Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
File:                     dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa (raw, json)
Hash identifier:          EbhOHmiFcQPwLb66hogeoy7r3EkbvGSstsLx+TInSDE=
Subject key identifier:   80:1E:DE:B1:E1:31:AF:C9:E8:A5:A2:65:CD:5A:48:0D:6D:EB:95:3E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AFB8CDAB9FC3AC8780995F7063C3BAAE2B35EEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa
Signing time:             Fri 22 Aug 2025 00:41:03 +0000
ROA not before:           Fri 22 Aug 2025 00:41:03 +0000
ROA not after:            Fri 26 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fb:8c:da:b9:fc:3a:c8:78:09:95:f7:06:3c:3b:aa:e2:b3:5e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 22 00:41:03 2025 GMT
            Not After : Sep 26 23:59:59 2025 GMT
        Subject: serialNumber=26b451d6be4ea0f1b69834b338789010d96905a8dee718112d03db78eb4812e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:b1:0d:db:fb:e8:f6:af:c6:db:bd:ac:19:
                    28:02:d3:00:54:26:3a:a8:1a:58:0c:b3:03:cb:df:
                    4e:7d:9f:7e:b0:57:d2:08:d3:6e:59:22:cd:d0:72:
                    45:bf:15:b5:d9:eb:0b:9a:18:17:72:f5:09:fc:fe:
                    55:22:b1:0b:d7:55:56:47:44:7b:d1:8d:59:57:67:
                    52:15:3d:ef:b4:e7:ba:46:34:cb:70:e7:44:5a:9f:
                    33:00:ee:ad:43:9d:ae:42:74:de:46:f4:fe:80:f6:
                    79:fd:e9:6a:12:32:00:b7:28:5b:bc:4a:bc:c7:1a:
                    5b:2d:5f:d9:5c:1c:53:4b:b0:77:53:bd:fd:10:d7:
                    5a:13:c1:d1:92:b1:b9:2c:61:26:55:ad:4b:fd:4a:
                    20:64:c9:8c:38:9c:28:49:79:59:03:3a:53:48:ec:
                    2b:f0:1e:8b:39:c8:05:bf:40:4e:5c:11:67:aa:55:
                    f8:95:e1:a4:4e:79:6e:f6:80:b9:21:dc:c9:6e:4b:
                    2a:4a:ad:33:ef:58:50:c8:50:91:4c:d7:2b:1b:82:
                    46:27:8b:59:bd:cf:b7:75:b4:9e:39:e4:88:52:77:
                    12:a7:aa:01:f4:a0:7e:b9:85:8e:f7:fc:ad:17:5a:
                    b2:a6:25:94:33:c5:62:37:1e:9a:a0:9c:92:d1:e9:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:DE:B1:E1:31:AF:C9:E8:A5:A2:65:CD:5A:48:0D:6D:EB:95:3E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2a7753-c05a-4a6a-a1b0-65b165af464f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:77:d0:00:3a:78:ca:4f:0a:d6:74:5f:b2:6f:de:f5:87:e9:
         f7:5e:2a:1f:86:5a:80:7b:b1:84:67:2e:07:94:c7:dd:13:de:
         26:41:55:a7:27:c4:ea:11:b2:36:dd:23:73:a8:39:0a:d8:a6:
         c4:31:40:e7:38:20:55:2e:f3:1b:57:10:59:f4:fc:d6:fa:c6:
         f0:1a:5f:a1:87:d8:96:7f:6d:47:85:97:30:ed:af:73:ae:cb:
         46:d8:7a:2a:55:ce:14:94:30:fb:93:57:b5:23:4c:08:69:37:
         3b:31:c9:d2:19:4d:25:22:6b:ea:ee:2f:a0:81:73:3a:74:de:
         26:53:fc:1e:cf:96:17:34:8c:2c:c1:ba:84:40:d7:10:88:e3:
         a3:ae:8a:c3:4d:e0:07:c7:f3:a1:eb:61:2d:1f:1a:1a:18:4a:
         1f:50:fe:dd:54:c9:23:bb:24:8a:37:fa:71:3a:c4:47:72:49:
         51:27:e5:c1:05:3c:7d:79:74:07:8e:fe:e8:9c:d0:4e:26:39:
         a6:e2:f6:f0:ee:cd:53:e9:03:09:2f:df:41:b9:cf:7c:11:57:
         72:5f:fa:09:40:5c:88:53:07:cf:8c:16:7a:5f:fe:85:9b:25:
         59:34:a3:05:fa:47:4b:79:c8:1b:f6:0a:72:36:71:48:6d:6d:
         50:13:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:13:35 2025 by rpki-client