Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa
File:                     f15603e2-1081-4c05-adfa-05ce585182e4.roa (raw, json)
Hash identifier:          tMSBFJtdanDz8o7NzixyUZxZ55GHkyLIiCEYn3BucN8=
Subject key identifier:   7F:AD:6B:74:AD:2A:30:0E:5F:9C:D1:CD:2C:5B:A1:E1:11:65:77:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19B9A3BCB328C9AE9FDCC27B098A2389889393DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa
Signing time:             Tue 03 Jun 2025 00:21:50 +0000
ROA not before:           Tue 03 Jun 2025 00:21:50 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b9:a3:bc:b3:28:c9:ae:9f:dc:c2:7b:09:8a:23:89:88:93:93:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  3 00:21:50 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=9dc58d4056d7d3c8a3e1df99b0e2b7d9d9d9e887fdd8680b371d9e72df528387, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:13:05:9d:a5:bc:fb:f5:2b:14:b4:2c:e8:
                    87:fe:e0:d5:48:c2:3c:02:6f:5b:1e:be:ab:7f:b1:
                    1a:87:11:f5:df:f2:f4:4c:c5:4f:38:e7:18:70:d0:
                    d4:2a:4e:fe:cf:f6:16:a0:6b:73:41:7d:47:45:6a:
                    f8:6b:e9:df:e3:6b:0e:e1:3d:1b:46:7f:a9:bc:e7:
                    ae:f0:ba:a2:ab:5c:b7:d9:39:66:e6:d2:ea:9f:8e:
                    d5:a3:53:88:41:8e:01:b9:f8:1c:dc:28:9b:a2:cb:
                    85:e2:c8:2c:8d:96:4c:18:37:05:11:18:48:79:6f:
                    eb:9d:e8:61:d5:a6:63:5d:c0:0a:7c:bc:4c:38:2d:
                    97:a0:f1:bc:93:4d:73:9d:26:5d:13:cf:03:cc:bd:
                    e2:b4:57:8b:c6:e1:aa:15:b7:fb:f2:9f:b1:e4:b2:
                    f4:1f:8b:d3:47:ae:25:68:f3:26:f0:9b:b9:e6:ec:
                    03:2e:30:d6:1c:85:fb:96:37:6b:db:0c:1a:3a:d5:
                    ff:fd:6d:ad:81:ff:b1:e1:95:f6:a6:8d:9a:de:a7:
                    e2:71:11:67:df:98:06:60:3d:6e:0b:96:74:01:7f:
                    b3:5b:19:90:c7:97:8b:56:65:c4:c0:c2:61:b1:dd:
                    a1:05:25:b7:4b:86:f9:8e:79:f3:5c:01:af:8f:50:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AD:6B:74:AD:2A:30:0E:5F:9C:D1:CD:2C:5B:A1:E1:11:65:77:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f15603e2-1081-4c05-adfa-05ce585182e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:44:de:63:bf:07:cf:76:10:3a:97:72:d2:95:60:37:7d:
         04:c4:17:8d:80:b6:74:02:9c:1c:a3:47:aa:3b:c1:0b:d0:d5:
         5d:a0:1b:14:ed:c7:3a:d2:68:5b:b9:31:9d:6e:44:c6:b8:26:
         d8:22:a2:77:37:85:a0:3d:85:51:d4:f9:19:11:3d:38:f2:65:
         b5:a7:9d:ed:7d:7b:75:87:78:7e:4f:dd:c1:9b:41:9f:cb:94:
         4e:91:9f:27:d6:bb:03:95:ac:ac:ae:ac:5c:30:63:8a:15:29:
         c0:5a:6a:55:c9:d4:cb:ad:24:c3:45:77:ea:45:d6:2e:d9:30:
         99:9c:68:94:45:35:a1:1b:cb:d1:fc:4e:b9:35:f9:8f:8f:2b:
         ad:c8:91:9f:e9:e1:48:aa:a4:9d:e0:4a:e8:f3:16:e3:d0:da:
         a4:dd:e4:cb:5b:fb:32:5f:0f:1e:00:1b:fb:94:2f:fc:61:dd:
         81:74:ba:da:fb:d9:b2:ad:de:1c:ce:53:2e:ce:be:86:b3:80:
         e8:5e:1d:9d:67:f6:b7:a0:4b:5c:d1:ec:57:74:86:d5:d9:5b:
         fa:d3:7b:f6:b3:e8:5b:41:95:73:1b:5f:38:3f:8c:d7:70:e0:
         1e:df:07:3d:2b:73:f0:19:84:88:05:47:86:62:d1:b2:10:56:
         72:99:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:25 2025 by rpki-client