Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6df93fb2-679f-4247-81c7-fd108c812488.roa
File:                     6df93fb2-679f-4247-81c7-fd108c812488.roa (raw, json)
Hash identifier:          u8QFtXlz48lnvuxPYqIsfYYaHr5am8cImrGCQUnj+08=
Subject key identifier:   E9:1B:94:12:9B:6E:25:68:32:9E:F5:CC:09:1B:88:D2:A1:B0:C6:05
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       658373343C242DE5ACECAF606420CD69CD1334AD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6df93fb2-679f-4247-81c7-fd108c812488.roa
Signing time:             Thu 05 Jun 2025 14:39:06 +0000
ROA not before:           Thu 05 Jun 2025 14:39:06 +0000
ROA not after:            Thu 10 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:73:34:3c:24:2d:e5:ac:ec:af:60:64:20:cd:69:cd:13:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jun  5 14:39:06 2025 GMT
            Not After : Jul 10 23:59:59 2025 GMT
        Subject: serialNumber=6568cfc23c6d748e8c9e227193b2f2655137941a3d689521eab734b31e6f431e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:59:be:bc:6d:94:b2:71:af:96:ac:96:6c:71:
                    48:1e:a8:27:b7:d2:78:a2:3c:7c:1c:21:7c:25:fc:
                    82:5b:47:99:57:3f:98:71:dc:59:f9:e4:d9:a6:11:
                    73:1c:a8:99:60:8b:b8:20:d6:b7:5a:5c:18:af:11:
                    50:4e:e0:5c:bc:d9:2f:bb:23:1c:06:ab:39:ac:1f:
                    c1:d9:5e:4d:32:ba:69:ad:5e:0e:6c:61:4d:dc:4b:
                    d8:53:a0:7f:1d:03:35:fe:77:7f:59:1e:57:10:ad:
                    89:cf:8d:5d:0d:ce:d6:fa:a5:2d:29:b0:a9:ea:be:
                    86:00:d7:8e:a6:a0:85:d1:9c:bb:b2:97:40:98:7e:
                    44:6c:06:4b:4c:37:6c:59:fe:87:00:9f:21:3e:58:
                    22:d2:20:57:38:5d:aa:85:30:14:36:22:83:d5:00:
                    fe:98:a7:86:89:2e:eb:8c:d7:fa:64:fd:9b:a6:0b:
                    fe:f6:c0:92:93:a1:ee:f6:e9:cb:0d:f8:f6:82:6e:
                    ca:ad:46:6e:56:68:51:8d:13:b1:40:5e:5e:a3:2c:
                    7b:60:66:c9:52:12:dd:3d:42:09:a2:f9:40:be:b0:
                    ac:07:37:3e:41:51:bf:ba:3c:6a:bb:90:ea:8c:cb:
                    26:de:4f:3e:2f:ed:5a:f3:68:d6:90:32:b1:35:40:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1B:94:12:9B:6E:25:68:32:9E:F5:CC:09:1B:88:D2:A1:B0:C6:05
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6df93fb2-679f-4247-81c7-fd108c812488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:ec:71:9f:ea:6c:e1:7a:b1:4c:f0:1a:ea:1f:fb:83:64:
         f6:8b:9c:7a:c8:aa:e0:f1:6c:89:07:de:1d:0b:77:44:97:dd:
         8f:7c:3b:99:b9:88:43:c4:0b:68:14:0d:b9:6d:83:fc:b6:52:
         1d:0d:a6:6b:db:11:b7:63:51:58:2c:a4:33:f8:c5:93:25:31:
         d3:0b:94:67:aa:8f:0c:29:bf:a2:4f:8a:74:ff:99:c6:aa:71:
         10:52:94:e8:ad:de:20:b9:eb:a0:10:07:02:ca:c6:3e:90:36:
         4c:2b:ac:a2:8e:6c:35:7b:93:36:ef:b0:39:ae:ba:03:84:a6:
         fc:a5:5a:33:89:a9:b0:f3:ac:c0:1c:da:9f:de:a9:52:da:fb:
         0b:14:89:cc:f9:73:f0:53:b8:78:80:c2:98:9e:b1:85:d9:67:
         39:df:aa:5e:76:6d:53:31:7c:41:7d:32:e8:02:19:ce:3f:6f:
         6d:76:ad:08:cc:c4:5f:f3:d2:af:6a:6e:34:f1:17:c0:b9:ad:
         18:63:20:af:ec:12:0d:bf:49:4d:b3:f5:8a:26:8e:b7:9c:d4:
         1c:46:78:64:aa:46:0e:06:6b:98:7f:ab:08:97:05:d4:17:a2:
         a6:8e:b5:17:31:2c:86:4d:5d:87:e4:0e:3d:a5:96:49:0e:de:
         78:f7:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:02:06 2025 by rpki-client