Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06445a36-c55f-4e60-9363-ef0af26cb63c.roa
File:                     06445a36-c55f-4e60-9363-ef0af26cb63c.roa (raw, json)
Hash identifier:          Xk3+Iplh72vsst1C1caKZE5FWFYQx+WGAEiPyuyOJ1k=
Subject key identifier:   68:8C:7F:E2:04:52:65:F4:5D:C3:D3:A8:A9:BF:C6:6C:A2:15:47:51
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F8F0F8C51A6E9E9F85642E4BD12FBD31191B597
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06445a36-c55f-4e60-9363-ef0af26cb63c.roa
Signing time:             Tue 19 Aug 2025 00:20:17 +0000
ROA not before:           Tue 19 Aug 2025 00:20:17 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        89.48.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8f:0f:8c:51:a6:e9:e9:f8:56:42:e4:bd:12:fb:d3:11:91:b5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:20:17 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=279e60bedbdd05e4734a298f87a1ef3855772b8281d563406a9589f6cf47d15a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:62:7d:2c:30:8c:89:bf:83:24:86:30:fc:
                    ba:02:1c:e2:79:e8:7a:3f:db:21:f6:a6:ae:2b:63:
                    f2:8e:1f:06:f1:9b:74:12:5e:e9:f1:7d:4f:c3:d2:
                    84:4b:cb:26:05:3f:5a:7e:0a:b0:10:fd:93:7c:7b:
                    c4:97:5b:34:e2:96:d0:f6:38:e4:4b:e4:9b:da:07:
                    0f:c2:3b:56:12:ac:a8:3c:b7:28:64:b0:1d:2c:0d:
                    87:81:fd:d5:77:6e:0e:93:6b:68:b8:2a:32:dd:7a:
                    45:4e:c9:4b:cd:12:bc:dc:b5:78:ab:72:b4:40:9d:
                    46:15:c2:f2:d2:dd:6c:31:99:33:6c:66:5e:10:6f:
                    2a:00:0c:eb:d6:8c:a1:b0:7f:8f:3e:44:1c:4d:8c:
                    c4:b4:ee:ba:5e:96:6a:2b:a3:b1:43:59:03:7b:54:
                    fc:7b:be:3a:a7:c5:4b:9c:80:b9:8b:9e:cd:9e:5c:
                    18:1d:d5:98:4e:bf:a2:44:c1:35:a0:f0:7b:e8:37:
                    cc:a0:70:01:c2:db:e8:8a:3f:eb:e0:91:94:6a:de:
                    79:4a:a7:c4:51:97:d8:16:57:1a:1b:b9:c4:70:e9:
                    07:0d:d1:65:b8:be:43:01:74:18:4f:92:9d:04:2f:
                    51:cb:be:49:3a:89:68:8e:f7:03:81:0e:77:5e:08:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8C:7F:E2:04:52:65:F4:5D:C3:D3:A8:A9:BF:C6:6C:A2:15:47:51
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06445a36-c55f-4e60-9363-ef0af26cb63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.48.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         c6:13:e4:cf:74:8f:83:56:db:25:ae:77:17:65:aa:cf:e0:28:
         70:96:ed:6f:dd:1b:40:93:c0:81:8c:af:cb:f7:41:66:a9:ef:
         0b:36:09:57:4e:1d:15:22:0a:27:71:8d:f6:1c:63:f1:bf:f3:
         de:c9:64:03:66:ef:8f:f0:ff:d7:a9:1d:ee:a0:fc:65:49:fe:
         ef:83:be:62:77:34:3a:e5:ae:5e:e3:01:6a:76:79:14:14:08:
         29:da:81:b6:3b:17:d4:fb:2e:f1:40:a9:17:e9:76:2f:28:57:
         86:4f:2a:6c:93:40:19:65:1a:50:c7:f3:58:1f:74:46:18:a6:
         f3:a8:25:6a:ab:99:54:a5:5f:4a:c5:c5:4f:77:ce:17:02:d4:
         dd:d2:c2:53:cc:7d:2e:05:43:73:89:42:89:20:85:bd:94:45:
         6e:c4:79:4d:55:58:d8:53:74:fc:fb:18:af:36:74:78:f0:7b:
         8b:a4:e9:bf:39:6d:a4:e3:c8:72:fe:06:eb:c9:21:46:7c:8c:
         5b:02:fb:e5:9d:f5:c1:d1:ab:20:65:86:18:5e:03:9a:75:d9:
         28:88:3e:6a:77:c8:17:81:6e:55:15:1e:2f:d8:88:af:3b:56:
         74:58:db:37:58:88:b6:9e:d4:a8:3d:3e:11:d4:e0:90:a7:db:
         07:f9:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 19:00:41 2025 by rpki-client