Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa
File:                     4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa (raw, json)
Hash identifier:          JbSup5CemH89O4bhKWOErKgIKbV/1EcGAHZGgc7B2GQ=
Subject key identifier:   AA:91:0B:07:90:AD:D1:96:9F:C1:18:C6:A3:40:29:A3:DC:69:E1:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26C3AD7ECE8559E6BA7CA860DFF8BA0A275957F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa
Signing time:             Wed 13 Aug 2025 00:31:36 +0000
ROA not before:           Wed 13 Aug 2025 00:31:36 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:ad:7e:ce:85:59:e6:ba:7c:a8:60:df:f8:ba:0a:27:59:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:31:36 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=9bd5aae092bb1628452bdab7b2d43337a980aec419c453ffe5c6361b9738336c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:83:c0:8d:c1:7d:59:9b:45:d2:17:7a:f4:
                    d1:b7:6a:81:4b:03:da:06:bd:33:3f:c6:8d:b0:ce:
                    60:35:0e:ac:93:78:e6:e7:0d:c0:20:91:5b:0a:84:
                    a9:50:49:60:3b:18:a1:aa:d7:35:d0:05:37:d2:3e:
                    e9:a3:4f:2f:59:08:da:45:93:6a:ca:0e:1e:db:f4:
                    5b:87:8d:49:70:3b:f3:32:42:46:35:fa:37:ee:9d:
                    44:28:6a:20:e5:86:59:d0:ea:2d:20:88:f5:6b:86:
                    0d:bb:42:da:e3:a1:64:09:18:44:14:68:f7:81:8c:
                    82:ca:c6:c7:4d:58:0d:8b:a9:5a:3b:27:a5:ba:29:
                    45:8f:48:23:3a:72:56:68:9c:68:88:aa:de:5c:34:
                    09:55:44:01:fc:0a:9a:5b:4b:3e:9a:c7:76:30:ec:
                    7f:f4:3d:9a:db:d8:31:ff:ca:14:31:8f:1e:33:24:
                    6d:af:fb:16:a7:f4:cc:d3:db:82:8f:f5:3f:60:d2:
                    da:1a:de:84:14:8c:fe:01:f4:c3:fc:cf:1f:a6:80:
                    ee:ce:9c:5b:3e:a7:22:31:dc:c3:6c:e1:33:10:4b:
                    d9:fa:85:b5:b8:b3:85:95:d2:9b:d6:db:c7:3b:df:
                    75:95:84:77:1a:e1:10:a6:ac:2b:99:89:03:22:10:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:0B:07:90:AD:D1:96:9F:C1:18:C6:A3:40:29:A3:DC:69:E1:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:56:0f:2a:3d:4a:33:bf:01:56:48:9c:7c:7b:59:41:1f:ee:
         28:8a:38:73:d3:21:ed:4a:76:aa:ee:bb:36:7a:e6:1b:d6:ed:
         3e:81:8b:3f:d6:98:c3:8d:2b:4c:31:3c:f0:ba:0d:ff:60:d1:
         3a:15:d3:80:71:9a:e1:80:96:2f:e3:6b:c3:28:67:4c:ac:6b:
         ea:c4:e3:14:c1:ea:10:95:b0:c6:99:6c:d1:74:d1:4c:c4:8b:
         c9:be:27:ea:85:6a:4b:3c:a1:cc:36:13:5f:23:4b:3c:02:5b:
         af:15:bb:ed:4e:00:15:f1:ef:6d:61:ce:00:17:c7:91:35:a5:
         7a:cc:f8:45:d0:1b:16:d1:34:ba:dc:cb:1f:bd:82:5d:42:3b:
         6f:67:43:75:d2:4c:7f:1d:26:15:7e:75:03:68:3b:40:d2:34:
         10:5d:de:40:50:a3:69:ca:c9:e0:68:f0:b3:a1:16:47:e2:32:
         43:d8:06:9c:aa:51:52:a6:36:24:cd:ba:6e:13:9b:13:a8:de:
         16:20:8b:f6:0e:07:0b:d2:f3:f9:88:8d:01:1c:97:b1:2c:47:
         23:00:3c:3a:dd:64:9a:14:94:e6:36:d5:08:1d:cb:7a:04:19:
         93:41:6b:60:e7:d8:f2:4a:45:e1:db:85:2d:58:fb:22:0b:59:
         8d:e1:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:43 2025 by rpki-client