Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa
File:                     e73183cc-2907-425e-bd2b-10fd1986e4bd.roa (raw, json)
Hash identifier:          Hu5Rrcp2uAsfYaMhU1UByvkJf6e11Nygfr4YjtrXNko=
Subject key identifier:   78:46:0C:70:66:B2:2A:6D:75:BC:4F:21:99:A9:A0:09:F3:02:9B:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68C0CF720027115C98D4B3929DD52AEFC27F8F14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa
Signing time:             Fri 27 Jun 2025 15:01:24 +0000
ROA not before:           Fri 27 Jun 2025 15:01:24 +0000
ROA not after:            Fri 01 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.16.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:cf:72:00:27:11:5c:98:d4:b3:92:9d:d5:2a:ef:c2:7f:8f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 27 15:01:24 2025 GMT
            Not After : Aug  1 23:59:59 2025 GMT
        Subject: serialNumber=3441623917f3e1a810c5ea6cbb2c8571297a2c57f48b053b67250cf976498193, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:ad:39:3a:6e:d2:66:82:86:42:dd:1e:83:
                    1c:7f:cd:4c:4b:a3:be:04:ab:d5:d4:5c:2e:bf:40:
                    85:0b:94:b2:65:8a:2f:8f:a7:da:61:76:b9:68:31:
                    bc:73:86:dd:91:b6:82:7a:7d:a8:cd:0e:b6:50:47:
                    b2:12:59:45:cc:c6:ba:70:7f:25:42:4b:6a:e8:07:
                    30:dd:b7:9d:82:a4:8d:54:6b:1d:a7:28:2f:19:fb:
                    77:29:43:98:84:9e:b1:af:03:08:e8:ec:32:e4:8d:
                    9c:81:f5:91:79:9d:a9:28:b9:9a:8a:f7:32:7e:ff:
                    ae:00:ae:59:9e:e9:3c:92:5f:7a:d7:9d:93:60:2f:
                    7d:04:34:2b:83:1a:b2:0c:7c:dd:ea:9c:c9:33:ff:
                    17:e0:a9:11:35:5b:ee:e6:0f:34:99:91:0e:ed:e2:
                    5f:2d:12:43:9e:6f:10:65:1e:3e:7b:08:6d:22:d8:
                    d2:a0:1c:f2:57:ec:48:0c:8d:8a:2a:86:b7:dc:f6:
                    4f:d0:5e:67:a9:71:b5:67:5d:75:f6:5d:e7:ad:3e:
                    8e:e4:57:ea:0a:28:45:71:7e:90:35:f1:6f:db:6f:
                    b5:2f:66:cc:75:95:8f:c2:c9:d9:d4:96:4e:67:95:
                    c5:0e:f1:cc:f3:05:d6:7b:9a:a7:44:8c:64:63:e3:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:46:0C:70:66:B2:2A:6D:75:BC:4F:21:99:A9:A0:09:F3:02:9B:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:44:aa:51:00:3b:fe:ef:14:c8:0d:3f:74:12:af:88:c6:
         75:20:43:f2:a9:e9:77:f5:22:78:91:3d:43:c2:06:96:43:db:
         26:06:94:af:f2:7a:92:9f:e8:62:f6:f8:f0:72:95:bb:58:f3:
         2c:65:d2:7e:b5:db:76:74:88:b1:fe:09:47:25:2a:9d:9c:df:
         72:4b:50:46:83:a9:5f:86:a6:06:6b:00:e5:47:19:b5:25:75:
         03:d9:66:a3:7e:f3:27:0c:84:1d:5e:e2:81:d7:9d:66:84:8c:
         91:dd:61:bf:94:9f:28:d4:81:48:fd:93:84:0a:c7:4c:b8:d6:
         da:7b:96:88:03:45:f5:f0:11:85:c5:0a:95:21:13:bd:83:35:
         a4:27:16:59:e8:e9:43:73:f1:26:d7:0c:db:a4:c1:a1:c9:06:
         e6:56:07:ad:63:fc:7b:51:ca:2f:ca:ed:1f:6c:89:4a:0a:69:
         84:43:26:c8:25:40:0c:aa:0c:b1:36:a8:64:25:44:72:94:28:
         ed:b3:31:95:63:e2:7b:7b:ae:bf:32:c5:7c:c4:51:39:13:9b:
         f0:11:35:57:6e:71:58:8c:21:91:6d:95:f2:02:eb:cb:d8:b6:
         5e:17:4f:a9:5f:2a:14:3e:ba:50:8e:4b:16:6d:44:75:c6:fa:
         78:37:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:20:01 2025 by rpki-client