Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
File:                     e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa (raw, json)
Hash identifier:          ilGWwbXHUNfg3wN9Pj4+BYan7wG+zfPvXZ18WYIkb/4=
Subject key identifier:   6D:27:9A:32:E9:68:2E:68:E0:C1:2C:56:27:32:59:75:EF:25:07:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58BBB8FED8F6FDFB1A8F8321746FB463D1B9D0C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa
Signing time:             Fri 25 Apr 2025 19:08:02 +0000
ROA not before:           Fri 25 Apr 2025 19:08:02 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.84.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bb:b8:fe:d8:f6:fd:fb:1a:8f:83:21:74:6f:b4:63:d1:b9:d0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 25 19:08:02 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=237a39928ecdf000bb3f6a0fbe977fcb0d1586e67e12b874669a6deef72a0b4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:50:3e:ee:ca:d0:55:bd:c9:07:72:0a:bc:
                    97:2c:fb:fd:b1:4c:a3:a2:1d:b8:ec:ba:e1:06:b5:
                    9b:9f:8e:29:c1:6e:05:7f:e1:08:d7:61:dd:d6:65:
                    19:f0:7c:f6:ff:cf:f8:a4:e5:cb:48:b6:38:25:82:
                    75:ae:c2:61:2b:78:6a:5c:c4:53:6e:27:1f:4b:80:
                    9f:e3:af:8b:35:ff:6e:3f:d6:ee:87:36:75:ec:d0:
                    f6:fe:35:ff:4d:0f:80:58:41:f7:9a:e1:61:8c:a8:
                    8a:e3:86:67:6b:93:7a:95:93:f8:82:26:04:81:54:
                    31:d3:a7:db:c0:32:bf:b2:fb:64:c6:e7:4c:12:23:
                    5e:6b:57:47:7f:78:b9:27:9c:b0:26:ba:ca:2e:73:
                    d5:1e:4a:e4:92:1f:b5:ea:1e:c7:ed:e5:20:08:6f:
                    9e:ef:8c:0f:8a:77:f4:a4:a7:4d:16:d6:13:f9:a0:
                    8a:a0:17:eb:c6:b6:35:6e:6b:50:59:5f:69:e0:b8:
                    1c:4b:e2:ba:00:42:a4:c2:f0:9a:96:fb:85:60:b8:
                    18:c3:1b:13:81:46:c0:45:b8:2c:2d:cd:8c:96:28:
                    db:6d:63:df:c9:4a:05:a6:06:e5:3c:29:51:76:a5:
                    ac:7b:ac:de:f4:d9:5d:7d:95:b0:84:c3:27:ab:92:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:9A:32:E9:68:2E:68:E0:C1:2C:56:27:32:59:75:EF:25:07:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7b2c2e7-de4d-4255-9797-e8c7f644bc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:65:48:01:e0:2e:f0:88:bc:ed:e3:2a:72:1a:9c:ff:ca:
         d9:fb:4f:1b:5b:06:03:21:cc:57:e8:2b:2a:ed:a7:ef:73:c4:
         bf:89:9b:bd:bc:51:4f:26:c3:8a:4d:f8:91:c5:82:b5:b0:1c:
         40:74:70:20:67:6c:e2:e8:da:65:58:dc:76:42:e2:86:95:8c:
         7f:45:a0:00:cd:1d:d9:4f:a1:61:16:7a:36:b2:ce:16:86:02:
         e7:aa:ce:96:1e:fe:5a:ec:e4:fb:24:b4:21:2f:7f:2c:d0:6b:
         48:6b:d7:e1:c9:67:d9:3c:8a:7f:5e:dc:24:67:4a:db:46:6c:
         ba:e3:ac:36:fc:05:c9:82:04:8e:e9:71:77:0c:0a:09:ff:56:
         19:17:83:db:ef:3a:d9:03:b4:c1:eb:45:de:e5:f8:26:61:6f:
         61:69:d4:27:ed:ca:1c:1b:b2:dc:2a:8d:66:a3:dd:57:ab:8b:
         eb:24:0d:44:0d:84:40:45:3c:ad:0b:eb:99:10:e3:4c:1f:f6:
         70:ec:78:24:13:1e:ed:1f:6a:12:5e:b5:ba:30:3a:f0:4d:09:
         47:f7:68:3b:9f:1c:3f:e2:8e:9c:09:8b:29:f0:51:f1:d7:ac:
         84:01:7d:f9:9c:3d:1c:11:5b:e4:6c:72:5e:27:4a:d8:e0:40:
         f4:b7:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:45 2025 by rpki-client