Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa
File:                     783c511e-5fb0-4300-843c-c199f004156b.roa (raw, json)
Hash identifier:          skxp9SiXmIc/i5fz2dc/xp4BUv727Y/tL9ZKLq8RIQs=
Subject key identifier:   D4:FC:F6:61:68:B2:0B:16:5F:87:E9:18:AF:DF:80:2B:C4:E1:CD:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       532D4D6C91BD33ECD947C75FD2413347D30162CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa
Signing time:             Mon 11 Aug 2025 15:21:06 +0000
ROA not before:           Mon 11 Aug 2025 15:21:06 +0000
ROA not after:            Mon 15 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        168.203.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:4d:6c:91:bd:33:ec:d9:47:c7:5f:d2:41:33:47:d3:01:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 11 15:21:06 2025 GMT
            Not After : Sep 15 23:59:59 2025 GMT
        Subject: serialNumber=bee1a06a04fd8a0d13d206dc4b10759ad01f9e3f5efa9c9b62c7295645caa201, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:af:74:92:f3:a3:68:3e:4c:2b:b8:ed:39:
                    57:05:ed:b5:40:05:f2:3b:54:11:5e:dc:1c:6a:67:
                    6a:79:0f:94:0a:2d:f9:20:78:aa:9a:a0:a4:55:a9:
                    54:f3:1a:9e:93:fa:65:49:f9:b1:17:80:df:cf:04:
                    7e:3b:8a:e8:44:e5:03:a2:a3:15:ab:d1:9c:dd:bb:
                    ae:73:35:5c:0e:67:59:10:c6:75:cd:a9:d0:b2:80:
                    89:45:13:25:8b:e8:68:a4:e3:ec:ef:c6:16:a4:7c:
                    c3:3c:46:38:64:22:12:08:46:96:44:40:ed:86:f6:
                    3c:48:26:bb:76:bd:10:a1:e4:f3:a2:51:5f:01:90:
                    e3:d4:75:74:7b:43:7e:95:4f:44:4e:dc:4d:cc:18:
                    61:b1:97:9f:16:80:90:28:3d:6e:9c:a0:4d:27:eb:
                    ba:7c:a2:53:35:17:93:df:c4:67:f2:6a:60:00:a9:
                    39:12:c8:44:04:4b:1b:8c:3a:8b:bf:02:a7:d4:11:
                    b8:55:cb:b9:37:1e:3a:a9:50:58:d8:0e:54:bb:ee:
                    54:4e:21:76:7e:d8:f8:75:30:83:fa:d3:76:93:19:
                    db:69:ec:ea:26:30:a7:c3:ce:72:04:91:e0:3c:2b:
                    76:e4:ff:ae:b7:5c:28:01:1f:9f:a4:f9:87:19:1b:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FC:F6:61:68:B2:0B:16:5F:87:E9:18:AF:DF:80:2B:C4:E1:CD:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:84:a2:c6:d1:eb:73:99:bd:e8:83:c0:09:4d:22:b0:fb:
         b8:34:3f:98:4d:af:19:04:14:e6:27:59:68:57:a8:4b:62:bb:
         3a:04:15:80:38:0f:64:65:79:2f:61:75:60:77:3b:47:1d:73:
         c2:74:14:de:de:b9:f6:0c:7b:d2:d9:29:48:98:e3:96:ff:fb:
         14:53:41:f2:7c:51:c8:ad:2e:e2:f1:dd:5a:a6:9c:77:5d:72:
         af:07:67:49:14:13:c0:74:e8:f0:28:76:d7:3d:b0:46:40:34:
         2e:1a:98:ef:e8:69:3e:5e:00:45:9e:00:8d:cd:66:5c:3e:fb:
         58:dc:1f:1f:0f:17:d4:87:3e:03:ba:ce:ad:24:73:3a:10:84:
         61:eb:f7:a4:00:86:3b:72:6b:e1:fb:e4:4d:a6:5e:7d:a5:97:
         9e:66:e0:8a:e3:9c:a6:85:25:e8:36:82:91:17:64:d4:a8:e8:
         49:7d:98:de:3f:03:e1:8e:ac:86:f8:6d:75:28:1f:ae:9b:16:
         ae:63:3c:ef:8b:2b:ea:85:52:b3:60:63:0e:78:be:f6:bf:1b:
         1e:b7:17:65:73:a2:40:5d:c2:30:a2:56:e2:e6:a5:1a:01:4b:
         f9:82:2e:1b:d2:e7:9f:e1:14:36:c8:86:90:78:d0:2e:16:e4:
         66:a1:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:38 2025 by rpki-client