Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
File:                     9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa (raw, json)
Hash identifier:          R8FEmBk0jWIaUXb6uCrrsNvqcaJIZSx9XyhDzgw4PVY=
Subject key identifier:   02:C8:9F:C4:0E:9A:65:A9:6C:C3:B2:D3:1A:45:2F:FB:57:53:A0:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29905F5D8507D92FFB59DBFB5A355DCF38EB0BF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
Signing time:             Sat 16 Aug 2025 00:01:29 +0000
ROA not before:           Sat 16 Aug 2025 00:01:29 +0000
ROA not after:            Sat 20 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.128.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:90:5f:5d:85:07:d9:2f:fb:59:db:fb:5a:35:5d:cf:38:eb:0b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 16 00:01:29 2025 GMT
            Not After : Sep 20 23:59:59 2025 GMT
        Subject: serialNumber=1e23fc7be2e43d20d17229379be11de57ead2912f428eed4f1078cf765c5c5b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:3c:c1:0c:de:4c:9b:c5:cb:f1:44:82:1e:
                    8c:ac:a3:2d:ff:9a:03:bc:7d:e1:73:3d:6d:c3:eb:
                    a8:67:b0:2d:2f:63:f2:1d:d9:4f:54:1d:5b:81:36:
                    bb:65:18:50:8c:ff:54:a6:a6:9e:c5:a7:3c:be:96:
                    a6:79:07:46:d3:70:1e:ca:72:82:d6:1b:64:6b:cd:
                    87:bb:d5:44:43:2a:65:b0:6f:18:1d:fb:53:80:39:
                    8c:db:a6:fd:39:80:35:15:77:7e:b6:5b:1c:4e:ff:
                    00:6c:48:7f:5b:86:07:31:c5:75:28:8d:2d:c3:64:
                    0c:23:1c:9a:7b:b8:be:a6:95:45:95:45:14:d6:44:
                    bf:50:1b:cc:d6:d8:5a:d9:05:fe:31:9b:16:17:b5:
                    0a:67:86:8a:ac:ef:3e:ac:6c:c6:92:5c:b0:64:75:
                    f3:ef:6b:1d:a4:c2:bf:13:21:94:d4:42:54:38:6d:
                    16:24:47:e5:91:e2:ce:f1:41:9d:8b:da:e7:c1:3c:
                    5c:d3:14:a2:26:cf:57:1c:2a:bb:e4:db:d9:ac:6e:
                    9b:1e:7f:6c:20:1c:64:f3:fa:8c:6d:6f:c4:51:3a:
                    22:0d:3a:37:40:7a:86:fd:6a:26:a6:f1:1d:d9:9e:
                    d3:c9:76:9c:34:67:b8:a2:89:08:8a:af:3f:44:ef:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:9F:C4:0E:9A:65:A9:6C:C3:B2:D3:1A:45:2F:FB:57:53:A0:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:45:ee:99:ef:c0:ef:cf:a6:1c:23:d7:1b:3f:6d:68:9f:
         47:03:35:c6:5d:83:00:d0:4f:f8:7f:9f:bf:fe:4d:5c:0d:c2:
         1d:5a:18:3a:3c:31:98:e6:4e:18:4f:f3:14:ad:53:ae:d9:d5:
         f9:c2:cb:87:cd:63:63:d9:93:75:3d:16:41:df:f2:ba:73:71:
         28:91:52:05:d5:da:71:68:65:4d:33:45:a6:ea:6e:3e:7d:90:
         19:e1:82:0d:96:c3:94:a9:fa:67:7a:d6:13:17:d0:b4:a2:40:
         a4:c0:7f:6b:e6:38:84:98:3f:94:10:8d:6a:76:9c:a8:de:5c:
         90:a9:51:0b:6b:d0:9d:f6:4b:ca:d2:a3:0f:d5:f9:c8:cb:73:
         dc:9b:17:15:57:29:a4:29:8b:5d:b2:6f:67:01:7c:2e:26:50:
         3a:15:b6:40:70:2e:9c:f6:82:ca:ac:47:53:15:30:f8:e1:c8:
         a3:0e:8d:da:ef:35:12:e7:d8:36:2c:51:d4:09:1d:af:32:53:
         d9:4c:c6:82:59:9a:c1:46:0b:58:80:70:80:31:62:82:1d:32:
         e1:39:07:07:18:ff:80:11:4d:35:25:91:9e:14:9e:ea:5e:21:
         b7:9d:b4:e8:b4:b9:a9:7c:2c:8b:b7:40:1a:39:ec:a5:2f:b9:
         01:19:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:48:15 2025 by rpki-client