56:f6:6f:78:73:11:
                    1b:46:8c:1b:61:e4:a7:0c:07:08:fd:a7:db:99:4c:
                    db:43:87:d8:e9:58:8e:e9:1f:b0:ee:dd:87:81:c9:
                    0c:d4:32:1d:3e:6b:3f:c2:38:26:24:23:7e:e9:45:
                    2e:fe:88:d3:26:d7:a2:f1:c2:ce:18:fa:48:17:a3:
                    ad:f3:67:23:c7:34:18:04:d0:68:35:cf:7e:3c:8b:
                    5c:f5:a3:f7:b2:e2:21:86:84:63:2d:13:71:4a:57:
                    de:56:f8:0e:64:c5:72:22:12:ba:21:7b:f9:f1:29:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:06:B9:BA:74:6D:0C:4E:8C:2F:31:10:23:A6:AD:7D:2E:F0:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0bd193b-fffc-45c4-bd44-e59fff3c0c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:66:f1:f9:bb:bc:53:6f:13:5a:87:b9:c7:46:e2:e9:9d:56:
         80:a7:9b:b4:38:29:2e:c6:14:57:ab:01:7d:31:e6:09:ff:63:
         b8:ec:0b:de:0f:23:f4:e0:64:5f:99:f1:81:5f:64:a1:0c:6c:
         88:f1:98:c6:3c:27:2d:5c:ef:32:5f:3a:41:68:09:81:55:da:
         00:13:4d:30:1e:c7:c1:09:58:6e:27:b8:55:db:cc:8d:db:d1:
         14:87:6a:0f:2d:04:51:52:7d:69:c2:11:38:7c:15:2a:21:f3:
         0a:7f:5e:f8:24:a8:13:b5:6f:d4:99:d6:f9:3f:76:51:ad:3b:
         87:8d:0e:75:0e:ae:59:92:94:2c:99:2d:be:25:55:34:e8:ae:
         eb:d1:5b:c3:1f:35:76:3a:a7:0e:e8:05:5a:8b:3b:ab:8f:1e:
         8d:81:e6:a8:30:d3:fc:68:2d:be:32:e6:49:bc:63:36:ab:4a:
         6f:09:b7:0e:3d:7f:51:ee:4f:09:2f:35:97:01:ba:2d:8f:d1:
         bb:97:f6:3e:70:ec:5c:12:30:02:be:22:d9:af:45:c0:7d:de:
         27:7f:52:e1:88:fd:08:09:8d:44:31:0e:ec:35:5d:ec:a7:66:
         3c:c0:e5:69:eb:b3:ed:96:9c:64:01:7e:a7:71:02:2d:4f:14:
         0e:62:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:09 2025 by rpki-client