Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa
File:                     ebaea730-5e58-4690-973d-b99a24f55ff6.roa (raw, json)
Hash identifier:          +8U8hxKfT7zUbuDk16Qwi6gR52XyCFm/6Alc78QFIw8=
Subject key identifier:   B2:13:6A:D6:FD:ED:76:90:BC:DA:EB:18:63:8C:39:FE:D9:D2:A1:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30560549903D3611B845C2E472285D87DB2B5F06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa
Signing time:             Wed 20 Aug 2025 00:00:28 +0000
ROA not before:           Wed 20 Aug 2025 00:00:28 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.217.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:05:49:90:3d:36:11:b8:45:c2:e4:72:28:5d:87:db:2b:5f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 20 00:00:28 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=10a83ac6420cd802cad014c0205f8c546d129136b9aad01989748c993cc4ef18, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:6c:22:c4:c4:f1:86:4b:c6:34:bd:23:b6:
                    08:95:d9:e1:e9:0a:58:bd:9f:43:f4:53:17:6e:db:
                    32:8c:dc:43:49:52:6a:ec:87:a7:5e:a1:c8:51:32:
                    6a:a4:b4:07:0e:22:d0:d2:92:27:b5:42:65:6b:12:
                    35:22:37:55:e6:d2:ba:e8:0d:ad:93:ec:96:36:3c:
                    2f:ba:47:3d:ba:dd:e1:cf:38:4d:4a:20:d1:b5:13:
                    63:c2:70:b5:94:dc:47:6f:25:7b:60:a7:b0:99:68:
                    08:57:e8:73:49:f0:90:c3:0f:e4:e1:c3:80:43:18:
                    ca:d0:d3:d3:4c:33:c2:3e:db:d7:31:2f:63:00:cc:
                    00:8c:b1:4d:47:6a:5a:6b:8b:fa:3b:a2:4a:93:dd:
                    4d:3b:34:a3:49:b9:2a:89:f6:a1:37:1d:a8:ce:f4:
                    3d:fd:9d:8a:0a:1b:95:43:06:14:87:aa:0c:c7:8b:
                    13:f9:b1:8b:92:b3:b1:1a:2f:96:76:3c:69:69:87:
                    af:d6:7e:7e:b7:4d:78:45:f6:73:17:94:3e:52:eb:
                    ec:51:48:01:e0:8a:a3:80:ae:e1:47:94:9e:7c:cc:
                    c4:2b:b6:aa:bd:80:4a:bc:95:c8:7f:80:c2:11:5a:
                    18:07:6e:1b:f4:e2:6a:aa:c8:0b:d7:6e:3e:46:d5:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:6A:D6:FD:ED:76:90:BC:DA:EB:18:63:8C:39:FE:D9:D2:A1:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:e8:2e:e7:b5:39:8a:9e:7b:77:3e:8a:bf:b8:f9:53:c9:
         34:08:e7:11:f8:e1:3c:91:57:ef:9c:b1:b6:80:ea:4c:0a:b0:
         e0:1c:51:5c:48:90:43:40:a3:04:83:e5:eb:30:f8:0a:b9:50:
         25:5b:de:8d:67:c1:36:60:4c:88:a9:76:09:1e:c0:aa:e3:0c:
         ab:5b:e9:ba:4d:01:b9:49:73:a0:b4:64:ea:96:f1:bb:c0:c6:
         44:62:7d:bf:59:28:bb:3b:04:d0:52:42:cd:d5:14:c3:80:e0:
         d9:a1:f0:56:94:94:3e:35:07:61:e5:56:44:3f:5e:a0:7d:fb:
         d2:12:71:72:1f:99:7a:26:67:5b:43:2d:86:b8:1b:59:1a:3c:
         ab:df:7e:c2:ad:69:09:ff:29:7d:af:22:17:ae:2e:72:5b:29:
         c3:14:2b:34:b8:2e:66:d0:c8:f4:e1:55:60:7f:3e:26:b9:2f:
         f7:53:44:02:04:55:7f:19:0c:57:7d:47:23:3d:36:07:7d:82:
         c0:94:fe:44:2c:8e:ea:1a:87:94:6c:db:51:77:27:60:b3:f7:
         6f:ec:42:cc:95:ce:12:5b:a4:05:b3:22:c9:45:0b:3d:79:b5:
         a5:90:5a:81:c6:71:b3:db:4f:39:c0:91:cd:7b:a0:5d:c0:da:
         53:8d:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:25:01 2025 by rpki-client