Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa
File:                     17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa (raw, json)
Hash identifier:          u779d2ilictCSqvAKLQmcDLfE9p2uvDtNyaG+7vdDog=
Subject key identifier:   F6:95:04:0B:D2:A3:68:CA:21:F2:16:F8:28:08:D8:EB:2B:D7:2D:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       202FB922E183731AFB9FB05307D934142E7A6B6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa
Signing time:             Fri 08 Aug 2025 00:02:01 +0000
ROA not before:           Fri 08 Aug 2025 00:02:01 +0000
ROA not after:            Fri 12 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        165.113.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:b9:22:e1:83:73:1a:fb:9f:b0:53:07:d9:34:14:2e:7a:6b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:02:01 2025 GMT
            Not After : Sep 12 23:59:59 2025 GMT
        Subject: serialNumber=f927c6be1d59abc1bc6b1782c9b6e31c84925e91d5f83d165319b897931f5e96, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:0b:1d:eb:1f:af:2b:b6:e2:64:1c:19:17:
                    a2:6b:18:d5:db:68:4d:ff:8b:e5:a6:49:de:dd:61:
                    2b:de:40:6d:7b:4e:59:af:d1:6e:c6:b3:2c:1b:35:
                    0a:9e:fe:78:04:a4:ab:e3:43:62:88:8b:fe:f2:17:
                    00:27:42:48:ab:d0:ca:db:4c:6f:f5:fb:09:33:1e:
                    21:da:0b:06:da:81:5a:21:de:31:16:ea:92:53:92:
                    cd:74:f7:82:35:71:e7:fb:c8:1d:2d:bf:a8:79:66:
                    53:d3:0a:aa:89:37:25:88:47:b1:3c:a3:18:3c:5e:
                    4b:be:c7:b9:86:b2:8b:3a:6f:56:2b:b4:31:1a:4e:
                    c5:15:7a:bc:0d:c3:32:ec:ab:da:5c:c5:ca:4b:67:
                    31:9e:04:76:50:ab:c9:06:b9:39:ba:3c:fe:a6:50:
                    a4:6b:67:90:80:c3:7d:38:fa:b1:74:af:cf:29:cc:
                    95:6c:43:1c:ff:d3:23:d8:5a:06:fc:5c:60:a4:30:
                    d1:eb:ac:6b:c9:2c:2b:e8:b0:f8:8e:00:83:11:bb:
                    9a:b7:ea:60:9a:dd:3f:70:db:fa:d8:9f:09:4f:99:
                    35:70:74:1e:ba:04:1f:86:b1:79:85:b7:5e:17:a6:
                    5e:23:47:a9:3a:2b:cc:0f:be:d7:c9:e4:3c:33:13:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:04:0B:D2:A3:68:CA:21:F2:16:F8:28:08:D8:EB:2B:D7:2D:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a05282-c7fc-4bec-b3db-2b1e5d02f539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:87:c9:1a:2a:91:55:42:5b:5d:3c:72:d7:cc:d3:07:a9:63:
         ff:56:a6:38:5f:b0:ba:13:f6:64:f2:6c:23:b1:d4:56:0d:da:
         97:29:fc:35:1b:a7:a7:a3:a2:c1:f5:55:81:5d:5c:70:4c:e8:
         c9:19:d2:27:c0:54:f6:b5:79:fe:b5:ea:37:30:5d:42:98:7b:
         e0:a5:b7:93:39:47:eb:44:40:b5:f8:58:1f:e0:95:7e:2a:84:
         87:03:31:84:94:d7:51:a9:71:c2:63:ea:5b:95:ec:cd:0d:9c:
         41:48:68:a2:d8:3f:22:43:88:ce:cb:ba:8b:47:71:8e:16:b4:
         02:cf:83:16:fe:b6:1d:f2:60:ce:4d:10:99:48:cb:36:3c:88:
         7d:79:e2:08:5d:29:0f:f6:3b:35:08:93:bc:03:b0:6b:18:e4:
         f4:06:7b:b7:5f:cf:b4:e4:13:fd:b2:da:d5:d6:1a:68:dc:a5:
         47:65:d7:df:8c:eb:3f:ca:6f:87:a7:b6:4c:0a:0a:3b:78:bf:
         85:e3:d7:d3:8c:9b:1c:30:43:86:25:22:52:7a:ec:e8:ee:4a:
         98:03:9c:e3:29:28:1f:c8:db:51:26:4e:c2:e4:b8:03:82:71:
         ea:19:23:36:f3:30:dd:7c:f5:98:10:b6:3a:be:f3:54:4b:71:
         af:55:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:33 2025 by rpki-client