Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
File:                     e261541c-5236-438a-addf-e0379cb8428e.roa (raw, json)
Hash identifier:          j27vKOQAzmoNaXoqiGJRNXNJCkV8aCNiVYNnCTqo2Ng=
Subject key identifier:   B8:FD:17:27:44:37:96:33:9C:F8:EA:DC:1B:9B:BF:98:44:8E:AC:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BD972CD3A46A1F3F6C011F69EBA5EA76B6DC9A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa
Signing time:             Tue 22 Jul 2025 15:02:17 +0000
ROA not before:           Tue 22 Jul 2025 15:02:17 +0000
ROA not after:            Tue 26 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:72:cd:3a:46:a1:f3:f6:c0:11:f6:9e:ba:5e:a7:6b:6d:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 22 15:02:17 2025 GMT
            Not After : Aug 26 23:59:59 2025 GMT
        Subject: serialNumber=96caa595f8203955d14852b4cc99dea6939406c1bf901341b78337f4cecc90c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:53:2b:19:b4:f3:bc:a2:ca:69:14:54:8b:
                    14:d9:66:a2:2a:e8:fa:d0:76:3d:d1:2c:35:e4:26:
                    45:f9:2b:2b:04:88:bf:34:44:78:85:d2:59:99:7a:
                    f2:ea:1d:02:5c:9e:f9:a0:c9:66:91:0a:6e:7b:7a:
                    01:3e:b9:eb:7d:98:a6:0f:97:c2:d5:f1:e2:60:0e:
                    e5:e6:53:f6:c0:dc:1c:a9:36:26:6d:94:93:e5:fc:
                    3e:a3:24:25:86:af:d1:7a:a5:69:77:9b:ff:10:98:
                    97:f4:0c:f5:3b:4b:45:4b:18:2d:7b:d6:e0:da:96:
                    e3:3b:ea:e6:58:d8:99:59:e7:92:d5:c8:a9:19:52:
                    cb:4e:4b:7e:28:7a:b3:99:89:eb:dc:ff:1e:4b:b9:
                    80:db:80:ea:42:4f:05:f7:4d:ad:08:07:ec:6b:5c:
                    39:3f:9f:27:40:56:6d:99:d6:2a:10:11:2b:7c:76:
                    3d:ef:7b:ab:bb:b4:cf:6d:b6:1d:9c:b3:68:c7:2b:
                    76:d4:d6:2c:29:83:d5:db:fb:0a:20:f6:54:50:f7:
                    7d:b9:c3:8e:c3:65:94:ba:9c:8d:e5:72:12:96:ed:
                    f4:32:9b:eb:c6:ba:39:99:f0:cf:a5:bb:61:93:1b:
                    35:1d:a7:91:5f:83:a9:88:de:93:90:12:fe:69:ac:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:17:27:44:37:96:33:9C:F8:EA:DC:1B:9B:BF:98:44:8E:AC:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e261541c-5236-438a-addf-e0379cb8428e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:a3:0c:39:1e:5e:fc:dc:40:1c:f8:bb:c6:c4:e4:cf:72:
         8e:d5:8b:e8:f7:b6:94:7e:f2:5a:26:6b:61:b5:2b:f4:6c:e1:
         53:8d:c6:be:d4:94:bf:23:cd:d1:a0:5e:5d:a9:cb:29:14:b7:
         3e:da:19:f2:b7:f9:9c:34:79:a3:2b:08:3e:56:b3:fe:7f:f3:
         07:ff:2e:7c:a8:97:ab:99:0d:f9:8e:76:f3:f9:00:cf:d4:10:
         f4:4e:fe:7a:d5:e0:14:61:4d:cd:cb:58:a5:6d:3a:24:3b:11:
         a1:14:fa:48:5c:ea:f9:2b:df:45:91:8d:56:13:c8:56:89:37:
         7f:bf:b8:b8:19:10:94:26:b5:5f:b2:e8:33:7a:64:28:3f:ad:
         cb:80:0a:6d:ca:1a:44:dc:ce:76:26:03:71:d0:cf:d0:ea:e5:
         d9:e6:7e:00:6e:aa:9a:8a:56:9e:df:08:a7:f7:27:0c:a8:7e:
         b7:c3:59:68:af:24:3e:d5:a1:65:fc:da:17:37:5c:63:f8:93:
         b6:ec:28:0d:04:0a:3f:96:25:99:01:8b:b6:8e:b7:85:9b:32:
         3d:9a:70:45:e1:20:9b:f6:2c:c9:ae:4e:33:a3:80:15:e8:35:
         81:06:98:95:ee:c9:6a:c2:90:ab:f9:0e:83:92:8a:be:6d:1b:
         53:15:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:28 2025 by rpki-client