Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa
File:                     17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa (raw, json)
Hash identifier:          xuMQg/3f6COcVfYpPrSzaBwkM2U6ENbYhlg85kwMAFg=
Subject key identifier:   E1:84:F3:D7:AC:89:86:8F:2B:0B:28:2D:08:90:0D:81:5E:83:19:D3
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       3032759D97C03F0BF604B7902C06C7A47AF66644
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa
Signing time:             Mon 16 Jun 2025 16:00:10 +0000
ROA not before:           Mon 16 Jun 2025 16:00:10 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:75:9d:97:c0:3f:0b:f6:04:b7:90:2c:06:c7:a4:7a:f6:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Jun 16 16:00:10 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=a26deb75611781dcdd8d7b703d363e2ceb93993136d1c852344c5e0e49da2bf2, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:d9:3f:8a:ab:1b:a7:e2:54:3f:8d:25:4e:
                    ea:2d:96:8a:30:52:5b:98:ae:f1:bf:3a:a9:1a:6d:
                    19:32:b4:54:a9:0f:0d:b4:87:e0:f5:3c:a9:df:15:
                    ba:c1:7a:87:83:6e:2e:95:09:73:13:6b:7d:84:30:
                    8e:f9:47:c3:b3:59:e3:00:50:10:cd:f5:1e:ab:a9:
                    cc:9f:d0:b8:24:49:e9:cd:f1:72:9a:f0:31:04:e3:
                    df:ba:7f:1c:df:0c:f9:86:1e:37:07:6f:e8:66:00:
                    59:19:c3:49:fe:b8:81:cf:02:57:b4:49:2d:62:50:
                    90:d3:a6:2d:dc:93:94:d0:26:7b:31:4c:19:2e:9e:
                    6e:3c:b8:3a:bf:42:42:5e:48:34:e5:a8:6e:03:e7:
                    6f:ba:d6:d0:a5:88:90:53:2d:1a:7d:9d:1d:47:04:
                    60:bb:21:37:3c:08:c1:0c:f9:b1:9c:3b:8e:38:3f:
                    d9:63:da:bb:2a:89:59:76:9a:e4:8f:49:31:bc:d3:
                    54:d1:76:90:5a:a3:d8:da:8c:d7:68:db:87:a4:51:
                    2a:b3:1f:f7:07:27:e4:95:24:f4:c7:9e:a2:ff:52:
                    54:89:ad:d9:0f:a4:36:78:6b:01:a2:23:fc:8c:82:
                    75:79:c3:5c:02:33:bf:68:5e:97:40:04:1b:df:dc:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:F3:D7:AC:89:86:8F:2B:0B:28:2D:08:90:0D:81:5E:83:19:D3
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:9f:f9:a6:1e:88:eb:d8:4c:e5:b7:b7:1e:89:7e:ff:c6:e6:
         7e:a7:3f:a7:7e:0d:b6:cd:10:36:6c:b3:5e:17:a0:08:ee:07:
         21:27:e2:d1:5b:4d:e2:96:7b:0e:2f:d8:89:46:98:59:eb:5f:
         66:34:3d:9a:c5:6f:c2:59:01:72:eb:a5:e5:c3:30:af:3b:1a:
         6a:2c:07:c6:e5:99:1e:23:f7:25:47:2a:38:98:2f:3b:cc:ec:
         5d:32:1f:74:2c:7d:07:f5:13:92:68:8d:f3:14:e4:a3:27:4e:
         f0:95:47:e6:85:77:3f:9e:7d:4a:65:2d:be:7d:d4:ce:24:72:
         72:e8:e5:32:c2:a0:cd:5c:13:e2:18:0d:76:22:e7:8a:78:08:
         fb:ca:2a:aa:6a:9b:c3:39:b8:2e:f4:f3:7b:09:d3:3d:b1:1b:
         d6:62:a0:9f:97:fc:2f:a4:c3:1c:02:e3:7b:67:69:72:30:84:
         2a:db:2c:71:8f:33:b2:d8:9b:35:00:6e:94:73:c0:7a:aa:8f:
         f3:bd:b1:9e:40:d8:27:66:f8:2e:9c:a7:1e:8a:f5:48:20:f7:
         53:65:ea:7c:7a:20:40:83:5a:c2:bd:99:cc:f0:1e:3d:c2:0b:
         fb:30:11:14:c1:15:5d:40:1c:21:ed:c7:ce:7a:90:de:37:d3:
         50:76:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:22 2025 by rpki-client