Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa
File:                     16788add-b139-4af8-bd22-fe8b2177c578.roa (raw, json)
Hash identifier:          F1yv3cThN0vZzdjIMTp44KsDtIvxYG2rXme3mjrbwms=
Subject key identifier:   E9:3B:1D:B0:17:CF:61:E0:38:63:F8:A6:E9:AD:7E:D4:4E:E9:BA:8D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6B8DC5D0A8804D0AAE431A8D0091F56EF5326EDD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa
Signing time:             Tue 20 May 2025 15:41:33 +0000
ROA not before:           Tue 20 May 2025 15:41:33 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.137.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8d:c5:d0:a8:80:4d:0a:ae:43:1a:8d:00:91:f5:6e:f5:32:6e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 15:41:33 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=f95ecdea2026b71e9590a8e48be47341681ec27cac7b6f50d8365eecff3ca874, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:fa:6e:f9:3c:69:42:8f:c8:73:4b:e2:b2:
                    28:89:e9:cd:b8:55:38:83:b7:8a:99:48:6f:f3:75:
                    72:d6:fe:7b:06:64:7b:46:31:e8:13:14:aa:c0:54:
                    73:7d:6a:5d:30:02:93:6d:1f:9f:5b:ab:7b:7c:bc:
                    f2:23:d4:6f:f6:15:34:99:fa:e2:32:8b:5d:eb:11:
                    bf:d0:0c:95:c3:2a:06:09:9a:d8:c6:b9:8f:87:fa:
                    5b:56:60:74:cd:46:08:fd:35:9d:b5:f4:65:3b:ac:
                    94:78:de:70:fe:63:7c:94:fb:9b:ee:21:ad:e0:6d:
                    5a:c6:49:5a:bb:e8:26:5d:19:1a:12:da:67:f9:34:
                    5d:89:0b:2d:a2:31:cc:81:c1:4b:25:50:06:b6:63:
                    f1:3d:1d:f2:5e:6a:fe:36:2c:11:1a:1d:97:ad:35:
                    f9:cb:3c:3d:b0:e2:bd:86:e1:58:e0:5d:26:29:8f:
                    b9:6a:17:10:3c:0b:70:b8:2c:46:43:2b:6b:9d:e4:
                    a3:30:df:4f:4e:42:fc:e2:16:8c:51:7a:56:84:b7:
                    76:0c:13:3a:6b:4d:56:61:29:19:98:d5:1a:e0:9e:
                    59:b5:4d:00:72:8f:c2:22:a7:c8:07:66:ab:08:1d:
                    55:e8:b3:22:84:a9:51:b6:46:56:ce:0e:ac:74:f5:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:1D:B0:17:CF:61:E0:38:63:F8:A6:E9:AD:7E:D4:4E:E9:BA:8D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:34:3c:50:d4:ca:fb:9e:49:c8:fe:d6:b3:bd:c6:e9:c3:
         61:20:c9:81:56:39:16:f0:6d:d0:13:ee:ff:74:45:d5:c1:6c:
         49:41:fe:f6:14:d6:0d:1a:0e:13:dc:6f:8d:44:ec:2b:c9:93:
         ff:ef:3f:de:c3:c6:44:16:17:21:28:fa:28:38:d2:5f:16:2a:
         ce:ab:fb:15:27:79:0a:93:c5:87:af:e0:15:3b:5e:07:48:c9:
         cd:81:50:c9:bb:f6:6e:61:7c:16:d7:78:17:78:64:bf:5a:2f:
         21:82:0e:97:f2:d0:3f:fb:3d:89:a6:b3:7e:e4:bf:04:0d:24:
         7e:62:a7:33:de:1c:81:f3:e6:a8:a7:60:d6:40:b7:01:d5:17:
         02:55:9b:d9:cd:29:80:a7:dd:a5:85:4e:f2:14:fb:42:90:1f:
         58:73:9b:91:3e:0e:f9:a7:0f:57:40:f6:99:c2:e3:ec:d5:23:
         72:b0:bf:cb:4f:80:d9:04:75:65:67:47:3b:3c:24:ce:db:ab:
         e1:46:46:0c:ad:49:e0:23:49:4b:37:10:a3:9f:ca:14:f7:1a:
         ac:a4:c6:62:4a:3d:1d:7f:7c:73:57:d5:0f:43:89:94:ec:f9:
         97:8f:8e:2d:bb:66:23:f2:ca:84:c3:1a:14:f1:4e:9c:02:4c:
         e3:15:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:44:10 2025 by rpki-client