Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa
File:                     b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (raw, json)
Hash identifier:          d+kYzQcOO5jPBwkKjqz7EwWWevdQWPr5Wy6uupT/xtI=
Subject key identifier:   9C:54:59:66:4D:E1:43:56:E8:72:AB:73:21:F2:42:65:3E:E8:5E:7D
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       13A346FDCDD883D9C4D6D3C023954D7F3D18962E
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa
Signing time:             Sat 14 Jun 2025 00:10:12 +0000
ROA not before:           Sat 14 Jun 2025 00:10:12 +0000
ROA not after:            Sat 19 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        198.41.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a3:46:fd:cd:d8:83:d9:c4:d6:d3:c0:23:95:4d:7f:3d:18:96:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Jun 14 00:10:12 2025 GMT
            Not After : Jul 19 23:59:59 2025 GMT
        Subject: serialNumber=3f055e698394c19a97ce2f0daf2fa4226841f0f8647864a5f136d966e5ca7ede, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:15:16:b6:f9:df:96:26:19:80:9e:e6:1f:
                    b4:03:d6:cb:71:02:ce:f7:db:6d:60:54:cb:d8:d1:
                    7c:4b:03:ae:2b:ad:23:99:03:8f:42:31:b3:d2:b0:
                    50:da:36:8b:26:10:7f:a3:ca:ce:1e:0f:fc:59:e3:
                    1b:4c:9d:b5:be:3e:72:ec:d8:4f:09:2d:89:f0:f9:
                    b4:85:75:bd:2e:95:c5:3d:cd:a9:40:af:e4:d8:1f:
                    0e:17:5b:5a:48:43:97:17:a5:1f:81:31:6a:c1:1b:
                    5c:ed:af:69:80:95:f6:72:fb:ba:6c:56:16:19:ec:
                    9b:e4:3e:8b:32:ae:05:21:8f:76:5c:03:48:09:e8:
                    25:cf:d3:90:06:6a:44:84:b9:f8:f0:b7:4e:8b:33:
                    77:b0:a7:e4:1c:0e:b1:2d:62:66:d4:ec:df:56:91:
                    02:9d:5a:a7:b4:93:4f:c1:8e:e6:3e:fb:e1:9b:54:
                    36:1c:66:d1:97:ff:11:1e:95:26:00:f4:19:c6:ef:
                    f4:f1:fd:bf:8a:40:33:c6:82:ca:53:d6:44:74:65:
                    c8:51:f3:99:4d:b5:3d:d0:73:5f:88:33:24:5c:7f:
                    08:59:23:56:85:1c:d6:f0:1a:2d:ee:c4:b2:55:ac:
                    8d:d7:e2:6d:84:36:08:3d:60:64:8f:d8:70:14:ba:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:59:66:4D:E1:43:56:E8:72:AB:73:21:F2:42:65:3E:E8:5E:7D
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:9d:a0:ec:5f:41:d0:9f:6f:d9:c8:a3:06:99:85:5f:21:
         5e:aa:69:c8:6f:0d:c2:d1:9c:02:ee:e5:b6:b7:bf:0d:f1:a4:
         f9:c9:94:77:11:f4:3a:35:29:71:c7:63:a7:65:ef:72:8e:43:
         2e:74:b9:7e:b6:a6:43:4a:c8:00:46:40:d8:8b:82:c6:3e:48:
         66:7b:71:40:de:4f:da:ed:93:e2:58:a5:f0:cf:97:60:66:fd:
         f8:cf:f7:5e:2e:d8:cf:26:fe:c2:9a:c2:a0:7b:80:e5:3f:9f:
         6d:4c:5b:fe:c8:55:1d:7b:23:b3:c1:6b:78:d4:19:47:91:ae:
         21:8b:f8:83:50:9e:87:89:db:72:3d:a1:ad:18:bc:9e:24:ca:
         77:1e:e5:9c:78:39:d3:b2:e2:6f:51:af:94:4f:29:d2:1c:06:
         c2:85:4b:c5:e4:e1:52:e5:2d:08:d3:6d:e4:6b:19:06:bb:92:
         6c:ce:ac:79:03:b3:99:35:ec:72:27:33:53:42:76:24:e9:99:
         ab:53:6c:d5:b4:3b:a3:ff:29:d2:c4:55:fa:93:36:b1:34:b5:
         68:95:f2:47:88:a3:51:6a:a3:fd:1e:f8:07:3a:76:ea:f0:68:
         6f:8a:94:b2:a6:4d:11:bc:66:36:30:4c:5e:64:f6:82:44:2d:
         90:6b:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:42 2025 by rpki-client