Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
File:                     fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa (raw, json)
Hash identifier:          oyOZg0Saky6aKNSQ8kOEShrYW0rwR7BYV0lc5VgDYuo=
Subject key identifier:   DE:E8:5F:EB:95:BE:34:82:40:50:48:AE:B9:D5:AF:33:7B:38:54:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B216D2B67C440BFF07C8149FBC2E21D1B0B1EC2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
Signing time:             Sat 14 Jun 2025 00:21:09 +0000
ROA not before:           Sat 14 Jun 2025 00:21:09 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        208.86.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:21:6d:2b:67:c4:40:bf:f0:7c:81:49:fb:c2:e2:1d:1b:0b:1e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 14 00:21:09 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=f12294e2bbb90a5f7becf0b0a235f8461be6d70039c5d1570b54b679b706e3fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:91:d4:1f:3b:34:ad:ed:e0:34:7e:1f:6c:
                    39:f1:0f:3f:92:35:16:6e:07:c9:95:bf:1e:e1:91:
                    fb:ba:b6:11:84:0f:65:d9:88:c9:9d:2c:95:72:47:
                    59:9a:12:17:e5:25:bb:c4:86:98:2e:da:4e:3f:9f:
                    02:55:1a:4c:40:ba:d8:00:c6:aa:17:4f:e0:a3:a7:
                    d2:63:0a:ed:6e:1b:c1:19:ba:64:4d:fb:f2:c4:8f:
                    3b:e6:c2:a2:f0:37:4b:3d:12:45:26:cc:90:80:70:
                    bb:73:75:be:19:7a:e7:21:25:30:63:95:63:2b:e3:
                    2a:fe:7f:3c:d0:9d:78:a8:81:ff:ab:08:71:5d:3d:
                    7d:5b:20:67:3a:30:95:35:fc:5f:2d:92:4c:a0:fd:
                    c0:f9:b1:44:87:63:fe:44:57:86:bb:43:ed:fb:db:
                    eb:6c:2b:07:81:2e:df:a4:23:d6:34:cc:09:b7:89:
                    16:c6:ec:f6:28:42:e8:7d:68:c9:b5:dd:82:ba:69:
                    4b:82:ed:52:82:d0:3f:b4:fb:9d:21:0a:54:21:45:
                    f4:67:e8:3a:3b:bd:bd:c3:20:5b:d5:dd:8d:13:6a:
                    5b:9d:e4:54:78:bd:02:3a:0f:3b:b5:0a:fb:e7:3a:
                    e6:40:ae:88:54:83:69:38:84:97:44:82:b5:9a:30:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:5F:EB:95:BE:34:82:40:50:48:AE:B9:D5:AF:33:7B:38:54:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:2d:bb:00:ae:59:76:72:82:2c:3b:b4:d0:c9:4f:57:c3:
         d6:bb:21:ef:50:0f:be:c6:b1:02:55:ad:53:3b:fd:06:bc:a3:
         b1:e1:5f:04:ec:bf:48:b0:e4:8a:85:25:ee:c8:18:52:da:06:
         28:c0:24:85:f5:1d:1f:d7:db:6e:58:b0:5a:81:1e:4d:b8:1f:
         1a:3f:b6:4a:d8:d9:db:4b:92:95:be:41:21:e9:f3:77:99:94:
         17:17:c2:4d:c4:49:59:ae:6f:de:fa:c2:73:ad:09:c2:4e:b3:
         92:4f:56:07:e0:07:d1:db:35:65:25:d2:3a:8a:b9:58:1f:e0:
         07:04:d2:4c:75:e7:ba:25:71:0d:25:b4:99:de:76:52:87:e8:
         27:61:5e:6b:09:50:12:75:0f:df:7b:22:62:90:68:5b:31:72:
         96:98:9a:73:94:b6:d2:5b:d3:da:cf:35:06:a8:0a:a2:77:9d:
         2f:a1:c9:5e:f5:2a:37:0d:ac:76:18:70:69:49:a4:68:5d:e8:
         0b:fd:eb:fa:59:55:1f:89:aa:ae:29:f6:ec:77:07:5e:0b:2f:
         34:a4:5f:7b:3f:c6:9c:f8:7a:44:67:70:4a:2c:1e:45:ea:16:
         1a:18:e6:a0:46:13:72:84:c2:3d:7d:1a:e7:fd:fc:2a:a2:65:
         6e:64:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:19:50 2025 by rpki-client