Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee53c7-e7a3-426d-8035-0c0d6b7ea0eb.roa
File:                     e6ee53c7-e7a3-426d-8035-0c0d6b7ea0eb.roa (raw, json)
Hash identifier:          Dd/K7KiHmwkwnSO8lo7/Mz50jEjf5k343MjwOUdufUg=
Subject key identifier:   B7:CE:AA:90:14:63:08:7D:69:CD:B4:E9:E4:DB:65:F1:14:F4:54:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F3995F500E980FF60805E935C7B26524793B61D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee53c7-e7a3-426d-8035-0c0d6b7ea0eb.roa
Signing time:             Mon 02 Jun 2025 15:32:24 +0000
ROA not before:           Mon 02 Jun 2025 15:32:24 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.220.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:39:95:f5:00:e9:80:ff:60:80:5e:93:5c:7b:26:52:47:93:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:32:24 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=60bc68425f9755ab66fd29b19857e5fc30ee44d0a2824323c7df8b22c6adfbaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:e8:7e:b1:fa:8d:5a:33:fb:fb:43:a5:31:
                    c9:e2:bc:36:d3:55:cd:99:ad:cc:96:70:ea:01:71:
                    86:e1:69:89:17:a2:fc:eb:c3:47:b2:74:12:29:10:
                    f9:2e:52:34:bb:40:77:eb:cc:7a:33:3b:de:70:5c:
                    f3:c6:7e:78:1c:45:31:1c:92:81:63:60:97:17:30:
                    87:0d:95:16:59:da:d0:06:4d:82:e3:be:c7:f0:a1:
                    ec:1e:a3:8a:09:79:2b:04:13:a0:28:b7:22:fc:29:
                    00:5e:74:fd:aa:46:9e:ec:78:95:0d:95:ed:70:73:
                    29:ca:fd:c4:c6:32:06:83:6a:fc:03:6f:7e:c0:05:
                    af:ec:85:72:b8:2c:46:12:ad:0f:03:03:1f:6d:bb:
                    c3:4e:18:34:7b:72:12:00:ec:52:b6:64:e5:24:b8:
                    12:c2:e5:a9:cf:7a:72:15:dc:48:1b:32:0b:e4:be:
                    7e:7e:08:fe:66:ef:cb:e1:2b:bf:fc:96:17:db:66:
                    1d:af:6e:d3:78:98:47:92:09:f4:30:21:fa:8f:10:
                    e9:d1:0e:65:60:e2:50:7a:ce:ea:4a:d3:cd:3f:34:
                    ae:6e:fb:65:31:1d:0f:0f:48:22:13:ea:e4:34:f9:
                    91:57:b5:ce:87:23:51:f0:d6:28:65:d2:14:5b:b5:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:AA:90:14:63:08:7D:69:CD:B4:E9:E4:DB:65:F1:14:F4:54:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee53c7-e7a3-426d-8035-0c0d6b7ea0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.220.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:c4:d2:0b:25:7a:44:38:66:df:14:ac:34:cf:c2:51:89:
         d5:48:06:ab:01:fb:20:09:ce:e1:56:b0:cc:4a:20:ff:7f:13:
         7f:65:49:a6:1a:01:46:fd:10:60:c5:dc:da:d0:dc:70:8b:b6:
         a8:0c:4c:ee:5e:95:d9:0c:a9:49:12:6f:44:9d:4a:5b:19:13:
         2e:0a:c0:15:ae:a8:2d:94:6f:df:12:67:24:10:8b:4f:5a:fc:
         08:59:a2:e0:79:c5:d2:62:67:74:38:8b:af:3c:1e:23:87:13:
         96:a4:a2:90:6f:08:a0:1e:a6:4f:fc:d7:ea:ed:39:85:bd:6a:
         2f:91:0a:18:45:12:25:af:a6:1d:68:27:75:09:7e:f1:70:af:
         5a:0e:36:19:03:5a:e9:af:63:52:36:ae:54:ff:17:36:fa:48:
         ad:83:29:25:9c:e2:a3:6d:26:7d:2e:98:db:aa:c5:3f:ce:cc:
         a8:5f:cb:32:0a:89:2e:54:1f:50:4c:37:64:43:ba:3f:9c:87:
         53:b2:de:4b:5d:2e:0e:8e:d4:3b:3f:95:55:5f:4c:43:22:93:
         f6:4f:57:71:2d:3d:fa:8f:52:0f:b8:e4:bc:86:e3:e2:73:6b:
         bb:1b:1f:80:90:e0:a1:c2:77:c1:89:87:e5:6c:e8:42:18:11:
         05:2f:96:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:24:39 2025 by rpki-client