Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5cdf3e-e28d-4b15-b4de-7265437592d0.roa
File:                     9f5cdf3e-e28d-4b15-b4de-7265437592d0.roa (raw, json)
Hash identifier:          ZOt6TkfXp2TyvXc7eR1BftwaNK7X7sDhfWLhmsl2NMc=
Subject key identifier:   2F:E1:B6:CC:6B:E5:69:C6:70:5F:53:5A:69:70:4B:24:1B:6D:6A:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       399E3031DE230A4B7AD818C9DDA59DD8F2D0F15C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5cdf3e-e28d-4b15-b4de-7265437592d0.roa
Signing time:             Wed 25 Jun 2025 00:10:15 +0000
ROA not before:           Wed 25 Jun 2025 00:10:15 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9e:30:31:de:23:0a:4b:7a:d8:18:c9:dd:a5:9d:d8:f2:d0:f1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 25 00:10:15 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=a39994f48bb5ae10982c2b58fe198122c9cc12146758ef647e74af996ba2636d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:69:9d:0a:29:4d:b5:d7:32:61:75:f5:6c:
                    09:a0:29:3e:2f:45:a9:2d:db:a9:a2:1c:8c:0f:df:
                    c6:dc:6d:a8:03:ff:b8:18:98:59:0a:6a:4c:c9:e5:
                    44:2e:b2:06:2b:7f:2a:a0:4b:ce:a9:da:7e:23:e2:
                    cf:b4:9d:f2:32:e6:f7:34:b1:68:63:81:57:c6:38:
                    79:16:43:e9:46:e8:a2:96:b5:7f:ad:c9:e3:82:a5:
                    35:94:13:a8:7c:f7:13:62:af:2d:90:88:7b:1c:4c:
                    68:f2:d8:93:b7:48:46:6b:72:f9:ce:de:84:f2:f7:
                    0f:82:f8:f4:46:84:5d:43:f1:95:ac:3a:1e:5a:4d:
                    90:fa:29:cf:7c:c9:7d:83:8b:e1:2b:22:57:ea:44:
                    1e:28:c3:df:81:9e:f3:f2:4e:ce:3b:36:7e:a1:d5:
                    c2:b1:39:ef:f8:cc:d2:14:a1:f4:fb:28:a9:cf:c9:
                    ae:9e:58:16:67:50:31:95:02:a3:5a:09:36:80:2a:
                    f4:0d:8e:0b:90:bc:ed:e8:37:d8:bf:5f:01:da:d4:
                    f5:13:72:6e:e2:c6:88:32:de:e4:78:1f:55:ad:72:
                    5a:b9:e0:6e:28:00:9d:97:bc:80:6f:4c:99:7e:fe:
                    d4:6e:55:cc:20:3a:d0:f5:5c:54:6e:10:b7:42:b5:
                    30:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E1:B6:CC:6B:E5:69:C6:70:5F:53:5A:69:70:4B:24:1B:6D:6A:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5cdf3e-e28d-4b15-b4de-7265437592d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:ed:5f:b3:3e:59:91:5f:9d:b2:5c:16:54:51:0c:d1:64:
         49:cf:e9:31:4a:30:e4:71:34:d4:ce:1f:2a:11:f9:58:4a:23:
         d6:fd:14:52:a2:85:ae:29:b6:f7:7e:65:0b:3a:a2:a4:e4:8e:
         ab:95:ab:df:ea:7a:15:3c:80:e4:2e:9e:d7:f8:e0:58:00:eb:
         9f:e9:70:0e:2f:cd:52:bd:64:df:2c:05:27:65:31:47:9f:1e:
         d3:47:b8:e0:e1:fc:f9:59:96:47:db:ad:fb:99:d4:de:8a:f2:
         0b:35:d1:01:a0:8c:36:ff:7d:3b:40:6f:73:f8:76:9d:54:8b:
         60:15:bf:b1:4e:7b:da:7d:85:67:82:8b:c8:ac:31:a0:2f:58:
         96:dd:23:81:4b:5d:0e:83:c6:4f:ad:3f:db:8e:0c:01:0e:57:
         7f:80:ac:8c:0c:36:9f:9c:10:9e:49:7a:56:39:5e:ed:00:9c:
         f7:92:68:f9:80:d8:6b:29:cf:97:18:83:7b:b5:d7:34:85:ac:
         a2:92:e3:6b:f0:74:bd:46:45:5f:e6:f3:18:8a:a9:0e:31:b7:
         f0:66:59:ef:d5:29:6b:76:2d:36:e9:61:6f:1c:35:92:e0:cf:
         08:5d:f8:32:85:fd:9f:5d:e3:4f:f6:03:7e:53:76:07:fd:ce:
         4e:ae:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:49 2025 by rpki-client