Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa
File:                     d1af78db-4e03-4986-b016-394c842266cc.roa (raw, json)
Hash identifier:          +W0zD4bU2MpVgHsFAXH2lhKyUOg9hArTaiorIc30a0w=
Subject key identifier:   AF:67:F3:E9:91:1A:A4:F7:79:33:C2:BA:5F:19:25:D3:FC:BA:2E:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0161208A9D6D7B65AC1EA5BB0FBD1C58EE7CA23D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa
Signing time:             Thu 08 May 2025 19:23:39 +0000
ROA not before:           Thu 08 May 2025 19:23:39 +0000
ROA not after:            Thu 12 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.162.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:61:20:8a:9d:6d:7b:65:ac:1e:a5:bb:0f:bd:1c:58:ee:7c:a2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 19:23:39 2025 GMT
            Not After : Jun 12 23:59:59 2025 GMT
        Subject: serialNumber=b8e8f212167b500eccde86974724afdeb03ce58bd1b379dd16eb10733e13b385, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:ab:9b:14:2f:30:aa:98:6f:91:04:c0:9d:
                    18:22:83:c3:53:17:bc:ba:6d:3e:4b:97:81:38:d1:
                    9e:05:55:95:f1:79:bc:e8:71:2d:5a:dc:9f:75:96:
                    b9:a3:79:d8:99:0f:41:2a:d8:6f:2d:a3:37:5d:00:
                    4c:2e:3f:fb:fc:cc:2a:e8:82:0b:1e:03:94:c0:20:
                    94:fa:c2:b1:bf:68:9f:7c:7c:1d:2a:06:66:7d:a2:
                    bc:c5:8d:f8:9e:49:d8:db:cc:3d:fc:8d:04:47:b9:
                    5a:23:84:c7:d9:06:20:4d:ff:eb:fe:2b:f0:76:ce:
                    91:0b:1d:13:40:c4:a6:ef:48:c7:88:f3:a0:62:43:
                    78:4a:1f:5d:8b:bb:4f:77:63:25:5f:e8:24:0c:4f:
                    ae:05:c0:a3:b2:4a:46:d2:00:d0:59:a6:39:b2:ee:
                    71:ec:e8:da:ba:83:12:b7:bb:23:4a:d4:40:85:68:
                    f2:b2:fc:0f:8e:d7:c2:ff:04:74:5b:37:ce:84:53:
                    41:ee:13:3a:03:0f:09:0b:b5:5f:80:91:9a:2d:4b:
                    31:ce:6e:a9:0a:8a:fb:e9:9f:17:7b:40:23:fa:57:
                    b8:ef:e3:b7:c3:af:b2:cd:eb:2d:19:95:18:47:46:
                    2e:47:c7:f2:25:17:4e:da:ff:55:ca:35:43:eb:f8:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:F3:E9:91:1A:A4:F7:79:33:C2:BA:5F:19:25:D3:FC:BA:2E:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.162.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:66:60:7f:55:76:2c:7e:a6:79:6f:e7:f6:dc:77:54:29:
         4a:44:a8:39:22:7e:aa:34:8d:d3:c7:6d:eb:49:3b:06:87:2e:
         27:d3:c5:16:f1:a5:86:76:8f:85:d3:6f:bd:0e:60:20:11:61:
         00:04:59:b5:b4:0b:f5:20:41:2f:c4:b8:76:8f:cc:5d:15:13:
         8a:7d:67:1c:c1:f6:38:69:ef:dd:af:a5:5e:5f:41:5d:5f:5f:
         40:4e:13:47:17:0d:63:10:00:ff:53:59:af:94:29:2b:1f:72:
         d3:b5:56:d3:1f:c6:ab:34:b4:6d:d9:c2:6a:b4:77:d5:db:08:
         d3:c9:54:34:b3:20:43:bc:a7:f0:74:21:07:51:c7:b4:4b:83:
         bb:04:29:ce:fc:b7:a7:19:20:46:92:99:a1:ad:30:88:55:52:
         16:1f:1e:a7:4d:45:eb:82:f7:dd:07:69:e2:71:ad:e9:21:95:
         2e:5c:6a:96:3f:2b:be:08:55:31:7b:0f:1c:e5:7a:4d:c4:79:
         b0:e6:05:31:b5:55:ad:8d:1e:fe:5f:2d:a5:23:aa:15:40:f9:
         b8:9f:31:01:35:fe:7c:e8:4c:71:08:c5:64:5f:0b:7b:00:39:
         13:c7:53:3a:6b:38:d1:da:78:3d:3b:f7:7b:94:63:1d:01:34:
         5d:d2:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:11:10 2025 by rpki-client