Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b42cb5f-7b5f-4b99-a5c4-d40f3ee3356a.roa
File:                     8b42cb5f-7b5f-4b99-a5c4-d40f3ee3356a.roa (raw, json)
Hash identifier:          k9Jp301AaG7l5MthhA5SzyH2+LHRzENrpoNzaeqyCFI=
Subject key identifier:   B8:C8:C9:3F:C1:83:E9:B6:E0:E3:BA:61:5F:9A:A0:6D:6D:7A:79:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F1DA468E300FD4974BD378F5949350D663E265F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b42cb5f-7b5f-4b99-a5c4-d40f3ee3356a.roa
Signing time:             Mon 23 Jun 2025 15:21:33 +0000
ROA not before:           Mon 23 Jun 2025 15:21:33 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.22.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1d:a4:68:e3:00:fd:49:74:bd:37:8f:59:49:35:0d:66:3e:26:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:21:33 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=313a307df9edc786b8c9b8836c6c99196631e44692582efb36d149901ef77b8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:7b:6d:52:44:29:c0:db:38:d0:a5:14:4f:
                    47:12:72:3a:47:fc:74:7f:95:97:c0:d9:a9:1f:d4:
                    2b:93:af:72:71:af:3f:ad:d8:58:6f:78:ef:0e:b2:
                    9b:58:8d:27:17:2f:eb:c8:4e:02:e4:be:bd:3f:77:
                    eb:03:3e:45:0e:8c:7e:0b:ab:d8:28:87:85:42:6a:
                    76:ad:a7:a7:22:54:fc:d5:88:7c:ba:98:8a:4c:05:
                    16:08:42:84:b2:cb:56:49:f9:8e:91:8c:df:50:61:
                    c2:a4:70:36:a7:2e:d3:9f:9f:87:97:50:34:0c:48:
                    9b:f5:f4:5e:71:1d:46:b2:00:fb:eb:a7:43:e9:d3:
                    4a:da:31:3c:89:e9:62:2d:d8:90:f7:f5:f6:5e:6b:
                    32:c6:1e:e0:2c:a1:59:ca:03:c9:d2:d2:ba:32:35:
                    c0:91:a5:ce:7f:b7:09:46:ea:7d:9c:ef:1a:fe:25:
                    18:f5:81:77:b1:11:23:9a:33:fd:68:62:45:9b:2c:
                    42:a8:be:a2:c0:3b:7c:f5:e1:6a:6b:53:93:c0:ae:
                    5a:66:14:2c:6b:71:f8:1f:9a:20:ce:26:d2:39:55:
                    bc:e3:2e:92:2b:dd:48:4a:c0:44:86:ee:4a:6b:a4:
                    3f:a7:0f:c8:d1:e3:3f:bf:74:51:40:37:d3:be:c3:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C8:C9:3F:C1:83:E9:B6:E0:E3:BA:61:5F:9A:A0:6D:6D:7A:79:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b42cb5f-7b5f-4b99-a5c4-d40f3ee3356a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:5b:fc:9e:6f:68:f9:93:ed:07:89:9f:c8:4f:14:47:cf:
         95:8b:56:35:21:41:9d:99:ad:38:e5:a2:a0:5a:2e:94:ec:ab:
         01:cc:1e:7a:e8:fe:71:a5:e9:d9:4a:6d:d1:68:18:8e:7e:a6:
         f8:b8:f1:e1:4f:26:fe:d9:fd:ab:65:ef:b3:8e:50:d1:f8:23:
         ce:80:82:93:36:87:a2:de:25:7e:dd:9d:69:18:14:92:f3:83:
         97:b7:c1:bc:d8:64:b9:b0:6e:74:af:fa:13:9a:c7:ab:f9:7a:
         75:7a:e3:47:13:cc:3e:d0:aa:e0:66:c8:96:9e:1b:d7:63:c5:
         71:e2:e8:e3:5b:be:65:a1:0a:71:3a:f8:9c:af:40:3b:5c:f9:
         b9:af:8f:ca:d1:bb:5a:86:6f:21:09:f4:e5:e0:a1:7b:81:90:
         6a:b2:db:c8:a6:46:45:36:1e:91:2b:ed:64:47:fc:86:69:02:
         85:58:98:be:ef:b1:4b:be:2d:70:e4:2d:16:7d:d4:17:e8:2a:
         05:1b:ad:8b:7c:54:da:2f:ab:22:eb:f7:5c:2c:f0:4f:b5:1f:
         f7:9f:ba:93:6b:d3:32:44:2e:03:97:e1:ed:15:18:db:ca:5b:
         7c:b8:bb:98:3e:c4:e0:ce:dd:e7:01:51:3f:de:40:53:4a:7c:
         0d:76:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:36 2025 by rpki-client