Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d1b808-e86d-4470-94d3-43f282680e9f.roa
File:                     31d1b808-e86d-4470-94d3-43f282680e9f.roa (raw, json)
Hash identifier:          M/fiHSkxcSaIK1mM17zSUYcif2v3MBzlXyOkEWHIvXc=
Subject key identifier:   5A:8B:B8:30:68:F9:24:89:79:D3:BA:3B:3B:AF:2C:2D:3E:9B:DB:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26F9F3BB3FE13C98FEF77E2E046698C6856E4F3F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d1b808-e86d-4470-94d3-43f282680e9f.roa
Signing time:             Mon 19 May 2025 17:11:51 +0000
ROA not before:           Mon 19 May 2025 17:11:51 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        134.127.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:f3:bb:3f:e1:3c:98:fe:f7:7e:2e:04:66:98:c6:85:6e:4f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 19 17:11:51 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=e6c143d287d439614321b7c9b635d1dcd08dc56d1623f73dcf4e63e1d8e3e755, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:89:c1:03:e8:05:16:04:1d:02:14:26:1d:
                    a1:c7:23:cf:90:ca:09:38:3d:a1:8a:30:f0:53:db:
                    62:e9:1b:69:a2:9c:5b:d5:bc:95:16:48:eb:76:cf:
                    ad:29:bc:b6:c2:c1:5e:1c:9a:89:2e:a4:14:10:19:
                    da:d6:71:fd:75:5c:1e:50:87:6f:8e:6f:54:a5:16:
                    c5:95:45:17:36:71:cd:2c:c5:85:27:b7:b2:94:07:
                    f7:62:06:63:56:5d:ce:4f:66:ee:d6:74:c9:10:70:
                    ac:57:4e:9b:f1:79:36:17:e5:45:fc:5e:23:1f:cc:
                    5c:68:07:33:4b:ba:81:d2:fb:23:4b:24:5a:71:aa:
                    2d:81:f7:5c:48:cd:d4:52:c8:9a:5c:3b:4d:6b:7d:
                    99:5a:a7:42:4c:ed:72:85:79:54:a9:ac:4e:3b:0a:
                    a1:a0:e1:07:55:51:42:41:cf:2e:43:2b:41:95:56:
                    9c:ae:cc:04:a2:7d:5f:02:ee:bc:ac:5e:7d:a9:8a:
                    9e:0d:65:ff:6d:cc:aa:a9:a1:e6:db:ee:65:ed:2f:
                    cd:0f:a0:fa:e0:ad:d3:1e:df:b4:c3:6d:1e:49:10:
                    b6:f5:a0:86:d0:f2:61:1c:2d:fe:98:2a:82:74:af:
                    cf:27:50:50:6b:f4:ec:23:22:85:3e:11:ff:c5:63:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8B:B8:30:68:F9:24:89:79:D3:BA:3B:3B:AF:2C:2D:3E:9B:DB:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d1b808-e86d-4470-94d3-43f282680e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:2c:3f:58:26:1d:0a:4f:83:d6:2e:d8:7b:c9:72:a2:76:42:
         12:47:6c:6e:cb:26:d7:a9:60:9d:ca:cd:2f:ec:6b:32:86:bf:
         58:bd:b3:89:19:fb:13:d6:33:6f:d4:60:14:e1:08:65:6a:42:
         07:de:c3:61:7a:e8:50:68:2a:97:8b:26:bf:89:2b:3d:a6:fd:
         27:92:72:4e:17:11:03:96:91:b8:d4:df:77:c1:45:67:8c:bb:
         e9:56:d9:d9:c0:3d:19:28:b9:22:cf:e9:49:03:b6:4d:56:50:
         59:9a:8e:34:24:73:1a:30:2a:01:06:28:7f:36:4c:9d:49:8b:
         8e:83:90:4a:f9:23:f5:8c:f6:33:fd:2f:07:b6:cc:5d:97:d4:
         56:2a:1d:5d:45:d6:30:1d:8a:c8:84:0f:75:9b:c3:4a:74:9f:
         b8:a2:ab:dc:90:5c:ac:70:5f:42:f3:c5:b1:44:f5:a5:c6:3f:
         fe:71:f7:06:c9:2b:48:78:30:f4:ff:d1:f7:d7:cd:31:84:44:
         27:ec:f2:f3:21:05:01:6b:36:33:f5:bb:6a:cd:71:03:68:1b:
         e8:43:6e:6b:48:81:c3:40:9d:7e:d5:19:1c:0b:45:13:91:5b:
         05:d6:f8:91:a3:11:2a:48:5d:a2:81:d1:3d:af:7c:a9:46:93:
         c7:1b:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:25:56 2025 by rpki-client