Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa
File:                     92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa (raw, json)
Hash identifier:          zA/KBxrKfI4ndQgXQRdH2oKcPXl2Ew6S2FihfoIqlxE=
Subject key identifier:   67:F9:8E:D3:6C:B7:2A:9A:4F:1A:A3:8B:0E:58:EE:10:07:D9:A2:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       078CA648F7B1E7DFB1566E574DED9B32FB9CF713
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa
Signing time:             Thu 03 Apr 2025 21:07:50 +0000
ROA not before:           Thu 03 Apr 2025 21:07:50 +0000
ROA not after:            Thu 08 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        103.27.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:a6:48:f7:b1:e7:df:b1:56:6e:57:4d:ed:9b:32:fb:9c:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  3 21:07:50 2025 GMT
            Not After : May  8 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:bc:84:5f:0d:92:53:fd:cb:f5:f1:6b:0c:
                    4c:5c:13:b3:17:29:58:e4:ac:95:69:a0:c3:f5:e0:
                    5d:74:c3:45:45:3b:28:95:9f:27:2b:f7:65:63:df:
                    46:c3:ae:38:f4:4e:45:7b:1e:bd:64:25:99:73:89:
                    89:2e:07:0d:9f:cf:2b:27:d5:e3:55:3b:9b:1d:bd:
                    09:b2:c4:0f:4e:a7:52:f6:91:a3:d0:af:32:aa:8e:
                    e7:00:06:75:1f:83:56:e3:1e:38:d0:fc:c2:29:46:
                    bb:bf:71:e8:f6:f2:fd:40:2a:7b:29:17:3c:b7:6a:
                    44:e3:5f:21:99:c2:f9:6f:9f:e4:26:a7:e4:33:06:
                    9c:c5:b0:87:ae:11:1c:d7:8c:17:d2:87:98:c2:a7:
                    e6:f6:ee:ad:30:41:59:5d:89:cb:fd:f5:95:47:5c:
                    af:06:4e:fe:e7:e1:49:12:1c:ab:ab:0c:8a:47:1b:
                    5c:aa:3a:3b:e9:fc:b7:6f:7a:86:31:53:b2:60:91:
                    86:6a:5b:1f:64:54:bd:e5:78:91:75:c6:23:16:86:
                    77:6a:72:d6:58:e7:65:d5:b5:fd:f9:7a:1f:88:7c:
                    83:fc:eb:14:0a:6a:6f:54:2e:50:da:4a:be:b8:3d:
                    ec:60:f7:02:bc:c0:73:bd:a3:3b:6d:08:f8:73:3c:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:8E:D3:6C:B7:2A:9A:4F:1A:A3:8B:0E:58:EE:10:07:D9:A2:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:df:0c:7b:f3:40:9a:0e:e7:37:f0:a4:80:7d:8f:88:4a:
         f7:82:c3:24:35:23:35:49:2d:ad:eb:4b:73:be:9d:66:47:8a:
         e4:1a:8f:e7:37:8b:08:53:d9:2e:fc:86:a7:8b:06:e2:24:c7:
         10:fd:52:d1:83:ed:ca:e1:1d:a4:5d:1f:45:a8:b7:a7:92:c1:
         7a:54:a5:74:d9:57:a3:68:a3:22:0a:be:8d:d7:a0:1c:9b:16:
         f1:64:2a:7d:84:75:dd:e0:03:fe:35:91:e3:5d:6f:fb:8e:c0:
         21:48:fb:9c:c7:ef:d8:c3:31:7b:6f:10:ee:67:ef:92:ec:98:
         35:af:d3:e7:3b:52:5f:1e:ae:12:1a:a5:cc:24:1a:d5:72:3a:
         57:94:e9:33:08:b7:30:35:1d:81:0b:66:64:be:91:be:47:2d:
         06:ed:32:f6:c8:d3:e5:d7:dd:b7:8d:d1:3d:5e:af:f5:4b:2c:
         57:3d:f4:b0:bc:9c:09:11:ab:1a:86:db:bf:87:ad:17:96:e8:
         ed:1e:c3:52:b0:68:61:6b:f5:ce:11:c5:47:94:75:64:a2:53:
         31:cf:4c:f8:30:9a:fd:1f:4d:d4:bc:6d:de:d7:04:ae:2e:7b:
         e2:56:5a:d4:5d:d3:66:db:fd:d1:54:84:84:8f:cb:12:b9:ac:
         02:f5:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:07 2025 by rpki-client