Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa
File:                     e73183cc-2907-425e-bd2b-10fd1986e4bd.roa (raw, json)
Hash identifier:          17WGF/icq4FkNxXfQ72HSWego0aSNeMvrYWw3Uk/Zf0=
Subject key identifier:   7A:D9:25:79:02:A8:9E:32:22:33:E2:46:68:85:B1:AC:F4:37:58:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CBA053826429F4976804EA3665BA91C32ACBD40
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa
Signing time:             Mon 18 Aug 2025 15:51:44 +0000
ROA not before:           Mon 18 Aug 2025 15:51:44 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.16.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ba:05:38:26:42:9f:49:76:80:4e:a3:66:5b:a9:1c:32:ac:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 18 15:51:44 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=0f08812a1ce248ea442fdd5eb2842185963ad92aae8e3b51f5bf474b657e3854, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:ed:f3:f4:48:24:65:6b:ed:0a:58:8e:13:
                    5a:eb:ed:a6:00:c7:73:36:6c:b7:5a:a0:81:a3:c5:
                    68:7d:99:ce:e9:a2:b8:3f:1b:11:98:48:68:ff:51:
                    04:9f:9f:1f:ff:21:4e:84:c3:d3:f6:e4:2e:b7:31:
                    74:44:68:77:15:dd:9e:40:68:f1:67:59:d5:da:45:
                    f0:e1:29:1a:c6:e7:d1:6b:35:b3:44:eb:62:c3:55:
                    b6:fd:fb:1f:1a:c6:e1:f0:2f:34:0d:26:66:a9:6d:
                    a2:3e:eb:36:49:8d:4f:17:bd:f7:e9:a5:48:11:ff:
                    c5:06:b3:8c:fd:c3:0c:91:a1:67:61:c8:c2:ce:9f:
                    e7:15:4a:9e:b1:95:b5:44:d9:2b:61:1e:95:bb:ca:
                    62:40:2f:a2:70:e3:47:8a:fa:bd:e3:39:ed:db:4a:
                    89:4a:7a:f2:99:5a:5e:ba:8d:bf:7d:0f:c8:d2:ef:
                    7e:42:fb:7d:63:f2:01:d5:d0:ea:db:c6:3a:c0:72:
                    3f:50:cc:54:f3:a6:12:d3:90:88:eb:42:7d:e9:73:
                    8e:b5:93:b7:29:c4:e0:d0:11:ad:77:87:92:79:db:
                    9e:79:10:c5:52:9a:a5:70:1c:b8:39:58:0c:de:77:
                    dc:19:4c:05:bd:7d:ab:f1:d3:21:db:c2:cd:bb:30:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D9:25:79:02:A8:9E:32:22:33:E2:46:68:85:B1:AC:F4:37:58:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:c1:66:a8:34:0a:a5:1c:36:7d:f7:47:2d:55:0c:bc:fa:
         7d:48:5f:48:7d:65:b3:a0:62:4a:7c:5f:e8:f4:59:4c:bb:05:
         57:50:e4:6a:ba:92:9e:f8:2a:10:e5:23:63:55:53:fc:7a:0d:
         4e:be:3b:2d:99:d4:ce:42:6b:99:1a:82:03:f2:59:25:bb:f4:
         47:19:69:ea:7e:7b:43:e6:95:91:2d:9d:f9:0c:e0:31:54:a3:
         a4:57:19:75:8a:44:d7:b5:15:12:4f:50:21:73:d0:c2:a1:26:
         6b:56:40:28:b6:b2:a5:67:a0:06:c1:06:a8:dc:2c:2c:e0:df:
         ba:47:39:2f:98:6a:3d:2d:2d:01:e7:23:9d:f1:bd:26:22:b2:
         d4:d3:d2:3d:3b:2e:ab:26:8e:d3:bc:55:e0:8f:91:eb:9e:e5:
         fd:8b:5e:b5:68:c3:44:69:12:07:14:8d:b1:3f:95:88:ec:cd:
         92:a4:d7:20:ad:e1:01:d6:e4:ad:36:12:1f:a3:aa:31:f8:70:
         5f:e6:49:cf:d3:1a:b8:77:c0:c8:66:8e:23:b9:cd:67:22:32:
         65:0b:6a:90:d0:2b:7a:00:85:c5:da:0b:ee:a3:0c:a7:5a:78:
         b4:d1:5a:da:0f:54:e3:b4:6a:bf:93:2b:66:ab:f6:5f:32:bd:
         81:27:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:04 2025 by rpki-client