Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c08c2a8-10d4-4365-87ea-78ff0053d3f7.roa
File:                     0c08c2a8-10d4-4365-87ea-78ff0053d3f7.roa (raw, json)
Hash identifier:          hOUucKqRm8DeSIrCc8aW2ke5JB3WTI8BbtaeZJ8AH7Q=
Subject key identifier:   A9:B5:AA:D8:61:EB:33:A6:AE:C1:B1:15:36:8D:04:FF:B9:AF:23:F6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1718B7A1FD3355E5CD475C1620D3D8A887F225F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c08c2a8-10d4-4365-87ea-78ff0053d3f7.roa
Signing time:             Fri 19 Sep 2025 00:55:13 +0000
ROA not before:           Fri 19 Sep 2025 00:55:13 +0000
ROA not after:            Fri 24 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:18:b7:a1:fd:33:55:e5:cd:47:5c:16:20:d3:d8:a8:87:f2:25:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 19 00:55:13 2025 GMT
            Not After : Oct 24 23:59:59 2025 GMT
        Subject: serialNumber=05f635afb1aac4326f8e389638b9fe736066760cf3cb208fc1caa8fb6cf5d281, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:61:82:c1:e2:0d:f2:45:f4:07:cb:5a:11:
                    de:9c:88:b3:7a:84:c3:d3:80:46:49:08:00:fa:8a:
                    18:21:3e:40:b3:3d:9e:08:69:b2:61:c6:c0:09:d4:
                    3d:9f:dd:78:a5:0a:27:d2:3f:21:c7:ac:1a:6d:3b:
                    79:73:cc:a1:bf:02:7b:43:80:f1:ce:b5:b5:fb:24:
                    f6:2c:c1:94:de:82:0e:3f:37:8e:28:8f:fa:26:93:
                    e9:34:3f:d6:86:e9:dd:cb:40:e5:28:7d:e7:55:96:
                    6a:2e:63:e3:69:0d:b5:47:2a:de:99:5d:7f:2c:5c:
                    c4:7b:3d:c9:de:2e:f5:c4:14:85:a2:20:93:2a:3e:
                    7e:d2:95:63:41:f8:ee:3a:0c:f9:2f:00:e0:d7:46:
                    d1:d3:71:55:3c:e8:f6:0c:4b:51:92:ba:cc:88:a6:
                    f3:4f:2d:4f:41:72:eb:16:76:e7:e7:50:5e:6a:d4:
                    3f:2d:04:ec:16:2c:1a:7c:39:b5:0f:45:e4:0b:f0:
                    0a:f4:b6:ee:84:67:ae:3b:08:bc:45:01:5b:a6:9c:
                    81:cc:df:14:d8:ad:7b:42:8a:0a:95:2a:f0:44:4c:
                    b7:7f:d8:c9:4f:24:86:f1:98:98:d5:41:2d:8d:9e:
                    5b:01:6c:01:ae:4d:d0:54:f8:61:e3:18:90:91:71:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:AA:D8:61:EB:33:A6:AE:C1:B1:15:36:8D:04:FF:B9:AF:23:F6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c08c2a8-10d4-4365-87ea-78ff0053d3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:6c:7d:a6:18:8b:37:17:b4:50:12:9a:d7:92:24:23:db:
         19:b0:87:c8:4c:9d:13:4c:97:0a:dd:f9:93:a7:88:de:2e:28:
         34:c8:13:e5:50:6d:20:10:0e:83:12:ea:b7:1b:66:13:96:9b:
         79:97:5b:e2:1e:02:6b:31:50:c0:fb:c0:ba:ec:8a:19:2d:c5:
         1c:28:6c:a9:1f:f5:03:eb:cc:dd:1e:ae:88:c6:5f:93:60:ce:
         76:ac:75:3e:0c:97:7b:f5:ff:f4:31:67:6b:9f:25:31:f2:6a:
         a5:a9:c0:a8:79:b9:70:20:8f:65:9b:00:1a:69:13:94:39:5a:
         d8:78:07:cf:6c:76:b1:fc:b2:5b:40:f1:13:6b:d4:d5:e1:1d:
         23:3b:84:3b:35:d4:b5:e1:1b:00:30:ef:80:95:2b:64:6c:6d:
         c4:f7:07:d0:e5:72:fd:29:90:ed:36:fe:88:44:c5:c5:e4:81:
         b7:1c:73:42:c0:42:2b:d9:12:e2:e8:51:8a:65:f9:cf:f4:96:
         d6:7b:ca:e0:dd:6b:31:99:4a:3b:af:ed:89:3a:ec:fb:5a:6d:
         ce:71:de:42:d8:e5:76:c0:c8:aa:78:9c:6b:51:14:b2:ab:f0:
         78:83:82:c0:a7:8d:ac:5f:ba:e2:b9:62:c6:5b:9d:00:f1:18:
         3d:27:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:37:54 2025 by rpki-client