Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
File:                     fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa (raw, json)
Hash identifier:          b+FWORmB26xG4HsSyw92XNEjyFB8mogrdYQdFaeeiWQ=
Subject key identifier:   E2:E8:24:8B:C3:26:4E:64:B1:81:B0:85:70:40:1D:9E:62:80:5A:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60246D739187C7B931584A92E20EDEDEAA5E0537
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
Signing time:             Tue 17 Jun 2025 00:00:34 +0000
ROA not before:           Tue 17 Jun 2025 00:00:34 +0000
ROA not after:            Tue 22 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        122.200.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:24:6d:73:91:87:c7:b9:31:58:4a:92:e2:0e:de:de:aa:5e:05:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 17 00:00:34 2025 GMT
            Not After : Jul 22 23:59:59 2025 GMT
        Subject: serialNumber=c218d7db1b2224d1e83826c4dae1e08204aa96d541b728a3a69bc759ed8274df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:af:5c:5d:82:1a:d0:71:bc:f7:c0:a5:cb:
                    80:82:ef:d7:a1:84:96:de:5c:b7:04:3d:47:da:25:
                    83:0f:0c:04:5e:84:27:57:70:83:8c:f7:dc:19:e2:
                    c6:1a:46:51:54:dc:03:fc:ab:20:94:87:24:e2:af:
                    36:38:d3:c7:40:cf:f4:61:d0:2f:6b:45:3e:b2:e9:
                    46:0c:df:32:ab:4c:85:0c:99:cd:3b:de:f1:b2:2c:
                    a0:f8:7e:f6:3f:67:7f:eb:1c:ea:e8:de:32:e3:3e:
                    0a:7b:a0:82:33:ef:6e:6b:6d:86:ef:d3:9b:07:c0:
                    1c:49:cd:2c:8e:72:58:32:72:28:29:bb:48:cb:6b:
                    a2:b3:41:07:64:2e:f9:19:21:0b:de:ad:65:27:18:
                    39:25:59:96:6f:3a:de:86:78:2a:4e:11:c1:7c:c4:
                    aa:d4:72:fa:e3:08:df:7e:af:ee:13:7a:5d:3c:1d:
                    df:42:56:23:d5:22:5f:3f:77:24:de:d9:de:0a:eb:
                    b9:1c:fe:ed:bb:bd:0a:9a:bc:4f:f4:36:fc:9f:39:
                    74:94:ff:b9:00:cc:8f:43:dd:e1:9c:c1:d7:c7:b7:
                    88:dd:43:67:2c:68:0a:bd:17:e1:6e:4c:87:ce:e6:
                    4c:b7:9e:26:b8:c2:71:78:19:2f:a9:31:1f:7a:ef:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:24:8B:C3:26:4E:64:B1:81:B0:85:70:40:1D:9E:62:80:5A:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:65:b0:af:db:bd:8a:8a:44:8f:3e:63:c2:dc:92:a3:e6:
         49:01:2e:cd:cf:3c:53:74:57:f6:6d:64:09:39:4e:ed:29:a2:
         08:36:6d:6d:ee:00:c0:94:7b:d7:b2:05:af:7b:16:5c:06:b8:
         ba:b1:5b:51:fe:84:dd:55:e6:80:3f:b0:5d:4f:4c:52:39:0e:
         01:d2:59:08:55:b3:ca:d9:d0:39:a5:be:17:ee:16:2c:af:69:
         90:15:e0:52:d6:e0:05:10:4a:a0:7d:d4:70:a4:a9:5e:97:14:
         d9:8c:1a:50:d8:86:5e:13:0e:43:d8:ff:f4:6c:02:a9:5c:0e:
         0c:d1:aa:48:c7:26:a2:3d:52:2a:94:d8:9a:ab:1e:68:d5:67:
         89:83:c5:29:58:cb:1e:fe:24:d4:2c:fe:2b:2d:c5:39:a7:ee:
         09:a4:ea:0a:d8:39:78:81:26:a1:e4:bc:15:a0:cc:24:46:68:
         28:d8:2f:82:09:03:d0:b0:b7:b7:c0:03:3e:45:eb:e7:c9:d7:
         01:73:31:2f:27:cb:75:10:1a:1c:2c:f5:b1:0e:19:a8:d8:42:
         fa:5b:6a:a8:91:ae:bd:d7:ba:71:3a:ee:e8:cf:45:1b:85:3b:
         21:c3:48:e1:ce:58:8a:c6:b4:45:aa:33:cc:b4:06:ae:aa:d2:
         e1:7c:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:32 2025 by rpki-client