Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
File:                     82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa (raw, json)
Hash identifier:          9JWBD3I1CJNs4zwQLCL2RCpgOw0/oLjHf5HRLgtLogc=
Subject key identifier:   CF:03:9B:CC:C6:1B:EF:60:22:71:58:DF:41:12:73:F6:D0:7E:CE:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74AA2D75CDDBE6B2D5379F04D6C1517A3C3E0D70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
Signing time:             Sat 21 Jun 2025 00:11:51 +0000
ROA not before:           Sat 21 Jun 2025 00:11:51 +0000
ROA not after:            Sat 26 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        162.250.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:aa:2d:75:cd:db:e6:b2:d5:37:9f:04:d6:c1:51:7a:3c:3e:0d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 21 00:11:51 2025 GMT
            Not After : Jul 26 23:59:59 2025 GMT
        Subject: serialNumber=678a02f801fd442ce8e5112a8110002a0d1cc0e13aff71fc4e0e618a0acae2f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:4a:11:46:03:ec:c4:39:ef:40:ee:cd:b1:
                    9e:3a:66:6f:2b:49:c6:b3:ea:cd:f6:1f:64:22:79:
                    1c:64:e3:f8:5b:ef:39:00:76:62:0c:b8:c5:73:ff:
                    a0:7d:d1:68:1a:92:71:68:e2:29:95:a3:e3:01:2e:
                    af:91:26:af:ef:9a:f8:f0:a9:26:17:75:06:23:f4:
                    26:6c:6d:02:8e:43:42:60:71:b0:2d:c5:cc:04:60:
                    89:82:f4:40:b9:e5:9c:c9:67:0c:65:aa:d4:64:cc:
                    2e:35:a9:35:a0:ac:97:f8:eb:49:3d:a8:36:fc:c5:
                    b1:81:f7:80:b3:26:38:fd:a1:8e:99:b3:0d:70:13:
                    b9:15:eb:28:0c:53:09:78:b1:66:13:31:45:a2:86:
                    6f:54:5e:8f:e9:78:dc:30:36:28:95:94:21:40:74:
                    56:8c:27:fa:3d:22:66:52:aa:6d:c5:17:d5:c1:c2:
                    bf:1f:10:94:1b:7f:41:af:6f:36:9b:52:93:f9:ae:
                    e9:8d:e3:0d:9e:54:e7:33:f5:92:1a:04:d6:36:48:
                    51:63:82:9b:94:09:fa:ae:eb:22:c6:d4:24:6f:e7:
                    4b:07:87:2f:8c:4e:63:b4:47:99:fe:e0:0a:ac:bb:
                    99:73:31:31:db:5d:21:a4:98:4f:67:c3:df:fe:d2:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:9B:CC:C6:1B:EF:60:22:71:58:DF:41:12:73:F6:D0:7E:CE:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:12:f0:d8:00:49:ce:0c:0f:b6:ba:4c:83:2c:e7:8f:b6:
         bf:25:ad:cd:71:d5:84:8e:94:1b:63:25:ae:bd:9c:dc:c8:a3:
         73:b1:f0:c8:56:a1:8b:86:ee:05:01:1e:22:95:21:82:89:48:
         cd:1e:83:82:d4:c4:3d:83:82:4e:ff:05:24:6a:ce:fa:f7:ed:
         18:0f:8c:7a:e8:25:52:fd:b0:95:cf:b9:93:f4:21:67:79:d7:
         ec:9f:fc:ea:79:b3:27:a3:77:d3:38:02:9f:a6:6f:32:76:68:
         88:30:e0:65:07:08:41:db:15:ef:22:23:c7:67:36:c1:15:ca:
         58:61:3b:d1:b6:41:01:d6:e0:f3:f1:77:b2:d9:ac:9e:b3:9e:
         8d:c5:b4:38:3e:de:68:0e:d9:9d:e3:f5:98:f7:43:11:90:be:
         5b:e5:84:65:07:4a:8b:a5:67:96:9c:b2:91:fd:10:85:de:76:
         48:fd:f1:fb:2c:e6:6c:21:d0:c6:95:b8:df:ac:f1:4b:ef:df:
         7f:c6:61:47:75:64:86:dd:d5:82:cd:d5:e1:da:37:e7:3c:7c:
         f7:e4:5d:be:f2:a5:11:d6:c3:59:e8:c1:8e:ac:24:5f:23:9f:
         51:37:28:4f:9f:b2:3d:9c:05:94:72:08:30:ab:3a:91:ee:c7:
         90:50:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:05:24 2025 by rpki-client