Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e6b1ee8-3808-49e0-9abb-ac69b3207e10.roa
File:                     6e6b1ee8-3808-49e0-9abb-ac69b3207e10.roa (raw, json)
Hash identifier:          9CBwSdT84WeOQW3gAl5wx50BuzN7csluzwl2n1EnU1M=
Subject key identifier:   0C:65:D1:08:EA:BD:9D:CA:C0:54:B1:33:30:EB:1B:50:57:D1:1A:09
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       275AA9E179F2D96ED8E7E3CDAC2700689C3EFADF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e6b1ee8-3808-49e0-9abb-ac69b3207e10.roa
Signing time:             Mon 16 Jun 2025 18:30:23 +0000
ROA not before:           Mon 16 Jun 2025 18:30:23 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.92.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:a9:e1:79:f2:d9:6e:d8:e7:e3:cd:ac:27:00:68:9c:3e:fa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 18:30:23 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=0d4472f0cd6937ecf20489c5ebe28161b0a20b4ecc926d3777fdd08a126ee2be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:10:ae:55:ad:d7:aa:26:e8:5b:d8:48:ee:
                    4c:d0:a6:bd:4e:45:06:19:7c:2a:45:2a:33:8e:76:
                    31:14:84:e3:83:4c:4c:ad:56:cb:7f:3d:d2:91:f0:
                    52:be:67:c1:d0:c8:7a:93:02:a4:88:77:be:b4:c4:
                    6e:bc:22:e5:df:19:7f:a3:81:84:c2:65:a4:34:fe:
                    65:79:c1:4e:62:e8:d5:f0:12:fa:b7:e8:2c:1b:8a:
                    c6:7a:62:82:52:c7:f7:c6:d1:10:23:69:01:a0:9e:
                    d8:e5:0a:c0:e1:fa:46:e8:2d:22:77:a7:86:53:e1:
                    5a:24:8a:f3:f3:8c:0a:e4:bf:87:fd:28:e8:09:db:
                    27:7b:7f:96:94:ef:35:f7:bc:1d:2e:09:5c:c2:a2:
                    27:20:81:14:6f:1d:55:43:fa:b2:89:3f:a1:1a:be:
                    4a:04:6e:f7:76:9c:de:e4:86:d1:f8:f3:37:8c:ed:
                    b5:5d:c5:c5:42:bd:c3:3b:d2:2a:83:90:e8:07:ad:
                    b5:2d:63:ee:5c:86:f9:d2:48:dd:bb:31:99:85:6f:
                    a5:14:df:03:ef:d3:d4:a9:3a:ad:05:1b:ac:03:db:
                    0d:d0:07:2f:39:a7:af:6e:fb:e6:0b:1b:78:23:4c:
                    f7:b5:b9:a0:7f:e5:d0:c9:66:54:79:2f:d9:ed:b8:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:D1:08:EA:BD:9D:CA:C0:54:B1:33:30:EB:1B:50:57:D1:1A:09
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e6b1ee8-3808-49e0-9abb-ac69b3207e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.92.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:67:f3:f3:16:22:e5:a5:80:0f:8c:0f:d7:bf:51:9b:70:83:
         8b:9e:52:80:05:37:f8:7c:45:5e:73:96:d8:6f:6d:ed:85:d2:
         d4:96:5d:71:2d:e6:13:be:47:0e:4e:de:d1:15:63:91:23:38:
         7c:91:57:b5:f4:65:4b:d4:96:61:46:c9:ce:9a:65:42:78:01:
         2c:2e:92:99:7a:06:d5:4d:e1:39:52:0c:07:22:85:04:86:0f:
         59:d0:c0:c1:49:e9:2e:96:6c:c6:3c:4d:fa:3c:32:e2:c2:90:
         35:29:5f:7d:65:70:29:ee:7c:ee:37:05:21:1f:97:5f:51:2a:
         5a:c4:a5:45:f6:41:0c:e8:d7:c8:9e:0d:e8:53:44:c2:cc:ae:
         02:0c:41:82:c9:cd:3d:18:c6:49:ba:44:3b:e7:70:95:24:71:
         eb:dd:f8:ad:5e:75:d1:e0:4f:17:94:9c:cd:1e:b0:0e:cc:36:
         d5:2f:6b:d2:9c:b7:c8:e7:f4:9b:0f:90:f1:18:fa:8e:fa:ab:
         05:4d:df:fc:ff:a3:12:70:0d:fb:3d:bf:34:f3:bf:85:a4:10:
         0b:e6:f5:21:84:04:85:3b:a8:97:77:71:a8:dc:6b:5e:c6:6b:
         bd:d7:d0:f0:4a:85:62:3d:6d:44:74:2f:d3:8f:b5:79:18:b1:
         00:4e:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:16:34 2025 by rpki-client