Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0edc2521-a53e-4b05-b534-8b3be9d9f8ef.roa
File:                     0edc2521-a53e-4b05-b534-8b3be9d9f8ef.roa (raw, json)
Hash identifier:          nYj0cC4SxAgee6V5WRupb6ogv7J3joltGUnFpnmUcow=
Subject key identifier:   2E:0F:DA:72:DE:F2:D8:69:F7:EB:ED:37:9F:E4:55:EA:7F:5E:D2:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       735806A68E045E0B68BA70ED76C642B5D0528CDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0edc2521-a53e-4b05-b534-8b3be9d9f8ef.roa
Signing time:             Wed 18 Jun 2025 00:20:21 +0000
ROA not before:           Wed 18 Jun 2025 00:20:21 +0000
ROA not after:            Wed 23 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:58:06:a6:8e:04:5e:0b:68:ba:70:ed:76:c6:42:b5:d0:52:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 18 00:20:21 2025 GMT
            Not After : Jul 23 23:59:59 2025 GMT
        Subject: serialNumber=ae6cd7d36fa7403e05b91bffa042f8771615c1d5a1afcd4abef648eca1d34b25, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f5:85:33:d5:08:3a:e9:13:47:73:55:53:
                    e8:f5:27:bb:79:42:42:23:76:6c:e9:b5:2e:a7:b8:
                    00:3f:9a:ed:0f:bd:19:ba:10:c3:33:16:2b:ba:6f:
                    c8:3c:f0:96:fd:2b:67:30:8d:7b:ac:09:f0:c6:fd:
                    5b:55:8a:5e:61:35:be:a9:e7:42:f7:44:06:3c:ca:
                    1e:b4:1b:ea:31:f2:73:28:3d:5c:2f:b5:1d:0c:53:
                    cb:d2:58:89:86:b6:29:93:cf:69:90:10:ba:8b:bd:
                    70:69:e8:ae:0f:67:6f:bd:e4:96:16:fd:4a:38:ba:
                    71:aa:de:63:dd:4a:2c:7d:72:48:eb:b1:d4:83:94:
                    20:6b:35:cf:6c:b4:7d:29:f9:5c:47:34:14:7b:33:
                    a2:fc:37:3c:9e:d2:f7:af:d2:0f:9a:9a:ff:98:45:
                    a3:de:bb:f3:91:a8:76:b1:fa:22:7f:24:7a:ae:a6:
                    8f:9d:dc:ef:03:a1:ad:99:fe:81:c7:b8:13:fe:ca:
                    b6:77:15:d3:50:9e:21:b6:8f:f9:ba:6c:ef:14:2d:
                    14:7e:92:7c:fd:16:b6:83:f5:a2:16:b6:40:8e:d6:
                    72:b8:35:26:60:6a:16:80:6e:14:88:b8:c1:bf:e3:
                    06:b3:03:7f:3b:5e:2b:7c:5d:25:40:32:b3:90:83:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0F:DA:72:DE:F2:D8:69:F7:EB:ED:37:9F:E4:55:EA:7F:5E:D2:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0edc2521-a53e-4b05-b534-8b3be9d9f8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:36:d3:30:84:cf:1f:ae:36:b1:46:9a:d4:01:9e:04:b9:
         06:91:5d:1b:a3:91:be:95:17:0e:ad:d1:fa:e6:7f:f8:37:27:
         79:c4:c5:6c:a6:77:04:ec:7e:af:db:64:0f:b7:d9:76:0c:25:
         ec:05:f4:e1:11:ff:4e:23:39:16:4f:aa:20:b2:6f:4e:6c:6e:
         b5:fa:1c:be:1d:ef:4c:4b:83:e0:15:09:4b:d5:f1:06:ee:89:
         34:7f:17:d3:4b:d3:ab:6e:37:59:46:15:fc:f2:31:e7:18:c8:
         a1:28:42:fd:87:9c:23:70:dc:b2:02:7e:e7:77:a8:d1:d8:44:
         55:df:ed:a1:06:44:6a:2c:e8:69:a1:90:58:96:84:de:f4:25:
         3e:03:86:90:77:83:7b:9e:90:c4:ee:fa:ae:bb:35:ed:a9:85:
         a7:6b:4c:2e:b3:9c:de:a7:90:d4:1e:d4:02:4d:c4:94:53:f4:
         c9:b2:da:07:5f:02:45:cd:04:86:a0:79:49:49:f5:aa:8a:bf:
         e1:fc:8d:6a:c2:45:6c:fe:2e:6a:9e:90:7a:93:6d:d6:1d:92:
         69:d8:26:30:ee:97:35:62:5d:55:71:4c:49:59:84:ea:88:1e:
         eb:1b:4e:fc:8f:a9:25:ea:6e:23:4a:e2:10:89:ea:6a:09:dd:
         21:07:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:54:02 2025 by rpki-client