Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f7b9ed-b9ad-48ab-9fb5-bfc899616976.roa
File:                     62f7b9ed-b9ad-48ab-9fb5-bfc899616976.roa (raw, json)
Hash identifier:          QEAXR2YQX05PeksmAtn+EORFY4Lh7wWvySJq8uHUR+w=
Subject key identifier:   08:7E:5B:89:BE:43:F2:DB:F2:B1:2C:57:04:AD:1B:DC:75:C4:D0:CC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73ADD61E5A9E4BD17F629ED057F1D529CCAE8D64
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f7b9ed-b9ad-48ab-9fb5-bfc899616976.roa
Signing time:             Tue 05 Aug 2025 15:31:33 +0000
ROA not before:           Tue 05 Aug 2025 15:31:33 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.236.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:d6:1e:5a:9e:4b:d1:7f:62:9e:d0:57:f1:d5:29:cc:ae:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  5 15:31:33 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=4f2145611955d31e5ee6615e679e0490e44b0e295ec78a9d8320515705d55ccf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:70:ec:85:b6:cf:0c:2a:39:74:21:cc:3d:d5:
                    69:fa:34:34:c7:a7:2c:1a:56:6c:97:d4:9a:24:d2:
                    1f:a6:32:96:00:d9:f0:26:05:e6:c9:92:ae:89:c6:
                    fa:6a:e1:a7:55:10:dc:13:b5:9e:41:bf:6e:05:ac:
                    72:39:9c:43:5d:c0:37:42:dc:5e:c1:29:3f:2c:c5:
                    42:e5:a8:21:c0:63:77:f4:0e:3f:e6:88:73:e3:2f:
                    e6:4c:de:0c:bf:8a:17:20:07:10:57:f6:3f:cb:f2:
                    3f:75:25:39:04:1b:2e:5b:28:1d:63:73:b1:44:33:
                    ee:4a:9a:b3:d4:e5:3e:c4:dd:ec:40:b9:d3:7f:59:
                    02:9e:e9:69:c8:2e:3a:54:7f:f8:84:5e:f0:b7:28:
                    6f:3e:6a:86:e3:e8:6f:ac:a9:03:65:68:65:74:15:
                    03:7f:fa:0b:de:ad:0e:82:69:ad:f8:42:4b:59:de:
                    fc:1c:83:02:8c:0c:33:e3:21:c0:26:95:ae:45:54:
                    ad:8d:a5:f4:ab:9f:3d:6c:7e:83:18:e7:62:39:48:
                    b8:86:8b:f2:1b:25:56:d3:ab:6b:fb:24:75:7d:7c:
                    ed:c6:89:d2:da:12:07:48:e0:de:8c:89:87:5c:10:
                    31:a8:9c:47:a3:50:d5:2b:f1:4e:61:ea:3e:32:42:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7E:5B:89:BE:43:F2:DB:F2:B1:2C:57:04:AD:1B:DC:75:C4:D0:CC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62f7b9ed-b9ad-48ab-9fb5-bfc899616976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:f8:4d:af:9a:a0:de:81:a7:5f:01:89:8b:29:46:8a:43:
         1d:72:f8:65:16:ce:ab:db:37:11:04:93:28:87:bd:84:02:72:
         6c:1d:d1:0c:a1:f6:38:1e:cc:ac:30:a3:b9:fb:68:e3:a0:7a:
         22:b7:9e:54:c9:5f:b3:49:05:7a:f4:02:aa:64:1e:97:cd:ed:
         ed:62:c9:02:b3:2f:1b:b0:40:55:8b:9f:02:96:e2:8f:33:f1:
         ef:57:a3:38:2a:f7:fc:16:02:68:f0:0f:15:e7:16:58:6c:9f:
         15:e2:f7:0e:1e:ad:51:61:22:84:98:8c:d9:fc:3a:da:df:9e:
         b5:c4:ed:aa:53:5a:a2:4b:2d:f9:6d:fa:84:3a:70:f1:a2:2f:
         fe:0e:a5:51:e6:0a:76:82:ea:0b:50:26:61:5f:4f:ca:a1:aa:
         dc:30:6c:63:7e:4e:7b:a4:84:f1:97:94:e3:a6:00:e5:d5:70:
         87:71:aa:33:3f:a8:2f:20:2d:c5:b7:ea:03:2e:60:50:d8:23:
         d8:0f:d1:50:35:e4:de:be:17:6b:2c:23:ad:50:16:ce:00:f4:
         4e:19:d1:56:ce:ca:03:63:2f:6d:39:9d:fa:73:5e:a3:ac:c9:
         21:bb:5e:c5:5c:cc:bb:b8:a3:b9:ba:c7:6b:56:4f:f3:16:28:
         e3:93:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:41:27 2025 by rpki-client