Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa
File:                     02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa (raw, json)
Hash identifier:          nEnYn9cce+7/pgr7V+rB2LGQ3DANEQ37zJr4MC3Q/Gk=
Subject key identifier:   5C:4B:C5:4A:A8:CD:25:3B:6E:CB:09:C9:38:C9:92:F2:40:92:24:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60C6B03CFA691660A944F1402B04F1600FE9D581
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa
Signing time:             Wed 16 Jul 2025 00:12:05 +0000
ROA not before:           Wed 16 Jul 2025 00:12:05 +0000
ROA not after:            Wed 20 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.31.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c6:b0:3c:fa:69:16:60:a9:44:f1:40:2b:04:f1:60:0f:e9:d5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:12:05 2025 GMT
            Not After : Aug 20 23:59:59 2025 GMT
        Subject: serialNumber=db8804325845da2bb7ca4b501362500a4d058679eaad5a71710f8af04550f377, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:c8:f3:ad:68:6e:04:25:98:45:95:05:a1:
                    60:19:88:3e:57:b2:97:d1:7c:41:e5:1e:81:51:3d:
                    40:fa:a0:02:34:6d:0d:55:e8:54:23:46:40:6b:2a:
                    a5:2c:ee:f7:0d:51:8c:6d:94:97:f2:77:52:d4:90:
                    20:9b:6d:3a:cc:c0:67:b5:71:53:c1:f7:87:57:78:
                    9c:08:10:09:b8:1f:d4:f5:76:ac:55:cd:4b:a8:b5:
                    4a:a5:fa:aa:2b:1d:7a:6f:d0:82:a2:87:b9:3c:4e:
                    09:90:e5:b0:6d:46:9d:b7:12:50:a7:22:9d:43:69:
                    d2:ba:9b:8e:fe:82:b9:e4:96:4b:59:6b:9b:d2:c8:
                    15:f0:05:ba:da:45:63:b7:64:18:9a:2f:46:6b:7c:
                    97:fc:13:b1:cb:56:11:21:22:16:93:52:b8:cc:e8:
                    54:9a:5e:8e:69:93:37:1a:d0:b0:d4:6b:b1:09:20:
                    a8:15:61:d2:38:8b:ed:c3:40:2a:12:1d:c8:23:ac:
                    25:30:7c:18:3c:04:c2:72:51:ad:17:02:43:85:1a:
                    69:12:ce:25:f1:f0:a8:6e:a1:19:e5:e9:b7:6d:a2:
                    f4:82:3b:c5:91:2f:80:ac:fe:a2:3d:1f:1f:44:ec:
                    b0:7c:04:1b:50:cd:7a:72:f2:7a:22:a7:58:8c:18:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:C5:4A:A8:CD:25:3B:6E:CB:09:C9:38:C9:92:F2:40:92:24:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:01:e3:88:45:08:6a:de:84:4c:ea:46:f3:21:de:f7:cd:9f:
         61:70:84:07:89:bf:3a:e3:4f:66:2d:b9:dd:b2:70:70:2f:17:
         d8:4e:6a:5b:22:02:97:77:ac:49:9a:ab:d4:97:7a:c4:ea:61:
         90:b9:0e:e5:fb:ed:bf:e1:e1:2f:05:c2:3f:2a:29:d3:fd:75:
         54:cb:ad:1f:96:d8:58:d0:74:e2:3a:f8:08:6e:7e:36:ff:cd:
         70:af:68:ad:64:1b:b8:fd:51:73:59:f6:11:d5:d3:ac:ae:89:
         d4:ce:08:7d:43:67:c1:47:8e:c9:79:c4:d2:4a:84:88:21:73:
         10:81:81:b3:ae:9e:c6:e2:17:ca:a1:d3:2f:0e:22:f1:bd:af:
         d5:a5:9e:31:23:78:bc:84:f6:f7:2c:4c:2a:d9:f9:da:1e:af:
         a2:1c:d8:ef:cf:18:4c:e6:55:fe:1e:d7:3a:60:f0:e8:3c:b1:
         b0:4d:34:50:49:d4:d3:5c:f6:93:5d:05:9e:3e:19:17:88:f0:
         74:91:38:62:2c:46:11:9e:36:14:e0:97:d9:5e:df:84:5f:63:
         8c:16:8e:f1:34:a3:06:24:10:01:c3:6e:e9:14:7a:98:0e:9a:
         e4:af:13:4e:40:e2:15:64:d6:42:d3:a0:c6:66:23:34:74:67:
         e8:55:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:27 2025 by rpki-client