Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93a0c741-7418-4bec-b756-5e9c9c71d787.roa
File:                     93a0c741-7418-4bec-b756-5e9c9c71d787.roa (raw, json)
Hash identifier:          pDVgz+U1ilN+CnuEXo6MuPDsT94aba8NpdDRj5tebNM=
Subject key identifier:   2A:BE:DB:96:BF:DD:4E:E5:AA:0B:BB:95:F9:05:78:43:22:77:EA:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       023E1CFEED9D3DB54A730787A2B8AF332424AEE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93a0c741-7418-4bec-b756-5e9c9c71d787.roa
Signing time:             Wed 07 May 2025 00:41:53 +0000
ROA not before:           Wed 07 May 2025 00:41:53 +0000
ROA not after:            Wed 11 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.19.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:1c:fe:ed:9d:3d:b5:4a:73:07:87:a2:b8:af:33:24:24:ae:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  7 00:41:53 2025 GMT
            Not After : Jun 11 23:59:59 2025 GMT
        Subject: serialNumber=4cf366d501fcd14783d98f8676a946430a35251cd8b674dcfde16b90f483dff1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:2e:ff:78:4a:df:b9:80:61:e6:5e:ad:5a:
                    b7:c7:bb:2f:bb:7d:73:10:a0:b7:5d:a2:fa:ea:a9:
                    f7:5a:35:1d:27:9a:fc:54:f5:94:1c:a7:91:c1:86:
                    4b:4e:c3:bd:69:0f:d5:1a:c8:ac:b2:6e:c5:87:fb:
                    a2:0d:29:9b:27:4f:29:37:25:03:64:4c:19:5d:a9:
                    53:b1:2e:88:5b:21:bf:99:73:e4:6d:f2:41:4e:e6:
                    44:be:69:52:e4:36:21:2d:cf:2e:b9:b3:a2:7c:ed:
                    9d:71:bb:f4:ef:05:4f:dc:86:ac:8f:c7:bf:67:b0:
                    06:bf:0b:0e:6c:4d:2a:2e:dc:6d:90:0e:89:b6:b1:
                    74:b5:92:09:98:73:13:3b:df:e4:87:58:f4:50:c4:
                    2d:2e:d6:0b:df:97:4c:48:e3:45:60:2b:0b:40:77:
                    28:74:31:94:61:46:f3:bb:75:18:cd:3e:6f:86:47:
                    dc:98:48:e1:bc:15:ab:69:cf:d8:b8:d9:06:8b:0e:
                    64:66:56:4a:9d:d1:75:44:f5:0d:ab:d3:51:d2:6a:
                    92:13:67:ac:c2:da:cb:0f:75:b2:a4:b2:41:8f:79:
                    a4:b3:6e:23:49:87:04:fa:50:30:56:9b:18:38:97:
                    e5:2f:03:73:fd:07:95:44:56:5f:85:a4:57:66:50:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:DB:96:BF:DD:4E:E5:AA:0B:BB:95:F9:05:78:43:22:77:EA:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93a0c741-7418-4bec-b756-5e9c9c71d787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:64:5a:fc:38:9d:62:e1:86:dc:15:e0:a4:98:61:0f:80:
         d8:8f:1b:38:94:9b:11:13:ea:de:04:2e:7b:e4:87:bf:00:a9:
         f1:f8:2c:c4:a5:68:42:7a:04:b0:b2:5c:3b:dd:48:eb:f1:87:
         5b:ab:7c:b1:70:03:48:6e:fe:e9:e4:0a:f3:02:14:31:23:38:
         5b:39:d1:8a:8f:89:69:71:f5:6d:6e:54:14:13:05:f7:92:71:
         be:f2:4f:9e:8d:2b:56:d0:ff:bf:58:35:cd:00:0e:41:7b:37:
         1a:99:5b:62:52:f3:e0:a1:81:8d:5c:6c:8f:6b:f5:f1:d4:4d:
         d1:d9:d0:b6:a2:e6:75:dc:dc:f8:78:e6:36:91:e6:17:b3:59:
         bd:f0:09:2f:9f:14:12:44:15:57:d6:6b:5b:65:d8:af:6e:85:
         3d:a0:77:b2:9b:2a:b0:aa:36:bc:23:e0:3f:21:18:ec:e3:16:
         a2:e1:03:29:b4:43:43:2c:b3:b9:8b:75:8c:16:7f:fe:a0:dc:
         d0:c7:e6:bd:76:b1:7a:f9:5e:ff:d6:5c:01:2a:46:b0:87:34:
         9c:6e:4a:13:f6:50:0c:c5:b7:17:6d:95:67:e3:49:2e:93:55:
         8f:72:6b:f4:39:6f:3a:16:f2:ab:b6:37:e8:54:a6:1a:e2:6a:
         e3:24:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:07:42 2025 by rpki-client