Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8380d874-2759-4ba1-806c-9326aa7dfe55.roa
File:                     8380d874-2759-4ba1-806c-9326aa7dfe55.roa (raw, json)
Hash identifier:          hUBaKLZlmnIEg4hi64bmGZ3yVV2h0xZvCel2Np3I5Jk=
Subject key identifier:   6E:36:0D:81:61:1B:4A:58:0C:C0:5D:20:47:FC:65:DA:94:31:B8:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7303CB915EE7A11DD38BC56A79EB80CBEABCCC5D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8380d874-2759-4ba1-806c-9326aa7dfe55.roa
Signing time:             Fri 27 Jun 2025 15:01:19 +0000
ROA not before:           Fri 27 Jun 2025 15:01:19 +0000
ROA not after:            Fri 01 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.17.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:cb:91:5e:e7:a1:1d:d3:8b:c5:6a:79:eb:80:cb:ea:bc:cc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 27 15:01:19 2025 GMT
            Not After : Aug  1 23:59:59 2025 GMT
        Subject: serialNumber=40e43de087fa6008053a04ef8db8e1a1f7510c8345fb3994e1be47a7ff399f5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:ef:87:a2:6d:1d:14:fa:15:e9:6f:16:1a:
                    1d:cc:d7:aa:af:a9:a5:97:5b:5b:6e:74:ec:cc:f0:
                    f8:dd:c9:37:f8:08:f9:6c:35:83:a9:1c:d3:3c:2a:
                    fa:8f:55:57:68:bd:d4:2e:dd:a5:d7:76:ed:59:cb:
                    ac:14:e3:1b:66:0f:c2:48:f8:1e:fe:ba:d0:cb:f2:
                    ac:31:96:ae:90:fa:2d:ab:45:74:ad:83:26:05:64:
                    ac:b9:2f:d6:ce:31:4d:5e:e7:32:59:e5:82:e2:e9:
                    7a:6a:0c:3c:9c:74:49:6d:3d:96:2d:ab:8d:fb:75:
                    1f:be:cc:25:ee:08:93:93:40:22:a2:af:5e:31:4e:
                    8d:32:4f:16:0a:0e:59:97:62:5e:d0:23:b1:a5:70:
                    33:30:27:15:a6:ec:e1:a5:cc:ca:25:9e:36:53:1b:
                    1c:05:eb:39:81:0f:dc:0a:38:13:8c:d8:e8:d2:85:
                    39:9a:07:00:07:04:48:ed:9b:3a:87:21:33:83:74:
                    15:b8:77:c6:c6:40:cb:e3:84:47:5d:a7:60:d0:04:
                    2a:62:33:1e:7e:5b:b5:33:20:ef:74:7b:07:fc:fe:
                    43:91:ba:de:9e:0f:2c:97:ba:0d:e3:7d:3f:7c:7a:
                    7e:8a:12:ac:4f:8a:8e:4d:00:65:af:7d:68:b9:14:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:0D:81:61:1B:4A:58:0C:C0:5D:20:47:FC:65:DA:94:31:B8:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8380d874-2759-4ba1-806c-9326aa7dfe55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d4:2a:5e:44:1a:bb:3a:f1:73:18:9a:92:c0:0b:71:af:b5:9d:
         9b:1c:d0:6e:37:a3:06:36:32:ca:96:00:45:e7:48:23:91:34:
         d1:e6:8a:44:3e:ca:63:2f:8c:8b:70:67:f5:05:f3:c5:9c:f8:
         28:5b:47:76:7c:3d:77:7c:8f:d5:72:db:68:3b:35:e1:a0:f3:
         c5:59:01:df:dc:b5:91:87:25:de:f7:83:fc:1f:90:d1:19:09:
         48:14:4b:b9:b4:42:61:b7:f8:b9:1d:bb:24:80:cc:71:2c:44:
         0b:6b:b6:0a:43:cf:68:9a:11:cd:76:48:d8:32:32:39:ba:ae:
         51:04:c7:60:77:4c:fc:ff:10:61:4e:0e:b2:c0:84:68:b2:a5:
         fa:bb:b6:f7:39:aa:42:73:69:99:bb:00:d4:ac:da:f4:ea:f6:
         88:a0:d1:17:05:91:bb:a8:12:1e:22:13:69:da:59:6b:67:5d:
         80:13:75:42:f8:0b:49:76:7f:99:f4:7f:b3:bd:69:8f:af:ea:
         c3:1f:a2:8a:ca:31:28:bd:44:08:30:45:03:99:4d:ac:25:c5:
         bc:5a:e1:3c:f2:c4:d5:5d:76:1f:8c:66:95:58:cb:d2:a2:b5:
         12:b2:e6:27:f0:d8:40:82:f0:2c:ba:48:0f:03:f5:d8:17:e0:
         9a:e9:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:10:57 2025 by rpki-client