Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b43fb05-693f-46c0-9be3-ab992fa4cf3f.roa
File:                     9b43fb05-693f-46c0-9be3-ab992fa4cf3f.roa (raw, json)
Hash identifier:          VB3Gab8So2/JaG0jwpdCt01ELt7TVgxI1kd0zlFm0J0=
Subject key identifier:   0D:0B:55:9A:C4:8C:3E:A5:AD:46:89:FB:DD:7A:F8:B0:C7:82:FA:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36B368F329D1E42D6DF4FB53D7FD6E4458F2F3FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b43fb05-693f-46c0-9be3-ab992fa4cf3f.roa
Signing time:             Wed 13 Aug 2025 00:01:07 +0000
ROA not before:           Wed 13 Aug 2025 00:01:07 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b3:68:f3:29:d1:e4:2d:6d:f4:fb:53:d7:fd:6e:44:58:f2:f3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:01:07 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=064d570701a12f708b04ba9fcf3b31bde2c6fced888330ff7c76894ed83efc0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:67:60:ad:cd:e6:04:f9:d5:7d:6a:c5:21:
                    52:17:6d:54:72:cb:3f:fe:13:e3:d8:ad:1f:4f:a3:
                    4b:c3:24:bf:2d:78:2a:e4:16:27:d3:17:8e:35:04:
                    0b:e2:96:87:46:76:b1:03:eb:4a:dd:f5:17:50:ae:
                    83:2d:07:0c:0c:8a:8d:c2:98:18:7a:fc:74:23:c3:
                    4b:b0:69:59:4e:d8:e8:cd:75:82:b4:47:d6:a4:71:
                    e2:38:e0:ba:5a:c4:b1:44:7a:22:97:3a:69:ae:44:
                    27:cc:69:5c:21:68:dc:10:0d:9e:90:9e:6f:6b:b9:
                    21:33:7e:9e:f7:75:45:2d:06:2e:4b:3c:9c:b6:81:
                    18:9a:e6:b8:e8:72:0e:4c:85:7c:8d:e4:0f:3a:98:
                    c4:25:23:65:28:cf:18:f8:15:8b:11:07:4c:e6:0c:
                    1b:85:34:3d:86:c6:55:eb:c6:59:da:d6:b2:01:6e:
                    a4:b8:2d:56:e6:55:16:b6:fc:f7:53:19:5f:b4:ec:
                    58:d9:81:ee:bf:8a:5a:1c:23:2d:44:d7:38:f8:fb:
                    f4:54:1b:1f:d4:8f:91:43:18:9b:86:ac:ce:62:4a:
                    95:2e:d8:de:2c:1c:19:93:82:85:d4:31:10:a9:69:
                    ad:c3:a2:72:fb:85:25:12:31:62:b4:95:aa:15:a4:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:55:9A:C4:8C:3E:A5:AD:46:89:FB:DD:7A:F8:B0:C7:82:FA:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b43fb05-693f-46c0-9be3-ab992fa4cf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:c1:7e:6d:22:71:a3:cb:c7:3d:97:1d:04:17:fd:ac:58:25:
         f1:47:98:25:3d:54:00:42:1d:fc:5d:1f:37:f1:0d:23:41:ee:
         26:11:1a:7f:6f:65:0b:d4:17:5e:c2:50:8f:d1:09:78:58:ae:
         fc:b7:89:e2:64:8f:70:d9:c1:fc:d2:8d:78:9d:92:c7:43:20:
         0a:4d:35:9a:85:74:9f:c6:a7:ff:86:df:55:9c:57:20:ab:ea:
         0a:db:a6:2f:a0:83:05:b1:d0:4d:aa:c8:a7:ad:9d:53:7e:0f:
         78:f3:4a:c8:c6:e4:18:14:14:86:0a:13:23:99:42:8f:37:a9:
         4d:1d:aa:ec:31:3d:9d:b3:d4:f6:b5:7f:e6:1b:3c:e1:3a:9e:
         83:67:29:57:5a:df:18:59:ff:18:4c:89:ab:58:a1:a1:5b:4a:
         d0:af:35:ff:3a:b6:1a:13:da:6b:2a:44:a7:a5:94:8f:3b:7b:
         95:13:21:30:87:5a:c6:2d:14:0d:c2:5a:9a:6c:61:c1:58:42:
         37:09:e3:5b:24:39:31:b3:eb:54:6a:0d:e5:2f:8d:d0:15:21:
         a5:ac:5d:dd:0c:e1:09:cd:12:98:1c:ca:56:94:95:36:b8:14:
         da:2d:e3:62:e8:b4:9b:b6:d8:29:1c:a9:ce:ea:0c:37:e7:8f:
         96:8e:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:13 2025 by rpki-client