Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
File:                     9a1b7496-b916-471e-be55-e180367c84ee.roa (raw, json)
Hash identifier:          WU/AYho8jCvHxRVXN53BxARQy2mJOeabP9J2fdkgC6w=
Subject key identifier:   EC:AB:83:DC:D9:FA:EF:D0:2B:FE:8C:EF:9E:EB:6F:44:28:B8:69:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E0CDE6B978D6ED2072D25B7BFA0F9408A746FDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa
Signing time:             Mon 30 Jun 2025 15:10:26 +0000
ROA not before:           Mon 30 Jun 2025 15:10:26 +0000
ROA not after:            Mon 04 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:de:6b:97:8d:6e:d2:07:2d:25:b7:bf:a0:f9:40:8a:74:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 30 15:10:26 2025 GMT
            Not After : Aug  4 23:59:59 2025 GMT
        Subject: serialNumber=79cce20c36f1b3d2aca74ea1edcb5e869d0b0c9b57bb3272f97ac61d9f3defc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:e4:16:66:51:35:c9:f9:be:ba:d1:1d:f4:
                    bf:9b:06:a0:40:50:da:99:7b:4d:04:a3:fb:34:e5:
                    a2:05:ae:c1:8d:32:a9:4c:c9:d6:b2:a5:6e:57:78:
                    1b:35:be:3f:d3:8f:69:86:36:f2:9e:6a:d1:4b:9b:
                    a3:dd:d7:e0:6b:1c:6b:69:b6:d4:b5:40:87:c6:f8:
                    5a:bd:b5:23:3e:9c:1c:91:d7:fd:7c:4f:48:59:c1:
                    53:5e:c5:77:7c:85:fe:9d:b5:36:8c:42:da:c4:d9:
                    9f:27:46:e1:30:1e:76:9d:be:8c:34:0f:86:a8:bb:
                    21:97:46:a1:a7:4e:10:56:f7:41:03:c1:70:dd:87:
                    5c:d3:19:2d:63:9c:d6:19:d4:1f:64:71:a3:2d:ae:
                    1b:78:00:6c:9c:15:54:ca:90:2b:57:78:21:97:20:
                    1c:d8:8e:d6:9f:05:46:37:29:d4:ac:d7:7a:19:ac:
                    b2:41:84:a1:31:fa:53:62:b6:fd:68:c4:83:10:a2:
                    63:e3:e0:7e:62:fa:cf:0f:91:35:4d:a9:dc:25:fe:
                    b1:f0:41:da:5b:6c:93:5d:ea:ac:c8:1a:bc:cc:50:
                    df:84:63:66:e8:b8:8f:2a:09:bf:60:8d:d3:26:4b:
                    d3:f8:d1:ad:8b:b3:62:4e:d8:08:35:04:ea:56:10:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:83:DC:D9:FA:EF:D0:2B:FE:8C:EF:9E:EB:6F:44:28:B8:69:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a1b7496-b916-471e-be55-e180367c84ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:1b:68:4c:e2:93:c6:dd:9c:f7:a5:04:00:d9:04:ab:cb:c2:
         5b:de:67:b9:05:4d:53:10:58:68:2c:47:7f:ef:05:34:55:a1:
         6f:09:68:4f:0d:a8:e1:b8:09:65:8c:35:34:7f:18:fa:f6:25:
         19:31:9c:0c:e9:02:a1:af:ec:af:ee:ce:b9:fd:f6:bd:0c:32:
         d4:72:21:8d:90:0f:e7:48:30:e4:94:ae:91:30:d5:66:b2:f3:
         8d:f0:73:3f:43:0b:f8:59:69:ad:b5:31:58:03:fb:46:e0:98:
         c0:40:81:dd:5e:85:11:c9:fb:8c:63:33:30:8d:99:8e:32:bb:
         d7:8c:11:c0:34:04:34:47:91:6f:41:2c:98:03:f0:a3:fb:38:
         b4:5d:01:b6:4a:33:a9:30:76:df:78:15:84:b6:93:df:d2:99:
         af:86:37:ee:f6:52:3c:cd:2a:8e:e3:98:6c:5c:0e:eb:75:12:
         f6:d3:65:1c:e3:0c:f8:d5:30:62:11:b2:79:6d:a6:d1:8f:8d:
         96:3c:83:d6:48:2e:b8:d4:42:5e:aa:83:5b:87:c4:04:80:cf:
         2d:c2:2e:26:68:f5:72:7e:8b:bf:a1:b1:4e:57:47:fd:69:c4:
         84:9b:77:38:32:cf:f7:4f:bf:d6:03:ab:7d:e9:f2:85:10:be:
         17:c4:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:02:56 2025 by rpki-client