Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa
File:                     e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa (raw, json)
Hash identifier:          Yq8pZID+rRGQdS6fZZGyT4QZNCvplQi6Ob0ELyCFGYw=
Subject key identifier:   44:AA:A2:87:8F:D8:13:FC:85:60:49:D6:35:D9:C6:28:E1:E7:E7:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BD606B1CBF9B3BEDEF690CF324BA8BFD6E31183
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa
Signing time:             Sat 07 Jun 2025 00:31:59 +0000
ROA not before:           Sat 07 Jun 2025 00:31:59 +0000
ROA not after:            Sat 12 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.217.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:06:b1:cb:f9:b3:be:de:f6:90:cf:32:4b:a8:bf:d6:e3:11:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:31:59 2025 GMT
            Not After : Jul 12 23:59:59 2025 GMT
        Subject: serialNumber=4541f774bc4542a275b26388966b18f4d901bea459934a4ffc2ff0afee17e5b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:d7:e7:92:00:ee:d3:f8:eb:d3:87:a9:4a:
                    29:27:d2:59:8f:3c:4a:39:fd:2d:60:31:59:cd:05:
                    9c:42:c9:3b:b9:48:af:e9:c7:99:6a:08:be:09:3d:
                    98:79:ec:4b:e6:64:36:4b:95:4e:61:8e:8b:e0:f5:
                    4b:dd:0a:36:be:69:28:e3:f1:79:97:6a:72:85:81:
                    ed:26:1b:ec:77:45:03:2f:4f:52:6d:1f:07:12:bf:
                    f5:a1:b3:be:f1:82:2b:e2:b1:2d:5c:97:82:c2:6f:
                    61:f2:30:06:ea:93:14:f8:76:4f:a2:13:cf:fc:33:
                    a6:00:bb:72:d3:bb:b1:d9:a4:62:2e:00:d2:9d:2d:
                    9f:a0:4a:e0:2e:c8:72:91:36:e6:dd:49:56:0e:df:
                    23:34:2c:1e:a6:0c:cc:33:2e:6e:eb:ae:aa:2c:85:
                    f5:e2:7c:17:22:6b:58:fa:44:c4:aa:e1:9f:cf:fc:
                    18:da:92:0f:4c:6d:9a:a8:5c:fc:27:c5:b6:77:a5:
                    49:72:c4:44:18:9f:8f:1e:fd:7b:15:2a:7e:70:41:
                    d5:02:fe:b0:11:31:78:12:72:10:e8:d3:b8:87:95:
                    7b:62:53:1a:e4:e1:4d:54:58:e1:80:9b:60:ce:05:
                    aa:72:e2:90:82:01:f9:78:88:09:4a:bf:3c:75:5e:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:A2:87:8F:D8:13:FC:85:60:49:D6:35:D9:C6:28:E1:E7:E7:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:b7:27:b2:d1:2d:c5:51:d6:4c:07:6e:52:53:10:6a:da:
         7b:d3:ce:9c:24:00:ac:9b:40:22:67:65:cf:57:4a:c1:ed:7d:
         43:3f:3d:7b:2b:45:74:ac:18:45:0d:e4:75:1f:05:31:77:15:
         3c:e2:01:33:1d:ee:26:ac:75:0e:d8:94:95:41:82:e8:c0:2f:
         b3:2f:70:0b:e2:a3:33:9c:91:7d:a6:08:5e:73:e4:7a:3f:04:
         e5:e4:79:fe:d8:af:2c:65:9b:8e:cb:39:57:d5:50:4d:78:33:
         b8:de:c6:61:52:90:4e:75:a3:f1:33:92:bc:19:86:87:0d:ed:
         91:6a:88:10:82:a1:c1:0d:70:f5:1b:8e:63:c5:0e:ae:37:db:
         f7:4a:44:61:a4:57:28:a6:68:4e:e6:eb:da:b8:4c:db:bc:62:
         ee:b2:4c:7e:81:c7:dd:61:c9:6f:f2:62:b4:5f:02:7f:c5:a1:
         f3:fc:7f:02:35:f7:f6:99:89:ed:90:30:ef:c1:33:f6:43:e8:
         df:1a:e4:d8:ee:a9:41:6e:bd:68:7c:46:71:c3:51:9e:1a:83:
         75:61:69:43:cc:4f:4f:de:10:1b:00:b5:4e:95:6e:33:29:39:
         39:6b:61:8c:3f:37:3c:9e:24:d3:d2:64:aa:99:26:27:f3:fe:
         b2:b3:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:40:31 2025 by rpki-client