Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa
File:                     e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa (raw, json)
Hash identifier:          dvkOAJmoL5TGWcceiJ9KmfycDr7Fu4+Lq9h82yVACVM=
Subject key identifier:   8B:D9:44:AC:26:CE:6C:74:77:4F:5A:34:90:32:19:C4:29:FB:62:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       685E1B53ACA6F70EC4E456ABD364EB774DA99768
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa
Signing time:             Mon 28 Jul 2025 15:32:18 +0000
ROA not before:           Mon 28 Jul 2025 15:32:18 +0000
ROA not after:            Mon 01 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.217.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5e:1b:53:ac:a6:f7:0e:c4:e4:56:ab:d3:64:eb:77:4d:a9:97:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 28 15:32:18 2025 GMT
            Not After : Sep  1 23:59:59 2025 GMT
        Subject: serialNumber=f97f120ff33744558baecbb015bdf0ba449aa4bf7e39b05e46b0d2f2a5d6840c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:60:cb:13:81:09:e5:8f:a0:7e:65:60:3d:
                    0f:3e:91:6d:c3:78:00:f3:02:8d:2c:09:77:17:a0:
                    4d:eb:dc:72:c2:81:bc:f8:86:29:35:e8:53:04:e1:
                    28:45:9d:7c:b7:fa:10:82:35:69:21:e8:7e:6c:91:
                    d7:4f:9b:35:c0:7c:72:e4:be:01:55:03:47:00:90:
                    1f:b4:20:a9:01:39:34:ef:20:54:1b:0e:b4:4a:8e:
                    6f:7a:d4:d1:97:dc:50:5e:92:80:e9:75:f1:e9:7d:
                    64:24:05:20:08:ee:63:6d:63:88:76:b9:66:7b:44:
                    ba:01:c0:4f:6f:b5:ef:35:dc:92:5e:31:4a:a9:13:
                    ea:fc:e9:df:be:c4:a9:7e:03:1d:d8:b9:79:bf:45:
                    6f:be:60:81:34:61:8b:ed:6d:78:d4:e6:46:05:2e:
                    16:23:41:16:27:4b:17:fd:da:db:87:db:c2:6b:09:
                    9c:b4:de:4d:54:d7:33:af:ab:f6:41:5f:4d:93:da:
                    af:08:55:b2:ec:39:dd:41:19:36:ca:19:f5:8f:9e:
                    d1:cb:ad:cf:c2:65:d2:bf:82:b8:a6:fb:01:f2:10:
                    12:01:04:6d:86:9a:f7:22:33:d8:cf:81:0a:05:0a:
                    f0:19:79:7a:d9:99:45:5b:e2:8f:98:01:40:9d:20:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:44:AC:26:CE:6C:74:77:4F:5A:34:90:32:19:C4:29:FB:62:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3e0b246-1615-4ed2-bcc8-a85ed79e8915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:d8:0d:fd:49:89:39:67:9f:a9:43:65:75:c6:9d:e4:df:
         96:71:63:2b:71:8b:eb:31:57:85:79:f7:68:66:3d:39:82:01:
         26:de:ba:ae:8e:5d:8f:59:23:89:2c:fd:50:31:1f:a3:ab:98:
         cc:c9:59:ef:16:98:55:3d:1f:bc:0d:d5:c1:c7:ff:0b:ec:16:
         77:cd:c1:02:c6:bf:45:cb:ec:61:15:d3:5b:b9:4d:f7:e9:f5:
         8a:e2:2e:f6:43:80:d4:4f:38:b8:b1:3b:6b:0c:c4:ae:6d:c6:
         b2:db:2d:96:bc:61:96:9f:9a:b2:be:68:61:5a:04:26:94:49:
         75:94:bc:e2:67:80:80:12:24:c3:11:6b:d4:0f:26:9b:8d:8b:
         eb:3c:47:e5:4a:4d:ec:94:42:24:12:54:23:22:cc:7c:c3:98:
         57:c3:d5:a3:70:f9:10:95:63:d8:fb:3b:17:dc:44:a9:c5:61:
         fa:1c:68:6a:55:32:29:ef:aa:7b:b5:ac:cd:53:07:8c:1e:9c:
         f2:b0:ac:8c:39:cd:ca:c7:13:44:30:49:19:d4:fb:49:8c:ab:
         7f:67:e6:b4:36:5c:07:b7:85:d4:6e:c5:87:47:79:ff:58:b5:
         ed:ce:42:7c:9c:d1:b9:90:0d:35:0b:e1:3f:71:87:4e:71:f9:
         a9:a1:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:58 2025 by rpki-client