Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa
File:                     19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa (raw, json)
Hash identifier:          w8kAETbAZQv6tO7uCOfW4aLpu+dpG6VLGlomdYZUQ/A=
Subject key identifier:   5E:E5:FC:24:D6:FB:88:F1:43:77:97:0D:00:59:76:94:61:90:96:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5647ECAC8E1926B1760809070EA84FC0C8C8F72D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa
Signing time:             Fri 15 Aug 2025 00:31:17 +0000
ROA not before:           Fri 15 Aug 2025 00:31:17 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.141.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:47:ec:ac:8e:19:26:b1:76:08:09:07:0e:a8:4f:c0:c8:c8:f7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 15 00:31:17 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=ec776c71c89f119a1c1cb280478b0b3535f3d98cc87628787da6721ccaae843e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:d3:a4:18:96:0c:58:1d:4e:be:70:a9:20:
                    33:56:6c:bf:d9:d5:d6:68:9d:60:5b:47:3e:97:e0:
                    c6:49:78:44:18:42:13:9f:d5:f1:c7:94:be:1d:52:
                    39:c1:1e:cb:20:f3:8e:ba:5e:ef:2a:be:11:e0:6d:
                    4c:14:17:d6:28:42:46:49:d6:a3:92:03:65:fe:aa:
                    e2:7f:e4:6d:cd:4e:50:b8:be:bf:5f:26:fc:36:5d:
                    c8:1b:ea:06:f5:ef:9e:d9:bc:71:f8:e3:44:29:1d:
                    62:cf:2e:2f:95:43:d3:f5:fc:c8:bb:0a:f3:80:24:
                    17:58:a4:0e:79:bd:2c:df:cd:40:9a:1a:a0:c4:9c:
                    91:5c:3d:f0:5b:27:6f:40:7d:3f:c8:ec:32:98:d4:
                    c9:92:10:cb:db:2c:95:a5:86:ab:b9:ff:f4:b2:49:
                    2d:b7:63:16:ec:86:ac:fc:8b:68:c5:dd:80:5a:41:
                    12:8b:1b:3a:d7:a1:f7:98:c8:0b:71:a8:8a:4a:df:
                    10:26:8b:dd:8a:40:19:69:f5:85:13:90:7f:22:83:
                    5d:97:e3:3b:b0:34:9e:a5:5d:b0:d4:ca:44:74:a7:
                    51:77:ed:6a:c6:88:7e:5b:e3:e5:11:78:a8:27:d1:
                    ba:24:56:25:f4:1c:54:62:3f:25:0c:18:52:5a:de:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E5:FC:24:D6:FB:88:F1:43:77:97:0D:00:59:76:94:61:90:96:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a1a2b3-5255-4f02-abc5-65db9a79bc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:29:34:ad:dc:50:c4:81:77:34:71:52:b1:a2:c9:cb:e4:5d:
         c7:62:e9:7a:2e:83:87:b3:e2:63:17:af:ba:94:7c:cd:9c:1c:
         a4:2c:2a:7a:30:06:5e:64:66:3e:56:b3:18:70:ce:7e:77:f7:
         b1:2c:20:09:b8:63:92:2c:b0:14:2d:df:63:93:3a:cd:e3:94:
         a0:56:a6:8c:5b:1b:5f:b5:f4:a9:07:45:ef:8f:3d:ac:40:cf:
         8f:04:b4:cf:93:a5:24:f8:92:e8:64:64:1b:fe:8a:c4:dd:3e:
         3e:34:a0:fb:71:48:ab:7b:21:fd:c4:9f:9d:39:c0:75:9f:ab:
         a1:d1:dc:78:f1:ff:07:08:b6:e5:d5:d4:00:59:06:6b:10:21:
         d8:2b:6f:17:68:fb:2e:36:63:eb:99:58:b2:b9:ed:f6:29:6c:
         6a:bd:e4:d5:9c:f0:7e:db:df:2c:63:50:5b:18:8d:bc:19:b9:
         52:db:21:ea:5b:94:2b:9f:98:e4:dd:10:6d:d5:36:ba:5c:e0:
         73:c2:e1:9b:f2:7e:ef:cf:52:d0:8d:77:0d:69:05:cd:97:9f:
         b9:73:49:7f:11:df:f1:96:43:e4:9b:20:02:30:59:47:c9:73:
         00:9e:87:f5:ca:08:e7:4e:40:f8:fc:d2:8f:81:55:72:da:c1:
         66:63:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:39 2025 by rpki-client