Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa
File:                     d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa (raw, json)
Hash identifier:          qq8LOPk4l+gwuM+XOZHWAh5Wo0FVt5LjVSkHdig0gDE=
Subject key identifier:   4D:E5:6D:4E:D8:69:94:31:B6:D0:A5:BA:6F:E2:B0:4A:7A:1D:C6:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34063A6E55478AE830F2A4D343AB80D5E9166FDA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa
Signing time:             Sat 07 Jun 2025 00:20:27 +0000
ROA not before:           Sat 07 Jun 2025 00:20:27 +0000
ROA not after:            Sat 12 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:3a:6e:55:47:8a:e8:30:f2:a4:d3:43:ab:80:d5:e9:16:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  7 00:20:27 2025 GMT
            Not After : Jul 12 23:59:59 2025 GMT
        Subject: serialNumber=38a7111735bdfeba63bb1ae24d9762051e32c8cea0871774ab6aa2143260ae6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:97:b0:b2:45:0b:24:ac:e9:36:96:c3:db:
                    6e:fe:a5:0d:32:79:89:84:6b:ff:56:59:b5:98:83:
                    3c:74:b6:0e:6b:a1:a2:27:68:43:14:0e:e4:36:60:
                    bb:0c:13:b0:5e:f1:5c:fd:59:e5:4f:19:52:f1:c8:
                    db:2c:7e:71:0f:d8:f6:5a:2a:d2:6b:66:c2:7f:c8:
                    40:49:0f:93:9d:ae:e2:43:d9:c5:e6:a6:10:ee:b6:
                    4d:b0:d4:fe:65:e3:30:e7:b8:2e:dd:8d:a1:99:3c:
                    bc:d0:92:93:de:7b:d1:d1:6a:1e:63:86:71:60:22:
                    1c:66:3c:cb:df:66:c8:44:f3:be:7b:0e:13:1e:94:
                    28:24:46:ce:68:35:17:b9:61:c6:8f:db:68:62:a7:
                    28:43:72:96:da:e9:66:17:0d:97:eb:ea:15:76:7b:
                    5f:ba:4b:1f:db:63:ff:4e:55:df:d8:c9:8f:e6:f7:
                    dd:0b:2e:7b:e4:17:55:b6:68:e0:0f:19:94:b5:41:
                    57:00:14:f8:a1:4f:c7:12:38:93:aa:4a:0c:d1:92:
                    fd:49:3c:0f:6c:c8:19:26:4e:d4:cf:1d:a6:e8:f3:
                    29:46:f6:fd:ab:89:65:6d:8e:c9:81:a3:e8:b1:23:
                    4e:00:46:c6:bc:ec:8c:9d:91:9f:60:c0:73:42:c1:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:6D:4E:D8:69:94:31:B6:D0:A5:BA:6F:E2:B0:4A:7A:1D:C6:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cd4340-f8db-4c6e-a844-f4a2db0f0021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:39:81:42:0b:72:6c:d8:0a:62:da:c6:32:b3:95:6d:68:
         19:2d:6a:f7:ef:1a:6f:3a:b8:26:15:e6:7d:c4:b5:3e:8b:80:
         a7:9c:8a:17:9d:64:96:5e:fc:14:69:db:9c:a0:af:cd:83:ba:
         42:31:46:bb:03:e0:b6:d6:fe:c9:98:18:de:8d:fc:ac:55:e1:
         44:23:08:8d:6b:8c:aa:7f:f0:90:4f:89:ee:a3:4b:1d:3b:cf:
         dc:04:f4:35:65:b4:2b:18:e8:d7:9b:6f:fa:b6:20:b5:79:56:
         d6:42:cc:ab:90:c1:5a:44:e8:e5:a6:05:72:14:6b:00:1e:47:
         26:10:e0:7d:7f:50:8e:ba:22:1f:37:5f:b3:e9:db:81:93:ef:
         41:11:9b:f3:74:d0:5c:86:1b:6a:1f:6f:93:42:6d:7f:1d:f7:
         43:e1:88:2e:3a:7d:ff:4f:c0:13:9c:94:67:15:6d:95:ad:0c:
         b7:da:f0:c7:8a:68:4b:86:c5:3d:38:60:72:a3:5e:2c:80:cc:
         d5:af:05:48:58:53:66:27:73:51:b2:be:37:e6:cf:2b:cb:3a:
         96:b7:10:34:b7:f8:20:cf:d6:5d:ad:6d:c3:3a:75:4c:a6:0a:
         ce:de:07:58:41:75:51:93:b1:09:4d:ef:42:be:d2:b2:26:05:
         66:13:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:12:57 2025 by rpki-client