Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ffa0a55-65ab-4aba-af4c-8b8ce167f61a.roa
File:                     9ffa0a55-65ab-4aba-af4c-8b8ce167f61a.roa (raw, json)
Hash identifier:          Aw8HxWwA3HBYnpUKiwhEX8xT/7cF2il7MGGLRviTGME=
Subject key identifier:   A5:51:C1:CB:65:47:F0:04:4C:FC:1A:BF:91:FB:1D:21:F5:97:6F:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36F13B3CD1D6EF31AA2A6457EBD0D9AF45E9A218
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ffa0a55-65ab-4aba-af4c-8b8ce167f61a.roa
Signing time:             Sat 03 May 2025 00:01:10 +0000
ROA not before:           Sat 03 May 2025 00:01:10 +0000
ROA not after:            Sat 07 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        138.90.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f1:3b:3c:d1:d6:ef:31:aa:2a:64:57:eb:d0:d9:af:45:e9:a2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:01:10 2025 GMT
            Not After : Jun  7 23:59:59 2025 GMT
        Subject: serialNumber=747721cbd0beb7b3e0178309a9e82a375d556c0aca1bfc1dee9e2c105b65df3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:ac:00:3f:f9:5f:42:77:47:0a:78:9c:da:
                    95:f1:cc:60:8c:39:7c:1f:2f:d1:b6:b3:15:a6:77:
                    9b:6e:17:a3:8c:61:f7:63:1f:9e:e8:9f:8d:07:fa:
                    63:37:88:95:c0:9b:db:81:b2:be:c6:44:c1:54:6c:
                    73:72:b1:9e:90:64:d9:6b:76:bb:a6:b3:a0:6c:7b:
                    88:bb:58:0a:cf:f7:6a:a9:a8:9a:74:f9:77:fd:89:
                    d4:ee:64:53:b3:00:0b:59:96:4e:33:16:32:60:35:
                    41:2c:93:a0:84:ef:1e:06:2f:e9:59:0a:e7:6e:73:
                    6d:61:2f:f1:fc:d6:16:c3:8a:1a:7e:fb:f6:2f:3e:
                    c3:16:3f:c4:d2:37:a6:d8:15:7f:07:2c:cd:28:27:
                    2c:08:83:93:dc:51:78:b3:b1:ea:63:d3:0f:2b:3f:
                    57:05:dc:bf:c0:38:55:8e:c4:4b:e6:9c:4c:a5:05:
                    0e:6b:23:a7:6a:10:2d:d8:79:2d:c2:6d:66:63:53:
                    d0:13:44:67:4e:e2:9c:17:b1:e6:9b:b4:e9:40:2d:
                    93:8f:9e:f1:5b:99:6b:68:a8:85:f1:19:29:ce:21:
                    e8:7d:6b:9d:bf:a6:da:6e:30:8c:c6:d2:32:b1:2f:
                    24:a3:04:6c:23:8e:fe:00:27:9b:68:d1:78:20:b8:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:51:C1:CB:65:47:F0:04:4C:FC:1A:BF:91:FB:1D:21:F5:97:6F:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ffa0a55-65ab-4aba-af4c-8b8ce167f61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:6a:81:39:98:03:83:13:cf:a3:40:48:10:e5:b7:e0:9e:
         3b:5a:ff:73:ae:4f:3f:79:dd:87:34:8a:52:dd:07:e2:46:2b:
         57:98:9a:a8:88:fe:85:64:0d:7e:14:fc:e2:9c:bb:e1:22:4f:
         da:f4:21:81:d9:7a:ec:a6:0e:1a:a9:32:68:0b:4e:6c:88:f9:
         5b:b2:93:56:f7:48:4a:eb:45:c7:cb:ec:22:c9:46:f2:ce:35:
         de:0f:f0:db:45:57:b2:a2:41:c4:a5:f4:3b:c0:d9:6a:c3:cd:
         d6:19:46:db:21:da:fa:43:f1:0c:6b:00:e8:ab:71:42:fb:8d:
         1e:07:f8:23:5a:cf:d7:cc:6b:12:81:e3:b6:68:a0:68:1e:78:
         36:f1:ef:37:12:b3:bf:e5:31:8f:9f:01:22:84:3a:d4:fe:fc:
         3a:d5:c0:07:c4:c9:b6:40:fd:06:37:d0:78:f5:d0:04:bf:bd:
         c8:b5:a1:f7:df:16:00:26:cb:3b:ce:81:b4:31:15:9f:f5:1c:
         59:01:57:81:65:9f:87:83:d6:1f:81:35:97:65:40:ca:05:30:
         89:7d:d6:58:a5:25:72:89:a6:e7:35:18:2d:2c:2c:78:61:ae:
         ce:7a:b2:ba:9b:a3:d7:64:d8:bb:cb:e8:f2:3c:5f:93:3f:b1:
         ed:2c:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:36:03 2025 by rpki-client