Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa
File:                     83a9fd6b-1dc1-43d8-975b-de4fce896249.roa (raw, json)
Hash identifier:          wLOiYikT+nwnNKT5CREmeBK8g38ljL/qMIYt+Ui+WlY=
Subject key identifier:   2F:42:23:72:1E:11:F2:3D:92:D6:04:8E:84:90:2B:E7:87:F9:E5:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19F5B81BB41C3AC619F45EED1312DF91508E793E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa
Signing time:             Tue 24 Jun 2025 00:30:21 +0000
ROA not before:           Tue 24 Jun 2025 00:30:21 +0000
ROA not after:            Tue 29 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f5:b8:1b:b4:1c:3a:c6:19:f4:5e:ed:13:12:df:91:50:8e:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 24 00:30:21 2025 GMT
            Not After : Jul 29 23:59:59 2025 GMT
        Subject: serialNumber=7f4f1b85ff1b5a42347f27345b169fafa018db4911d3db78bc4354b16751559b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:19:62:6b:4d:b4:0e:e2:ca:c8:c5:b5:a1:
                    88:fa:83:af:ac:17:df:53:e1:9b:00:ab:fb:b6:66:
                    bb:b0:83:af:98:d5:dc:36:bb:ab:e6:f7:70:fb:db:
                    14:69:05:7f:f6:13:b3:c5:8c:b4:d9:31:35:f1:a8:
                    f4:04:a1:90:53:ed:a9:6b:1e:76:fd:b4:6f:91:5b:
                    86:63:b3:31:2d:81:2c:c9:be:48:77:8d:af:09:55:
                    04:f2:6a:e0:ae:02:1d:94:fa:dc:77:58:a8:7d:cd:
                    22:87:6f:b1:86:8d:90:08:d6:d2:34:00:fd:29:fb:
                    8d:c3:90:f0:3e:7b:c7:22:22:f3:c2:06:d9:8f:c2:
                    68:31:2d:4e:e8:d3:a7:e0:fc:25:aa:5c:9e:d8:34:
                    ce:e2:07:1e:f5:2a:c2:23:34:29:42:99:01:32:b0:
                    c6:0b:cf:54:27:55:1f:c7:69:25:11:11:01:35:f0:
                    d9:8b:0a:a6:8b:ae:5c:78:b6:b7:a8:02:2f:9f:cf:
                    06:8d:63:6b:65:73:45:df:4e:50:32:86:43:3d:0f:
                    8c:cb:3c:76:0e:a3:e2:d2:f0:79:35:c5:1d:de:65:
                    84:14:91:bb:bd:4a:30:9f:8f:5c:f6:e0:d5:2b:8c:
                    dd:a2:2d:db:e8:5c:a9:ba:5d:2e:d9:67:20:3e:c8:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:42:23:72:1E:11:F2:3D:92:D6:04:8E:84:90:2B:E7:87:F9:E5:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:e8:f8:4f:74:84:e8:1a:f7:2f:67:fc:50:67:30:5b:ac:
         b6:c3:7d:4a:00:71:4f:5e:48:5f:ef:f8:95:3e:6c:d9:fc:e0:
         22:6a:8f:e8:83:16:e1:30:de:4d:67:bb:a8:3c:97:36:0e:40:
         46:76:31:77:56:29:b2:11:02:3d:14:37:91:f5:1e:06:7d:b6:
         ac:e2:b2:c3:a9:59:32:45:1c:b2:da:47:39:43:c9:29:09:fb:
         a4:e2:1f:7c:8e:76:90:ff:a6:3f:ee:7a:c4:03:0e:8e:b6:de:
         31:7d:6a:25:d2:e5:d0:f4:cf:f8:f9:89:4c:70:74:b0:0e:6f:
         9c:b9:81:56:de:59:01:89:61:2e:1b:d1:62:d0:fe:e2:5e:e0:
         a8:4c:1e:4e:c5:6a:ce:d2:06:d4:f0:2f:35:b7:67:76:3b:0f:
         d9:49:86:9b:6d:a7:65:82:9e:18:e4:68:30:8a:0e:12:06:45:
         6c:a7:03:71:83:8c:22:59:85:19:1a:54:26:27:e3:43:0a:b3:
         47:f3:05:b1:4b:9b:0b:2e:8b:14:67:0f:2e:a0:d2:50:1d:a7:
         36:03:be:4d:76:ba:1a:ad:44:2a:c3:e7:f7:c0:f5:1f:c9:3a:
         4c:b4:93:d7:df:8f:ac:da:06:c2:1a:66:c7:e0:a4:a6:99:b1:
         bf:c7:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:16:23 2025 by rpki-client