Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa
File:                     92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa (raw, json)
Hash identifier:          7OdCNZtuTHcR/y0ZnzG3Zhr71soHVm2/XFpvvo1LcT8=
Subject key identifier:   AA:D7:35:8B:B7:93:C1:A5:6D:F0:73:DA:F2:99:6D:0A:D2:B3:BE:10
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35CA844B5E2DA098E7A7EE7F3A2DA54FA278EB0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa
Signing time:             Mon 01 Sep 2025 15:00:22 +0000
ROA not before:           Mon 01 Sep 2025 15:00:22 +0000
ROA not after:            Mon 06 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        103.27.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:84:4b:5e:2d:a0:98:e7:a7:ee:7f:3a:2d:a5:4f:a2:78:eb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  1 15:00:22 2025 GMT
            Not After : Oct  6 23:59:59 2025 GMT
        Subject: serialNumber=898a5183f2e81562bacd093f89369a204a20ad93ce2e63e0b0e1db5fa98844de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:57:6e:e2:db:24:cd:ff:58:35:80:72:b6:
                    ef:30:d5:c5:98:ec:46:9c:0f:16:b3:da:15:79:2d:
                    80:b8:0a:a9:36:fd:aa:b1:39:f5:0a:a9:41:80:a9:
                    ad:3d:50:e7:f9:d9:99:81:76:d8:a2:2b:44:6a:c5:
                    68:26:de:2e:05:66:50:20:79:c1:fd:55:c1:05:79:
                    cb:65:78:79:b7:f2:85:15:52:e2:66:65:f0:56:90:
                    cb:38:d5:78:19:6e:10:99:0c:60:ac:fb:f9:0b:24:
                    95:4b:c6:ca:63:e5:76:d3:1c:00:ff:22:cb:6f:b4:
                    06:52:f0:4b:4a:ee:b2:bd:aa:a2:e2:a9:87:8e:2f:
                    9c:e2:b2:ba:68:05:63:29:eb:34:29:dc:2e:ec:ed:
                    e2:60:0d:32:ac:f6:e3:c3:c6:4f:e0:33:dd:7a:e6:
                    84:11:aa:5a:1c:78:0d:7f:7c:39:64:58:45:f4:53:
                    5d:cb:88:e0:e5:72:01:e8:5f:27:60:00:e4:9d:c0:
                    6f:dc:72:ca:c6:55:ec:4e:fc:35:c4:f3:02:9a:b3:
                    c3:f3:22:fb:b0:e9:8c:bb:8a:7f:c8:32:1c:61:66:
                    e0:8c:f9:85:97:d2:8f:54:ad:2f:de:ca:12:45:81:
                    1a:b2:8a:ba:e8:0a:8d:21:c4:6c:9e:90:50:34:74:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:35:8B:B7:93:C1:A5:6D:F0:73:DA:F2:99:6D:0A:D2:B3:BE:10
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92fc26b6-0b65-4d7c-914e-e7d87a7c9b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:a9:e7:29:e9:50:1a:44:a4:29:6a:87:f0:d5:7f:aa:ad:
         df:2f:91:82:ec:46:7b:75:30:13:f8:92:98:68:6b:11:a9:d7:
         5e:61:fe:8b:c2:2d:68:6e:2f:32:04:0f:9c:da:d9:07:f9:a3:
         2b:3c:cc:ab:45:f1:c3:29:83:be:0b:af:69:54:f0:cc:4c:30:
         cd:91:4a:09:ac:36:4e:d6:f1:6a:35:10:48:39:b4:25:8b:00:
         85:61:23:4f:9d:11:b4:96:06:47:bd:5f:46:ea:d0:23:14:d5:
         21:07:03:e1:23:a7:c6:62:c3:d1:06:2e:3c:d7:80:79:c6:6d:
         b2:65:20:6b:0d:e7:b3:7e:89:96:46:09:42:95:3b:b4:65:d9:
         3c:c4:2e:2d:77:aa:d9:14:d5:94:4a:28:9e:7a:62:68:66:17:
         e0:af:6f:02:d7:f2:3b:b4:c1:05:4d:44:a2:b5:b9:8c:24:3c:
         e1:f4:67:84:e9:f2:3a:65:c7:81:57:4a:33:63:3a:87:aa:b1:
         60:8e:25:dc:2d:08:68:ff:84:b6:7e:d7:6f:5d:5f:e4:f4:c7:
         03:48:50:a6:7d:4f:95:00:99:4a:ef:76:65:3f:ce:15:4c:e7:
         46:5b:25:e5:78:5b:d1:c9:00:b8:a9:d9:02:17:31:61:32:28:
         62:e0:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:18:54 2025 by rpki-client