Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
File:                     8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa (raw, json)
Hash identifier:          yrAZKKOc5JZowtQzmBIU0X9QHxRVVY5wHZezsWCI6Ks=
Subject key identifier:   38:ED:5A:F1:F7:F1:33:72:E6:46:AA:F5:DA:98:70:AF:34:FF:4C:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F667E0116589C863A7BB17F65508CF3E0F42A80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
Signing time:             Mon 23 Jun 2025 15:02:58 +0000
ROA not before:           Mon 23 Jun 2025 15:02:58 +0000
ROA not after:            Mon 28 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        158.80.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:66:7e:01:16:58:9c:86:3a:7b:b1:7f:65:50:8c:f3:e0:f4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 23 15:02:58 2025 GMT
            Not After : Jul 28 23:59:59 2025 GMT
        Subject: serialNumber=d1cd9c15c83986632dfc20ea3946d473770690fbc25e3c4e922fbae83ae25670, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:4f:6c:3a:10:ee:7e:5d:44:ed:3a:99:6f:
                    b4:1d:33:bc:5e:25:ff:2f:81:18:2e:d2:6f:89:26:
                    7a:a7:ed:af:76:9f:c0:6a:97:f3:fd:74:9d:3a:a3:
                    3b:22:1b:d9:71:db:5d:dd:3b:10:6b:ab:67:4f:21:
                    68:58:22:d6:d3:54:bd:e7:3f:19:e9:15:07:6e:28:
                    c6:2a:e5:34:98:19:df:2b:13:63:8e:d3:75:00:b7:
                    ba:5c:dc:2a:bf:ce:93:9a:e1:ff:da:5c:c1:a9:d6:
                    94:64:3c:66:2b:e9:ab:d5:b8:f6:1e:cd:90:ce:3a:
                    7f:a5:65:0c:87:26:a1:4c:ba:0b:84:73:bc:12:86:
                    3f:07:a4:f6:32:42:8c:d3:77:49:5f:8e:96:ea:30:
                    6a:20:f3:ad:ed:2d:ca:01:d7:ed:f6:e8:45:9c:ce:
                    f7:fc:76:37:dd:ac:de:52:55:7a:94:33:07:b8:37:
                    0b:5d:8d:7d:0d:10:a5:15:21:17:5b:13:3c:ce:85:
                    4f:81:02:15:55:43:0c:09:c1:0b:2e:11:9c:cc:34:
                    ab:32:66:cb:90:89:9d:e7:9a:48:1a:a4:8c:4f:a1:
                    ef:a3:06:af:b6:1c:ad:3f:7e:df:1d:7b:a2:df:58:
                    f0:a1:ee:4d:c1:a6:cf:ee:1a:98:33:21:f0:6b:24:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:ED:5A:F1:F7:F1:33:72:E6:46:AA:F5:DA:98:70:AF:34:FF:4C:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c6:b0:aa:39:1b:e1:f0:41:51:75:8e:20:fd:67:74:ba:d6:84:
         5a:76:80:a5:e8:13:00:26:81:da:6d:b6:f7:bd:5d:a8:c8:8a:
         92:bc:95:8e:fb:ca:8c:01:61:cf:4d:f5:36:4f:7f:c8:9d:41:
         c9:8e:96:6d:fb:29:ea:ce:b0:a7:09:a3:8d:5f:9a:9d:5b:5b:
         d7:ef:e9:e5:b2:62:0a:6c:c6:9d:87:66:05:31:4a:73:91:56:
         1c:a6:cd:69:6b:a5:22:85:a7:b9:6c:67:8d:f8:4e:e3:2d:da:
         eb:0b:b1:68:15:ef:44:08:2c:bd:57:2d:57:a9:5d:df:b9:9e:
         53:af:ad:a3:60:a0:8f:c7:36:53:a9:6a:51:ba:21:c1:71:e8:
         b4:36:06:8e:cc:06:7c:06:8f:a1:b7:c5:93:23:53:fd:25:f4:
         ce:65:fc:12:12:a4:eb:55:27:0b:ab:7b:89:86:51:dd:73:4d:
         40:00:1c:83:ca:ce:f3:3e:0f:c4:7c:8b:1d:57:d1:18:23:35:
         6c:e5:ab:21:0d:c0:c8:cd:4c:42:c5:d4:1a:27:90:02:53:1c:
         b7:6d:04:b4:eb:98:42:d1:06:f5:50:b3:b7:57:f0:99:3c:22:
         3e:96:ba:e1:65:5f:61:da:2e:16:0a:7c:f7:41:74:eb:d7:ee:
         e4:17:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:23 2025 by rpki-client