Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
File:                     6c4ab783-ed8f-407b-a600-2e828e4c1279.roa (raw, json)
Hash identifier:          54xOT/jDLMh6ltxHTxSDS5uGG24Klw4nhCsyZp0yBpU=
Subject key identifier:   DE:ED:2C:6C:8F:D6:8A:3B:08:B4:49:AC:14:50:D3:15:8E:24:3E:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46D05FAE2730AA20A87738D094CBDE6E632FDAB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
Signing time:             Mon 02 Jun 2025 15:31:15 +0000
ROA not before:           Mon 02 Jun 2025 15:31:15 +0000
ROA not after:            Mon 07 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d0:5f:ae:27:30:aa:20:a8:77:38:d0:94:cb:de:6e:63:2f:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  2 15:31:15 2025 GMT
            Not After : Jul  7 23:59:59 2025 GMT
        Subject: serialNumber=11f4a6b94ebc8caa366ea2f2cb18753562b9a8571aaee27c44d2bc0dfa844c2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:d4:92:ea:5c:8e:b6:01:68:95:0f:cf:1b:
                    a5:b4:7d:d0:1b:fd:86:3e:75:9c:46:43:70:fa:92:
                    89:f9:4f:a3:d5:5a:47:7b:29:01:af:bd:0b:e0:2d:
                    4f:1d:35:ab:6a:5e:85:e0:f1:cd:d9:ed:71:4c:13:
                    33:46:d6:a5:6a:83:e0:56:74:96:8d:c5:a9:a4:a4:
                    69:69:43:1c:dc:80:44:03:b6:63:59:9f:26:0e:ce:
                    0d:92:85:cb:f3:55:da:13:d9:98:fc:f4:90:2f:80:
                    ff:54:ba:46:dd:68:da:a0:67:4d:52:85:f4:f0:ea:
                    6a:95:40:dd:b0:ba:2c:e9:5d:15:23:fd:5b:e8:30:
                    5d:51:b1:34:33:d6:b6:b4:a8:ef:42:8d:9a:42:cd:
                    fc:6c:15:94:3a:b0:6c:36:29:5d:21:1f:27:fa:b7:
                    7f:c1:2a:25:23:4c:c1:a7:f8:9c:3d:49:93:21:e2:
                    de:1c:19:dd:b5:b4:62:7e:fd:9a:0a:c4:05:90:26:
                    c5:7a:c9:a2:8c:33:30:e6:18:62:63:af:30:b2:a4:
                    41:b2:0a:74:1a:0a:8f:fa:8d:a7:c6:61:ed:5a:f7:
                    32:9d:81:20:69:4a:3f:ac:8e:d2:f0:71:f2:29:2d:
                    90:ef:71:95:a6:37:91:21:2f:72:44:66:03:1d:10:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:2C:6C:8F:D6:8A:3B:08:B4:49:AC:14:50:D3:15:8E:24:3E:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.223.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:54:3a:b2:29:11:e8:92:3a:d4:b7:88:d7:bc:7f:b1:88:74:
         ef:d7:79:23:48:2d:16:6b:64:0a:00:1c:fd:1a:d1:5d:b1:c7:
         fd:12:1b:42:da:0e:9a:ac:76:02:26:52:fd:db:e8:ba:3f:5a:
         7e:f2:54:dd:d6:f7:82:4b:0c:69:df:f6:fa:8b:81:40:98:3e:
         30:9f:4e:75:85:e7:c6:26:01:ac:d5:90:ef:ac:27:ef:2d:7d:
         52:24:73:16:8a:0c:96:49:d8:5e:19:24:8a:99:0a:a1:b4:1f:
         de:1e:85:8b:43:c0:04:e3:93:32:b3:34:7e:b2:1d:8f:20:29:
         e3:90:f2:99:cf:42:0e:c0:de:3b:93:30:b6:c7:7e:2c:30:b1:
         e1:34:f1:22:ec:f7:ff:55:3a:ad:44:2b:aa:cc:fb:2b:4a:b7:
         bc:42:a8:38:bd:b0:01:7c:0c:b9:5a:f3:9f:43:bd:f6:15:54:
         10:52:91:dc:2b:ab:da:f5:eb:2d:46:73:54:f6:01:ab:79:cf:
         d1:4b:3a:0d:f4:88:c8:40:b5:a6:6c:09:a2:71:e8:eb:1e:b5:
         7b:29:30:60:83:cf:11:b4:81:b3:ac:48:68:09:60:21:af:dd:
         f7:e9:01:18:0c:65:55:c2:cf:96:e0:b5:0c:fa:75:38:7f:bb:
         41:e1:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:37 2025 by rpki-client