Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
File:                     24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa (raw, json)
Hash identifier:          YGnBBl/DW/Vn1NAV1sVjvRLnIVnNDGHsEnvCgyu0GXQ=
Subject key identifier:   FE:83:E8:22:9D:E8:45:FF:E9:E0:E5:4B:75:F8:34:34:47:81:77:D7
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       12940CD1883303A5465CF6B6531E2505868A5C5D
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa
Signing time:             Tue 20 May 2025 15:30:52 +0000
ROA not before:           Tue 20 May 2025 15:30:52 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:0c:d1:88:33:03:a5:46:5c:f6:b6:53:1e:25:05:86:8a:5c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: May 20 15:30:52 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=ea600d83c508f6bf75003a777fbe343ecc81a28dd246dd0b90e15d4a943aa29b, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:4b:7c:7f:65:63:67:71:11:a1:81:0e:c3:
                    ee:58:c3:10:76:1e:60:e2:88:d3:5e:24:66:1c:4e:
                    6e:c2:42:9e:4b:d1:29:ac:5e:ea:ec:88:1b:fe:c4:
                    56:3e:dd:57:fe:65:50:9f:07:1b:46:0c:13:ef:a3:
                    c2:77:53:f4:56:b7:1f:ac:7c:22:61:2a:19:3f:b8:
                    73:df:2c:f1:d3:0b:cd:57:89:93:1c:81:56:bd:00:
                    3b:46:ff:78:8f:cc:f4:09:7f:04:80:12:00:ad:27:
                    ac:cb:76:07:9e:79:d2:b5:25:23:cf:da:ed:35:0a:
                    b1:06:74:28:eb:71:63:8e:86:a7:87:d3:1e:9c:a5:
                    be:7c:84:c6:bf:21:77:7e:a0:7b:2c:ac:44:f2:4c:
                    52:15:cd:2b:ac:c6:c5:9d:ff:f2:44:a3:7c:9f:1e:
                    89:04:0e:68:de:98:a6:65:8e:d0:b0:08:3a:37:15:
                    af:51:8e:20:b8:b9:53:9c:6a:e7:2f:11:a0:b4:95:
                    58:e9:b1:8e:ef:73:cf:60:aa:c0:d6:c5:04:a3:65:
                    aa:77:49:6e:5e:5e:99:73:e1:ac:9a:b9:aa:91:2b:
                    22:65:b8:37:40:20:5e:dc:e0:ba:82:84:30:16:c8:
                    04:47:05:4a:98:a1:cb:51:63:b8:b8:2b:96:19:b2:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:E8:22:9D:E8:45:FF:E9:E0:E5:4B:75:F8:34:34:47:81:77:D7
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/24dfe680-d3e6-4d3d-8f28-ce2f99e02db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:00:53:44:90:16:82:f2:32:d2:df:f1:7d:1f:12:9d:ed:
         0a:58:0b:9d:27:8f:59:8f:4a:fc:fc:40:f9:a3:c3:bb:73:af:
         f8:12:52:43:51:b0:2a:28:ef:72:c9:63:38:04:09:88:5a:9d:
         96:ed:60:e4:1f:67:fa:9f:71:0d:b1:6c:80:4b:54:0e:bc:7b:
         74:25:95:45:77:3e:99:9e:2f:04:37:f8:63:f2:1f:28:c8:f9:
         ef:b2:08:96:cb:7c:93:c3:4c:86:64:bb:3c:3a:82:36:c2:27:
         a3:e7:48:e8:83:48:37:b6:3a:a3:c3:ff:ad:6e:ed:b7:a0:4c:
         37:f6:ec:ae:46:6f:44:ee:7a:9d:48:7a:15:a7:0b:ff:d4:86:
         a0:3f:6f:07:8e:07:ae:6a:20:7f:9b:98:5a:0f:26:51:d4:85:
         e4:31:00:ca:2d:fe:a3:13:13:3d:bf:52:68:dc:1b:77:35:88:
         b1:ad:fa:38:c2:27:b6:c5:d9:34:e5:95:12:c3:0c:43:2e:89:
         32:47:5d:c3:5e:77:c4:4f:0e:a4:4d:3c:79:c9:44:0a:f0:75:
         75:3b:f7:0a:94:1d:ef:16:60:5a:b7:bd:4b:f1:ca:ca:78:3f:
         d7:e0:a6:9d:49:6e:b4:0f:86:cc:36:13:b6:04:b6:c9:2c:4d:
         a9:42:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:55 2025 by rpki-client