Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa
File:                     f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa (raw, json)
Hash identifier:          Om22p95fuxeLa0DGGaMpg8I38xHQvSY9A+I1QLLccjA=
Subject key identifier:   1B:10:69:7D:94:54:93:04:3A:EA:38:21:86:67:84:20:E2:76:F4:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70C3742CB496F4CEE48DA13912F151EFD91A7CEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa
Signing time:             Tue 08 Apr 2025 00:30:29 +0000
ROA not before:           Tue 08 Apr 2025 00:30:29 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.242.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c3:74:2c:b4:96:f4:ce:e4:8d:a1:39:12:f1:51:ef:d9:1a:7c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:30:29 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=fa8a8de90699f899cfb9d80bdc0e6d067e1e2306ccb5628640387596c2ea8692, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:b2:5a:1f:8d:7a:95:8c:93:33:2c:80:54:
                    23:78:84:3a:09:7f:d9:94:6f:2d:a6:ad:4a:8c:08:
                    2c:af:c6:62:b6:da:6e:e4:85:84:da:69:12:3d:a1:
                    51:ea:ea:02:40:a1:28:0d:bb:28:d7:8a:56:6c:42:
                    06:68:be:ba:c2:db:26:a8:25:bf:f3:10:2a:fd:e5:
                    72:80:0d:d7:92:20:76:6f:7a:62:a5:0e:77:4a:68:
                    9c:d9:d7:e2:47:52:17:e1:fd:57:ea:35:91:9c:dc:
                    60:93:4f:c9:29:d5:a4:4b:a5:f5:f6:6a:b7:cc:fd:
                    38:25:78:6f:9b:c0:50:51:38:11:33:96:23:c3:c9:
                    70:1a:56:e1:04:ea:58:79:e6:be:1a:ec:37:0a:25:
                    d5:7a:bc:89:fd:46:b4:78:57:dc:1f:e6:a9:72:06:
                    f5:49:fd:d7:f9:29:a7:28:9b:51:dd:80:ee:60:42:
                    57:ce:8f:29:52:be:62:7d:22:cf:38:ec:96:71:40:
                    8c:57:4a:8b:59:62:8e:b4:3f:80:c3:12:15:15:e9:
                    6a:2e:f3:3b:8c:d5:79:f5:ee:0c:23:00:88:2e:ed:
                    be:2a:ac:e1:06:c1:96:25:25:e7:ea:93:c5:3d:eb:
                    41:83:96:53:11:b0:01:68:22:69:e2:2c:42:3e:7e:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:10:69:7D:94:54:93:04:3A:EA:38:21:86:67:84:20:E2:76:F4:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:18:37:fc:0d:38:94:10:77:85:6d:af:89:80:5c:17:db:
         63:34:74:01:20:65:3a:16:b0:67:17:ed:96:77:3e:18:5c:d1:
         ce:7e:b2:bc:41:1d:da:98:ab:3f:ce:6c:7a:04:10:e5:58:54:
         b2:af:ca:69:1a:83:40:ba:6d:91:8d:37:40:46:7e:05:9e:45:
         fe:d2:7d:de:21:ca:27:04:1c:20:bf:06:f3:0d:1e:1e:ac:70:
         01:a1:dc:ae:8e:56:2c:10:54:a4:26:4e:98:04:2b:a3:7f:7d:
         1b:62:c2:0c:35:3f:d9:73:2d:7a:34:97:e3:03:1f:49:41:56:
         ed:f3:83:11:4a:29:31:16:3a:70:08:0d:c4:33:86:33:98:f0:
         b9:48:41:17:c1:5a:d4:9b:98:40:91:64:6a:43:cf:1e:01:a2:
         7d:f8:90:ca:e8:41:d6:70:06:63:89:6a:f1:d4:e1:7c:81:e2:
         fc:6b:e4:ae:25:d3:55:ea:ac:65:94:40:18:9d:ce:1e:06:a6:
         ff:d0:c2:cc:35:db:86:7d:ea:68:a3:39:d5:e7:32:e4:b8:15:
         16:b1:b3:e9:b9:26:dd:45:43:0b:dc:32:57:88:04:b6:8f:f7:
         b1:da:4b:b7:b8:0c:46:d3:94:51:74:4a:e6:60:bf:9e:4b:9e:
         df:ec:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:03:17 2025 by rpki-client