Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c73a1c8-15d3-436d-9be5-c8f38a8c9b19.roa
File:                     5c73a1c8-15d3-436d-9be5-c8f38a8c9b19.roa (raw, json)
Hash identifier:          ccWPttG8eW1G8p6H88YnGJvHQ3uEzBp1YjrP6+rSEpY=
Subject key identifier:   CE:FB:25:A0:CD:73:AE:18:76:46:96:DE:7A:00:2E:63:F2:31:0D:8E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E3A64BA88F2FBF9E21AA4932BFF3E99B0214BF0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c73a1c8-15d3-436d-9be5-c8f38a8c9b19.roa
Signing time:             Tue 19 Aug 2025 15:51:33 +0000
ROA not before:           Tue 19 Aug 2025 15:51:33 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.79.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3a:64:ba:88:f2:fb:f9:e2:1a:a4:93:2b:ff:3e:99:b0:21:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 15:51:33 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=2baa80fb1d4e74a9da477654ff95a1b05285158ccee96f68ec44de260ef27f02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:9d:cd:ca:81:36:fa:67:99:c1:cc:e4:a1:
                    b2:9d:cc:13:00:71:82:36:50:60:7f:a8:9c:98:7b:
                    88:72:e3:cf:7c:07:d4:f4:2a:4d:0b:d7:db:39:78:
                    0c:b6:cc:46:17:13:f3:f5:04:8d:11:cd:77:82:d8:
                    26:07:73:33:93:f3:2b:d1:c1:e9:17:08:66:a2:dd:
                    c8:6c:e8:88:a5:76:76:b5:56:0f:32:69:e7:16:74:
                    a7:a4:db:34:a7:e2:d4:cc:6d:8a:25:11:30:3c:87:
                    0d:9b:e8:51:d0:9f:f3:65:35:49:37:e8:ee:dc:25:
                    61:0b:13:b8:26:7d:2e:9f:46:5f:36:3b:cd:0d:eb:
                    63:51:73:f4:7d:78:38:16:17:9f:2b:a7:f1:9d:97:
                    8c:3b:b3:e4:4b:38:9f:c4:46:f9:b9:c2:2d:a7:28:
                    65:a6:db:4f:cb:92:3b:2a:3b:82:27:53:2a:7e:ff:
                    24:c6:8f:79:1b:67:d7:9e:6d:ed:66:f9:87:f8:bc:
                    9a:7f:b3:70:09:1a:af:c3:2d:84:8e:e9:e9:04:f0:
                    d3:fb:dd:1e:5b:b1:4d:37:c7:f6:e6:ca:5d:89:39:
                    9f:e1:ea:c0:ed:9d:e7:bc:a5:62:e5:ea:1f:ed:88:
                    17:c4:50:d1:87:0e:0b:94:8f:06:03:40:9b:eb:b2:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:25:A0:CD:73:AE:18:76:46:96:DE:7A:00:2E:63:F2:31:0D:8E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c73a1c8-15d3-436d-9be5-c8f38a8c9b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.79.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:05:d4:55:84:bd:10:de:13:ba:2c:c3:b1:a0:eb:27:a1:
         61:45:4d:92:25:d3:a3:d9:c4:37:9c:27:94:67:dd:db:53:8d:
         d8:31:2c:a9:a3:c2:eb:fd:a7:a5:ca:29:73:32:3a:85:29:d7:
         9f:74:9b:cf:9e:7e:ee:91:1f:32:9d:dc:9a:95:16:06:b4:5a:
         32:94:7b:78:53:41:14:b1:91:33:91:24:12:13:1c:6e:d2:15:
         70:7f:ed:52:dd:00:3c:23:3f:6c:00:77:7a:df:43:24:ba:5a:
         54:c9:2c:c2:e0:29:64:56:5b:54:bc:ea:30:8e:cf:3a:d2:6b:
         a9:67:c6:7b:f9:71:11:c6:d3:f0:57:b7:43:1c:6f:f5:08:eb:
         0e:ed:b9:39:16:f5:30:8c:f5:d5:56:b1:37:bb:4e:23:ff:a3:
         42:de:23:6b:16:92:16:f1:4d:90:8b:4c:3f:38:e3:57:8a:fa:
         29:19:4b:3a:ef:88:52:88:6b:75:3b:e0:bf:cf:6e:a4:bd:cd:
         45:99:9f:6e:5e:77:d8:92:7c:4e:22:d3:e2:90:47:d2:ba:0d:
         76:af:e2:7a:79:d6:07:d7:f8:8f:cf:c5:f1:9f:ff:53:df:f4:
         64:71:ec:84:5e:bd:d9:07:0f:99:ea:ae:46:ea:cd:b1:b2:c7:
         c1:4e:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:38:01 2025 by rpki-client