Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
File:                     3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa (raw, json)
Hash identifier:          J48x2AdV6pm/ulTtBTA4NNY15Q8OenUs/gf37dUP8g0=
Subject key identifier:   B2:A1:38:24:74:04:07:88:A8:61:1A:02:C3:9B:A1:FB:71:2F:82:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58542768390848E3C242B3A6B138CE76202C8718
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
Signing time:             Sat 24 May 2025 00:21:39 +0000
ROA not before:           Sat 24 May 2025 00:21:39 +0000
ROA not after:            Sat 28 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        63.246.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:27:68:39:08:48:e3:c2:42:b3:a6:b1:38:ce:76:20:2c:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 24 00:21:39 2025 GMT
            Not After : Jun 28 23:59:59 2025 GMT
        Subject: serialNumber=f1bbd61decd61976a41056c6c8021b403e1106eea4e53a0d4bdc41e48b84bc51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:83:95:de:e9:5f:6f:e8:5d:8a:90:fa:7b:
                    32:93:ed:92:33:f4:01:56:54:91:23:0c:92:34:28:
                    94:5c:48:d2:cd:ab:44:b6:d1:b3:98:cd:af:c4:83:
                    75:34:ea:d7:06:bd:97:5d:04:07:60:9c:ae:6a:bb:
                    0e:af:87:4f:f6:97:77:8e:51:9b:1f:1b:00:87:66:
                    89:11:7b:43:80:3d:c7:b7:f3:fb:21:0a:78:d6:a7:
                    b5:00:b3:e7:ab:d1:87:5f:0b:c2:54:4e:1b:5f:6a:
                    a1:ab:99:d0:90:aa:fc:98:fb:17:ad:7c:11:a9:27:
                    ba:03:2d:db:b6:4c:9c:e6:18:33:50:d5:23:51:6e:
                    53:66:0c:9d:f7:02:68:d0:08:b9:96:9b:5e:6b:46:
                    a7:66:85:a1:b1:cc:74:99:55:1b:eb:f1:ad:b9:5d:
                    28:de:b7:ec:7b:fc:aa:ed:64:6f:40:a4:5e:cd:ff:
                    53:66:02:60:55:4f:48:94:a3:86:b8:60:6d:c3:71:
                    f8:d1:dc:93:2c:4a:c2:7d:e3:34:3b:07:36:5f:ea:
                    e5:5d:a4:d4:03:3d:dd:35:02:61:f9:68:e2:f5:c7:
                    08:40:5b:c2:75:10:c4:a5:b1:a4:ab:ba:37:26:58:
                    a4:bc:d0:2b:8c:00:c8:29:3f:d6:bc:77:2d:aa:cf:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:38:24:74:04:07:88:A8:61:1A:02:C3:9B:A1:FB:71:2F:82:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:fc:99:0f:0a:11:1e:43:71:2f:ee:26:00:3d:61:af:a0:
         10:07:fa:aa:c3:89:02:de:30:ec:27:5e:ec:6b:12:c3:45:fc:
         ca:02:c6:54:ed:f7:9c:04:b0:38:a9:cf:78:fa:af:0e:21:91:
         b6:1f:1a:23:ba:f7:5d:81:cd:60:7f:ef:73:cd:da:c1:1d:4d:
         f8:d8:14:bf:43:24:8e:63:b8:aa:77:b4:a3:e9:f5:6d:2d:43:
         cf:d5:4a:ba:5d:fb:5c:d6:83:75:63:71:35:82:7f:07:5b:9a:
         51:f3:b5:ad:cc:3f:b6:04:89:a5:ae:74:42:8c:3c:bb:3a:3c:
         7d:50:0c:ce:8b:4c:80:71:52:fc:3b:50:27:76:c6:3c:91:5c:
         5c:d7:27:cc:f7:af:3c:f5:43:72:b2:8d:b2:f9:fb:1b:34:33:
         b2:2e:39:7c:78:7d:d1:c1:fa:12:a2:9f:35:ca:38:d0:f0:a1:
         bf:d1:c8:66:1a:2c:9d:dc:93:11:ac:b9:0a:3a:cd:33:62:a7:
         fe:f5:89:ae:44:ba:ac:55:ad:01:81:64:32:20:66:97:00:87:
         ed:67:f5:87:32:ef:1c:8c:bf:1c:fe:3e:86:0c:ee:5a:a8:35:
         e3:9a:69:e8:62:70:59:0c:b4:d6:f6:ca:bb:87:b8:d2:39:ff:
         d1:55:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:26:55 2025 by rpki-client