Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa
File:                     c6da0220-4baf-4a3e-b3be-24321f963d36.roa (raw, json)
Hash identifier:          lTLVWbVK1gvHtgTG+GHpdNbFh4aCLHcxtCINQgI4C9k=
Subject key identifier:   B3:1B:06:14:CF:58:02:08:3E:43:8E:21:5B:D1:4F:5A:C3:15:6C:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FE4B686A59F55151FA022A3C7300165331E4921
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa
Signing time:             Tue 19 Aug 2025 00:11:36 +0000
ROA not before:           Tue 19 Aug 2025 00:11:36 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.13.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:b6:86:a5:9f:55:15:1f:a0:22:a3:c7:30:01:65:33:1e:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:11:36 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=95d0640b1fccdf90a8eed96ea5ee353f411247c03c9b8714d9c7edba3dce84f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:3e:d1:a9:bc:81:6a:89:16:30:4e:34:14:
                    71:bc:10:81:ae:79:9f:89:80:c5:5f:71:4c:0e:28:
                    92:9f:f1:4a:e8:66:21:2a:d4:f9:32:ec:7f:1f:25:
                    15:bb:48:e3:a0:02:e1:31:cc:b4:15:04:60:5e:6d:
                    77:30:64:32:a5:98:c7:eb:e7:09:74:b6:c6:fa:69:
                    8e:5e:68:a4:3c:7e:ad:0e:b9:f5:25:8f:97:8a:21:
                    03:1f:3f:d6:70:63:1b:c8:00:14:20:0c:e5:5a:25:
                    7e:bf:b0:e6:4d:94:3f:b6:b6:7d:09:dc:0b:a4:2b:
                    ee:2d:9f:60:75:16:53:b4:35:33:d7:33:a6:86:8c:
                    5b:96:c6:b6:62:f4:7f:e9:72:cc:62:67:ba:b2:41:
                    f4:4d:07:a9:54:8b:16:5d:06:b4:77:90:27:9c:09:
                    e2:0e:55:a3:fd:95:b7:4c:da:42:f5:87:0a:14:c1:
                    96:8d:30:3f:3c:b9:0f:30:bb:1b:4e:1e:1f:b7:8e:
                    5a:a7:b6:f7:e8:95:ec:60:f1:03:c7:22:1a:8e:34:
                    3d:c8:f1:80:73:28:57:9a:ed:14:2f:3a:95:a3:b6:
                    84:56:5c:3d:33:0e:70:6f:98:21:16:25:1a:69:1e:
                    ed:4b:c5:70:eb:17:e6:fd:93:7f:fd:d8:05:a6:fe:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1B:06:14:CF:58:02:08:3E:43:8E:21:5B:D1:4F:5A:C3:15:6C:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:af:34:dc:40:56:f4:a9:0b:9d:ab:f0:81:04:9c:2c:55:fc:
         42:7e:ce:b2:2f:56:26:c3:05:02:3e:41:8d:a8:5c:9a:81:38:
         3d:40:38:0f:bb:84:08:44:94:1a:07:9d:17:71:91:e2:1e:dd:
         fd:89:89:c4:97:09:79:50:04:ee:fa:99:14:ba:14:bd:14:44:
         36:f8:2f:b5:5f:08:e1:c0:f7:33:ab:64:43:ab:50:ec:cb:1a:
         56:d3:11:8f:1f:dc:58:45:f8:2e:af:0f:e6:f6:e6:a4:db:f1:
         49:20:ed:8b:3f:2e:38:28:82:72:31:35:96:e8:b7:55:8a:24:
         c8:22:5b:d4:c7:b8:2e:95:45:a9:1e:62:c4:4f:9d:b5:31:cd:
         0c:28:d4:24:32:18:0f:92:e3:a0:eb:69:de:68:6b:06:fe:35:
         d6:c7:fa:7c:3b:0d:ae:46:0a:90:8b:22:94:bf:fd:a6:74:be:
         88:0a:09:45:9c:53:8f:50:03:91:3c:52:a5:43:fe:4b:de:57:
         75:d5:7d:ec:4c:1e:16:3e:6e:8e:90:aa:a7:2e:d9:b3:3d:50:
         27:b0:f9:0a:fa:b7:e3:d0:a2:e9:93:03:0c:39:0c:21:1f:f6:
         f6:7f:82:c9:33:42:56:de:75:72:23:c9:de:88:7e:fa:d9:a6:
         19:d5:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:40 2025 by rpki-client