Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa
File:                     49e7f049-4165-46be-93c5-a7a2d7f454dd.roa (raw, json)
Hash identifier:          zcLD7dOsFzN9zlSEm3vb8nKRBKK3aYcNZhFJ1iRvQfk=
Subject key identifier:   53:06:AD:6B:BC:78:22:E3:3B:07:A5:CC:AD:EC:F7:D0:63:8C:D5:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53606CD1317ECF66D215DAB925E43F15AE7A17B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa
Signing time:             Mon 18 Aug 2025 15:21:23 +0000
ROA not before:           Mon 18 Aug 2025 15:21:23 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:60:6c:d1:31:7e:cf:66:d2:15:da:b9:25:e4:3f:15:ae:7a:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:21:23 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=5ea410ff21d58a6794e7f748d1cb06572ac08be4743b9ad68a68bef8ddba2948, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:99:2a:26:f6:18:17:7e:75:ac:d9:30:e4:
                    bf:a2:16:97:bd:41:43:e7:e4:a0:b5:ed:e3:81:bf:
                    06:04:60:b2:d1:b7:32:4b:e5:d2:bd:48:af:7d:0e:
                    f5:a1:bf:56:9c:59:20:f9:1a:41:71:96:70:33:3c:
                    ed:af:fc:b4:a6:51:02:67:6f:a9:d8:1c:38:47:9c:
                    f9:02:b0:59:37:99:3c:8f:d0:ff:58:22:53:4d:00:
                    63:2c:13:08:97:f3:57:f3:3e:df:32:13:e9:9a:70:
                    d7:b6:e4:93:74:33:bb:a0:0e:5d:f2:01:13:15:fb:
                    ee:42:40:d4:88:06:86:c4:51:ef:9c:66:23:c3:67:
                    9f:70:6f:0a:c5:1a:2b:24:6c:00:71:5d:e5:10:e0:
                    6a:49:cd:53:eb:b0:37:9b:f0:5d:b3:4e:42:2f:22:
                    9c:68:d7:a0:f4:6c:63:72:f0:f4:46:b6:75:a2:6f:
                    70:fb:3e:1b:66:77:9e:2a:6e:af:fe:90:da:f4:43:
                    06:cb:a3:7f:60:69:36:4c:c5:4c:e1:12:a5:84:89:
                    e3:40:91:e3:01:20:12:6d:75:73:03:18:48:f6:37:
                    1f:32:88:ae:be:d9:0b:6d:08:9d:c2:43:01:cf:18:
                    ca:89:ec:b0:61:5e:4c:4b:8e:e7:d7:a2:78:b4:31:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:AD:6B:BC:78:22:E3:3B:07:A5:CC:AD:EC:F7:D0:63:8C:D5:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49e7f049-4165-46be-93c5-a7a2d7f454dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:38:62:10:52:22:19:8c:f7:a5:40:de:43:74:2d:d0:32:
         db:7a:03:84:99:6d:7f:eb:26:eb:0b:48:c7:eb:ac:40:b1:28:
         c6:5d:87:53:2d:70:50:1a:19:00:50:91:dc:c0:60:89:fc:f6:
         07:cb:d7:2d:46:b9:b6:6c:ba:90:07:3d:89:fa:19:87:8d:b3:
         f5:62:0b:63:1a:02:d7:95:d9:2a:3e:23:ac:8e:fb:7b:83:f0:
         42:27:40:34:80:c5:cb:c2:f1:b9:00:f1:91:a2:0a:90:b5:aa:
         40:c7:28:fc:22:90:02:09:0f:96:04:c4:ed:85:f8:be:d6:20:
         20:0f:93:d1:45:ce:be:c4:43:1e:0c:ec:9e:4e:5c:98:c7:43:
         83:4f:63:7a:ba:14:5c:41:c7:d7:2c:73:e8:e5:1f:4c:ad:db:
         97:3e:b8:b0:6e:7e:e6:65:8c:2f:ea:5e:dd:53:b8:bd:c2:06:
         f3:90:83:81:2d:2c:b8:31:4b:fe:ea:4f:01:6c:e5:e3:af:2c:
         a9:7c:a8:5b:a8:c2:cc:cb:05:ae:2c:25:36:4b:43:cd:cd:8e:
         8e:b0:85:c0:cf:0a:60:31:74:3a:2b:6e:5f:ec:20:e9:bf:dc:
         c3:3e:56:51:e4:ff:39:03:1b:eb:ac:0c:c1:0e:c7:7d:c4:ee:
         55:fb:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:24:46 2025 by rpki-client