Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa
File:                     abe641dd-a10f-4e91-8408-cbc741adace1.roa (raw, json)
Hash identifier:          o3hjURg/HYbaUHgCaHNwxTqJKKwjgEcEPMUoOGuMLqg=
Subject key identifier:   03:2A:62:F7:56:56:96:EA:47:9C:15:3B:EF:6D:BA:DE:A3:F8:4A:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BA8E060BA16B4A7271307AFF33250E791656B33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa
Signing time:             Wed 02 Jul 2025 00:41:54 +0000
ROA not before:           Wed 02 Jul 2025 00:41:54 +0000
ROA not after:            Wed 06 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.235.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:e0:60:ba:16:b4:a7:27:13:07:af:f3:32:50:e7:91:65:6b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul  2 00:41:54 2025 GMT
            Not After : Aug  6 23:59:59 2025 GMT
        Subject: serialNumber=3916cb3258ec55ec820f7b80d80efa39ccafbfeaff12a8cf5f93e2a76aa8fa6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:1f:d2:cf:f2:79:bc:73:0b:40:6e:8c:d8:
                    db:32:47:9c:bf:b9:98:e0:bc:b9:83:40:4f:be:54:
                    2b:6f:21:85:df:d5:d8:f1:57:b0:57:55:61:e5:98:
                    05:a8:ee:60:6c:86:44:18:eb:35:c3:8d:be:67:89:
                    6b:eb:4b:3d:f9:c8:e3:e2:1b:82:35:a3:91:71:60:
                    d6:11:41:c8:e8:12:8d:f5:3f:45:e8:50:49:a1:9a:
                    6b:0a:34:ee:df:67:f6:c5:f8:02:ba:91:c0:d6:05:
                    4c:65:60:85:4d:63:33:ea:78:3f:42:66:12:12:df:
                    e5:88:e9:07:94:9b:03:cb:ef:05:89:e8:d5:84:b3:
                    1f:ad:56:36:cd:07:d9:d9:54:18:f6:6c:8c:05:71:
                    6d:29:a0:5e:7f:92:66:e0:a2:7b:64:ff:cc:b7:b1:
                    14:72:4d:74:4b:d6:2c:13:58:fb:55:f0:7b:07:7e:
                    57:10:7a:94:a0:43:21:7b:ea:6b:b4:89:83:46:43:
                    5c:85:17:90:b5:dd:24:11:e3:a8:54:5b:a7:fe:6c:
                    b6:2b:5f:87:c0:f7:d5:b5:eb:0f:2d:d1:e9:e7:e7:
                    2e:2f:df:92:19:4c:ce:38:fb:54:ee:2f:c8:a2:c8:
                    a8:62:2d:8e:f3:c7:13:40:70:ee:55:06:0b:b8:c4:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:62:F7:56:56:96:EA:47:9C:15:3B:EF:6D:BA:DE:A3:F8:4A:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abe641dd-a10f-4e91-8408-cbc741adace1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:df:29:74:c5:53:b4:a0:d6:58:53:9d:ca:8c:49:47:b3:
         4e:40:cc:96:d2:b3:ea:9a:4d:cc:45:16:c8:f1:72:49:6e:0f:
         ce:8e:b2:22:a2:5b:50:ec:28:e3:43:e5:c1:81:84:3e:9b:75:
         33:8c:50:f1:a0:b3:b7:03:74:6c:92:e8:55:63:c5:fa:ca:3c:
         f2:80:3b:6d:a6:e5:99:7c:6a:75:c5:96:07:63:ca:09:af:2d:
         85:3b:fc:de:d8:2d:09:ac:c3:b4:94:cf:d9:b3:a0:59:1b:83:
         3c:08:97:0f:9d:b5:6e:71:36:82:d5:2e:2d:e7:38:6b:f9:8b:
         5e:68:e5:78:eb:b5:4a:6b:8e:db:88:29:d3:cd:75:03:71:1d:
         07:cd:86:8f:a8:28:97:a9:64:f0:22:e5:eb:57:75:4f:04:6d:
         72:7e:c8:91:a7:7d:36:a1:bb:d7:29:d9:f7:30:b2:4a:ac:6d:
         da:89:9f:12:a7:d0:9f:40:73:8a:56:f4:09:e4:1a:00:6e:04:
         fb:57:a4:a7:3d:9e:3e:b7:f4:e4:7e:61:57:87:92:d5:c2:65:
         41:c1:1c:9c:90:6f:8e:ba:b1:9a:12:49:25:60:4c:20:3b:af:
         00:6c:b1:5c:f1:1e:23:21:70:da:d0:fb:5b:9f:e9:a2:1b:90:
         57:30:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:58 2025 by rpki-client