Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa
File:                     cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa (raw, json)
Hash identifier:          f2ziURwy/K/NPX3uiTRpordDH7W8b4DZn9VpPyS6fzw=
Subject key identifier:   0A:04:95:86:F5:4E:79:89:4A:C4:5F:29:1C:03:A2:50:72:54:37:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03A8630702D360A0D2274312D12A189AF2CC4EBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa
Signing time:             Tue 20 May 2025 15:02:05 +0000
ROA not before:           Tue 20 May 2025 15:02:05 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.246.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:63:07:02:d3:60:a0:d2:27:43:12:d1:2a:18:9a:f2:cc:4e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 15:02:05 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=4b7a6b7030a1ed37afda88b72bfa6b5ac1b79d98c2d107eeb25d9f799c9e0ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:66:8d:b5:c2:fb:04:53:ad:37:f9:aa:06:
                    fb:46:4f:ef:e8:9d:12:35:8c:6b:cd:81:22:66:c3:
                    ef:82:16:c8:c9:5e:e6:fa:bb:57:13:3c:5f:71:9b:
                    97:62:35:e1:00:55:fb:0e:36:44:85:60:09:83:4b:
                    8a:be:ba:e9:33:07:be:21:84:6e:fd:a5:61:75:99:
                    ba:43:87:77:35:3a:48:e8:b6:01:26:45:4b:db:8e:
                    75:18:30:2c:d3:8d:82:93:2b:08:92:30:62:65:76:
                    fe:23:c3:35:8a:5a:c7:9e:f1:31:d5:cc:bc:97:19:
                    aa:27:8a:2f:44:44:eb:4f:5a:b1:bb:46:6a:61:b9:
                    76:92:dc:46:e0:eb:c5:03:fb:3b:6c:c5:45:fd:5b:
                    41:89:70:42:e0:ad:c4:4b:3b:d7:15:b1:cb:fc:8d:
                    72:fb:53:d0:49:91:af:b1:77:86:89:3f:a8:4c:0b:
                    c0:ad:c0:c0:b7:c0:04:c0:b3:a9:be:22:53:c4:05:
                    c1:1e:9d:9c:1e:46:e2:c8:f2:4f:73:e8:84:13:a9:
                    32:f6:01:ec:68:fe:77:8c:21:cb:0b:c9:00:eb:e3:
                    e4:22:78:c7:c6:9a:98:73:36:93:a9:8b:b8:df:b3:
                    b6:44:05:dc:21:bc:74:c8:9e:fe:1b:0e:e4:c9:97:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:95:86:F5:4E:79:89:4A:C4:5F:29:1C:03:A2:50:72:54:37:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:e4:79:0f:e2:ba:ed:54:31:8d:94:37:70:dc:8c:7b:7b:
         0e:4b:b3:9f:68:02:4f:f4:4a:86:aa:80:8c:30:19:c1:6e:03:
         0a:9b:db:d8:53:c2:ae:0e:c3:6e:85:ff:78:94:eb:fb:47:92:
         c2:df:95:74:59:0e:88:b4:8f:c9:76:6b:24:17:84:90:03:e0:
         56:f1:a2:97:6f:04:bc:d9:de:09:4b:6d:05:30:58:ff:b9:f6:
         e5:1f:26:07:be:50:ae:87:7a:28:79:53:24:2c:3c:e3:71:60:
         74:a0:10:2f:86:27:07:4a:47:6e:8b:98:11:36:37:2b:72:19:
         c6:2c:93:0c:3a:0a:d2:cc:da:17:59:c4:67:0f:90:20:68:7e:
         8c:ae:dc:eb:f2:bf:a6:fd:0b:33:51:af:86:5c:bb:6c:9d:95:
         4d:a7:9a:61:29:a6:92:29:59:45:f0:21:53:7a:2b:c8:b0:c0:
         e5:0f:0f:89:2b:c4:9a:06:31:4e:0d:85:b2:0c:8a:5e:fc:be:
         91:f0:4e:55:71:d0:9b:c9:8f:d8:21:c8:9a:7d:ee:56:cc:d9:
         35:82:c9:12:f7:97:22:dc:5e:0e:68:e0:ad:46:f2:fb:45:9b:
         fa:0d:9a:98:21:89:a1:8e:10:82:11:b5:38:70:b8:50:92:3b:
         95:e4:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:36:33 2025 by rpki-client