Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6e15d2-9bc0-465a-abc0-9a96615bc918.roa
File:                     2b6e15d2-9bc0-465a-abc0-9a96615bc918.roa (raw, json)
Hash identifier:          qBSvExJqC2RKWJQTHsotalqVtYwmb5BUppMvzvArRlE=
Subject key identifier:   C9:95:26:14:F3:63:2C:23:ED:BC:82:6A:28:A6:DF:0F:F7:84:B1:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       518DB28E6AE3C994C7F6D1B16A1B180209887F0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6e15d2-9bc0-465a-abc0-9a96615bc918.roa
Signing time:             Sat 16 Aug 2025 00:31:10 +0000
ROA not before:           Sat 16 Aug 2025 00:31:10 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.34.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:b2:8e:6a:e3:c9:94:c7:f6:d1:b1:6a:1b:18:02:09:88:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:31:10 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=792b2a4d07f056fee8d650bd625162b7b4fde1e1dafd3f1c7209797d2f029a08, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:68:86:01:ee:f1:e7:f3:c1:d6:8d:2d:1b:
                    9c:55:97:08:e4:5b:79:01:dd:fc:af:c1:ff:49:6e:
                    f0:8d:29:49:e1:92:33:52:93:7d:56:3b:99:06:7f:
                    71:3b:16:d9:9f:61:e8:8f:bc:4a:ff:ba:3f:94:ae:
                    3a:de:53:d3:4c:f3:10:6e:af:42:97:19:67:4f:81:
                    e4:54:ae:57:08:d8:02:3b:32:b4:29:44:f9:b1:88:
                    9f:27:da:ec:1a:62:eb:47:da:8e:f0:e6:66:5c:e8:
                    77:12:1d:3e:b1:cd:70:47:b7:b1:24:8f:5d:3a:36:
                    7b:6d:e4:f2:8b:69:8d:69:7e:b0:75:6c:fc:67:ab:
                    2f:ab:81:4c:6a:c9:c0:4e:34:13:52:f6:60:f4:06:
                    f4:39:dc:40:84:39:2e:49:44:9c:8f:f8:b6:7d:b3:
                    92:be:c6:75:71:81:c4:19:73:51:fd:45:5d:58:45:
                    34:24:5e:dd:56:9d:be:a8:a8:70:2e:68:d4:38:e2:
                    ea:4d:aa:34:05:f4:6b:30:63:8a:78:5c:b4:71:58:
                    c2:5f:4e:c3:be:ff:b4:d1:c0:9b:5c:27:8c:e8:9c:
                    2b:32:8b:a7:a6:09:de:6b:8c:99:5a:8c:89:25:89:
                    b8:9b:20:fa:2a:03:18:24:24:e5:16:1c:dc:35:e4:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:26:14:F3:63:2C:23:ED:BC:82:6A:28:A6:DF:0F:F7:84:B1:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b6e15d2-9bc0-465a-abc0-9a96615bc918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.34.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:c7:25:00:d3:f5:35:59:6b:38:44:e7:70:0a:7e:36:e2:
         6f:77:eb:aa:3b:c0:ec:b3:dc:61:a2:fb:f5:ff:b3:6f:1a:e0:
         e1:66:b3:27:e1:d1:22:d0:b8:e5:14:18:40:ee:36:31:00:ca:
         30:69:61:86:1a:78:fb:30:0a:c3:b3:47:6d:e5:97:74:9e:51:
         07:a1:e0:f1:6c:51:39:34:fc:48:ed:e5:3e:19:8a:a3:5e:06:
         06:ad:de:27:97:11:4a:c9:24:9d:a4:d9:5d:eb:70:18:b4:3a:
         3c:0e:00:e9:a6:14:10:82:51:7b:8b:bf:f7:82:b3:21:91:32:
         60:a2:60:0a:6f:12:15:5d:e6:13:f6:68:ef:fe:ec:2e:b4:78:
         cf:d0:13:51:6d:d4:23:98:c2:19:21:f8:bb:3d:0e:34:0b:32:
         15:2f:33:b6:f0:a6:85:09:27:d0:87:09:e1:05:98:37:97:89:
         e7:e6:8d:25:07:b3:67:98:19:21:d2:3c:00:47:bc:ea:6d:e0:
         27:63:6a:72:34:62:eb:17:98:3a:5e:af:ab:23:53:bb:47:a6:
         af:d6:de:0e:5a:e7:b6:c8:93:d0:dc:9c:ef:dc:fe:a1:b2:2f:
         b4:34:13:fa:25:2c:9f:93:fb:16:7d:bd:ae:48:78:8a:c0:c8:
         9d:da:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:17 2025 by rpki-client