Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
File:                     669641e2-6613-40c0-915f-0c45280a8d19.roa (raw, json)
Hash identifier:          20h5S94ONMRhQxaEa8DnZdEovO7OqFYOpJOrJUd+i6c=
Subject key identifier:   97:DE:73:8C:24:8B:ED:EE:4B:34:D9:76:1C:57:F3:41:E2:22:3E:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4881AB185A09B9D4475AC5BE6B7BE0B1F05E8A46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
Signing time:             Fri 09 May 2025 00:20:46 +0000
ROA not before:           Fri 09 May 2025 00:20:46 +0000
ROA not after:            Fri 13 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:ab:18:5a:09:b9:d4:47:5a:c5:be:6b:7b:e0:b1:f0:5e:8a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  9 00:20:46 2025 GMT
            Not After : Jun 13 23:59:59 2025 GMT
        Subject: serialNumber=ae615c870e9bf002480e5d7468356f11638fe3b0a1070495b051531810e7aa41, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:11:d8:f4:42:96:00:48:d6:e2:be:4e:b5:
                    b6:8a:92:61:d6:69:5a:d8:89:bb:a4:43:0e:90:f3:
                    51:52:d4:87:e5:81:61:55:35:d9:d4:67:0a:1e:32:
                    d3:48:97:d0:a8:0a:c5:6f:25:53:50:d1:a9:c9:3d:
                    d4:c7:e1:db:fc:0b:de:74:fd:00:dd:dc:8f:cd:6b:
                    bc:87:71:e5:a1:66:c4:78:a3:ca:b7:34:f7:d3:1a:
                    a8:a7:75:e8:0f:5b:df:82:99:9f:73:05:46:c0:42:
                    db:67:da:24:d2:ae:b4:f2:c7:bd:fb:b1:2d:eb:5e:
                    9f:6f:df:35:1b:00:6b:2c:45:8b:bb:37:ce:38:e6:
                    f7:00:65:63:e1:23:21:5f:08:b6:29:23:0e:0f:d9:
                    a6:bf:9b:e3:7b:58:e3:9c:51:77:77:8d:1a:85:fb:
                    c4:93:f2:01:fa:5a:52:38:4f:f9:15:74:46:ac:2c:
                    07:89:a5:02:98:31:63:50:14:bd:65:86:2e:59:15:
                    aa:98:7d:0b:24:83:e8:60:58:06:42:05:91:95:6b:
                    ab:45:37:56:14:70:57:8b:6e:60:0f:04:b7:eb:b2:
                    b2:8b:3c:81:b2:1f:cd:75:57:d2:98:bc:d4:2f:d6:
                    25:ec:7a:b1:7c:29:cd:ee:9d:96:6e:a6:45:b4:f3:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:73:8C:24:8B:ED:EE:4B:34:D9:76:1C:57:F3:41:E2:22:3E:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:5a:fc:5b:47:57:f6:56:f5:0f:9e:b1:9d:69:54:4b:3b:90:
         d0:ce:81:a9:fd:fb:4b:e6:cb:92:c6:c5:1a:f5:6d:34:71:4a:
         41:33:05:c8:03:4f:12:e3:b5:89:30:45:a6:12:ca:71:5f:1d:
         30:ab:27:95:51:79:66:94:e3:4c:d9:50:a3:14:cc:10:fd:a0:
         a5:5f:0d:53:a3:28:d1:21:df:12:6c:da:13:74:83:c9:7f:97:
         21:c4:d2:fa:fe:7a:4a:7b:58:52:26:dc:5a:6b:86:a7:3e:3e:
         8e:45:67:4e:da:1c:d3:f6:7c:a4:82:e5:95:22:81:9c:46:98:
         ef:f9:7f:45:a5:ac:e0:fa:98:77:81:77:e2:93:50:40:15:5c:
         ef:60:00:d2:38:63:e3:61:31:9b:23:cc:f5:1d:4a:25:a6:14:
         83:be:81:64:b7:d6:bb:59:20:de:fc:e1:21:01:36:78:c8:89:
         a6:f9:fe:51:b9:6e:fe:20:b5:6c:02:0e:8c:d3:0e:09:ea:00:
         9d:48:18:af:93:3d:e8:fa:33:99:77:11:fc:c7:7b:f7:5c:b3:
         bc:50:ff:2f:ba:be:92:f1:52:cb:69:7b:24:39:3f:af:83:51:
         5c:c4:72:31:cf:e1:fa:b6:24:ea:7d:ba:eb:b5:03:c9:58:89:
         29:9e:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:21:03 2025 by rpki-client