Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ff46db4-f6d7-408c-9575-f57385485cde.roa
File:                     4ff46db4-f6d7-408c-9575-f57385485cde.roa (raw, json)
Hash identifier:          z89shWEY/U/xPmhkIkbuiE1BxQ3T21l9viq27d3A0aw=
Subject key identifier:   2F:AE:EC:FC:18:02:76:F3:A7:EF:5A:96:8F:5F:20:88:43:A5:FE:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       F2B87017389676542CD196AF07BFD6E7CF8B45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ff46db4-f6d7-408c-9575-f57385485cde.roa
Signing time:             Mon 26 May 2025 15:10:14 +0000
ROA not before:           Mon 26 May 2025 15:10:14 +0000
ROA not after:            Mon 30 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        83.160.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:b8:70:17:38:96:76:54:2c:d1:96:af:07:bf:d6:e7:cf:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 26 15:10:14 2025 GMT
            Not After : Jun 30 23:59:59 2025 GMT
        Subject: serialNumber=de2a91d7fbd1a35dfb619a8afccb9fe04d555b7ecb351f69b3e7f67fa4e27d8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:ac:dd:2c:a8:e2:27:41:c3:e4:65:e3:c1:
                    f9:b9:72:35:f1:5f:8e:d2:9a:7f:59:82:af:78:5a:
                    04:6b:a2:e5:c7:d4:60:23:7c:34:e2:54:9a:80:47:
                    19:f8:b9:cc:94:99:43:02:9c:94:ea:d2:6d:96:ca:
                    aa:e6:12:fa:75:0f:a0:0a:13:d3:bf:2c:c2:05:57:
                    f0:fc:92:f7:f2:6b:51:d7:74:a9:ee:3b:81:7a:d6:
                    67:05:31:d0:e3:11:f8:48:42:fe:29:f7:1a:48:52:
                    17:4f:6c:05:f9:4b:8f:42:8a:8b:00:c8:0f:15:41:
                    df:07:b5:0c:e5:b2:81:f3:0c:8d:ab:01:c6:44:55:
                    c6:01:4a:0f:60:af:78:4c:78:d0:20:ff:09:6c:37:
                    f7:fb:49:08:dd:9c:16:06:75:0a:ec:ea:40:a6:6d:
                    0c:0b:d1:99:6b:8a:b5:d8:94:7d:fe:9b:29:fb:2b:
                    7c:62:57:d5:ec:b6:84:ae:d0:b3:c9:b6:44:ab:a3:
                    eb:b6:9c:5f:a4:8e:20:29:73:18:d7:93:fb:42:47:
                    30:a3:f4:3a:33:73:0f:09:77:c2:9e:be:a7:a2:c9:
                    8c:de:81:1a:1a:47:93:24:c4:50:49:fc:1f:84:16:
                    5d:98:49:11:b8:56:32:0f:25:84:57:fb:9c:a0:4a:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AE:EC:FC:18:02:76:F3:A7:EF:5A:96:8F:5F:20:88:43:A5:FE:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ff46db4-f6d7-408c-9575-f57385485cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         33:79:c5:67:2a:d8:f5:44:26:b3:23:31:42:a3:c2:88:9e:a7:
         d5:d6:48:4f:9c:6c:45:f2:2e:08:a3:f1:a9:16:c5:7f:d2:c3:
         fd:3a:f3:71:91:3c:e7:e5:d0:1e:fd:1a:37:01:ca:6e:45:19:
         10:d7:d4:3c:df:b8:fa:9c:21:8f:76:12:a6:7a:8f:ad:3c:88:
         02:95:8e:90:dc:c8:8d:04:ee:bf:67:f3:c3:a8:97:9c:67:14:
         6f:97:6a:67:1a:86:0e:ea:7e:bf:21:d9:5a:c7:19:92:5f:2b:
         a6:d5:fd:4a:6e:f0:52:43:ab:78:cb:fb:6f:19:2e:dc:a2:9d:
         ec:bc:b2:c3:3e:fa:79:86:0f:0f:82:2a:28:34:e7:30:cf:35:
         cc:53:49:0f:64:ba:ff:92:46:d1:da:da:69:d9:a5:86:ae:64:
         55:1f:7d:1c:b0:2d:54:f3:9e:2c:3b:76:49:7f:00:7e:02:d7:
         a6:37:82:80:28:7c:20:f7:5f:b1:97:29:1c:b8:03:1e:29:70:
         9a:1e:b6:d0:38:f2:1b:72:75:d4:3f:5f:18:d5:39:fc:d4:f7:
         1c:69:80:e8:5d:c3:43:bc:6e:71:ce:fd:4b:ac:0a:0b:f2:df:
         9d:4d:f0:f2:ea:77:74:27:5f:68:7f:3c:00:47:ad:81:28:88:
         20:29:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:54:05 2025 by rpki-client