Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7271747f-39cf-443c-b0e9-bcc5a24ebef4.roa
File:                     7271747f-39cf-443c-b0e9-bcc5a24ebef4.roa (raw, json)
Hash identifier:          rHVUG9lvxvswXr1jNU/Fy5OOaYSTeoBwY91LnDMCmeI=
Subject key identifier:   47:3F:FE:B0:61:4E:84:BF:82:51:59:64:36:B4:36:6D:51:5E:4D:38
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0576189B1A0E099B35021CB77308DDFAADEDBDEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7271747f-39cf-443c-b0e9-bcc5a24ebef4.roa
Signing time:             Fri 07 Mar 2025 00:30:26 +0000
ROA not before:           Fri 07 Mar 2025 00:30:26 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:76:18:9b:1a:0e:09:9b:35:02:1c:b7:73:08:dd:fa:ad:ed:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar  7 00:30:26 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:8b:94:b6:40:01:6e:3d:d3:b3:1b:96:ef:
                    b2:50:03:02:62:6a:71:0d:bf:d7:ef:2f:c3:72:f9:
                    54:29:a6:a1:7f:c6:72:d4:c5:0c:88:2a:d6:37:ef:
                    d9:38:dd:fa:fc:f4:1a:d4:59:26:34:f3:b9:df:f1:
                    1c:cd:bd:ce:7f:79:81:78:5a:7b:ce:37:17:4e:db:
                    63:33:6b:24:ef:ba:36:35:81:37:81:ed:b9:a8:02:
                    d7:12:5f:10:81:33:68:4a:f4:3d:43:e7:3a:a6:45:
                    d9:79:75:61:db:91:7e:71:35:14:19:78:a0:3e:5d:
                    3e:e1:4a:3f:1b:b2:95:bb:3a:f8:32:f0:e2:dd:f6:
                    19:49:01:69:7b:dc:6f:25:30:f7:dc:e7:5a:25:a5:
                    99:a2:0f:d1:d3:6d:4e:12:e7:dc:9c:e7:6c:61:a8:
                    43:e5:ee:c3:f6:27:2f:2b:9d:c7:1c:1a:1c:38:bf:
                    ff:ba:69:61:9c:35:e3:ce:c8:54:f8:a2:63:10:50:
                    03:0e:cc:67:f0:7b:13:60:87:36:04:3d:11:9e:42:
                    29:59:dc:b8:39:d7:e3:e4:63:00:02:64:48:ff:fb:
                    18:00:aa:71:be:a9:31:f2:f3:ab:0d:d4:de:1c:01:
                    fc:75:f8:23:25:a6:24:1e:24:fe:59:ab:1f:9c:e8:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:FE:B0:61:4E:84:BF:82:51:59:64:36:B4:36:6D:51:5E:4D:38
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7271747f-39cf-443c-b0e9-bcc5a24ebef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:b2:3a:aa:67:6e:6e:d2:c0:68:c7:d2:37:66:83:31:ee:
         d2:a4:2c:f2:8c:b2:fc:77:6b:5c:57:4b:26:b0:1e:4b:10:a1:
         ba:90:56:02:45:c0:d7:55:40:91:7d:79:c6:08:c9:57:a0:46:
         a8:0f:22:52:32:7d:7f:6d:fe:0e:44:a0:99:aa:70:2f:0e:d0:
         b9:99:52:8c:9a:cc:50:77:98:47:b5:fc:e8:ed:b6:d6:9b:a1:
         9b:22:6f:ba:a2:68:bc:09:68:58:8b:21:40:08:fc:dd:f9:fc:
         52:10:70:58:5e:df:aa:b8:18:61:bc:19:8b:e1:4c:39:70:de:
         47:11:31:d7:24:e6:3b:2c:39:f3:7a:0e:be:16:e1:ff:06:a5:
         34:df:e2:ee:53:5d:30:b8:7d:e5:e8:15:54:e4:fa:b4:52:ab:
         52:b8:9a:37:c2:3d:a1:d3:0f:cf:ec:5d:7b:b2:05:b7:94:e0:
         e6:d7:7c:86:48:c1:7b:da:24:6f:c1:56:e7:3d:b7:8f:83:1f:
         20:df:cd:37:41:18:49:f7:33:36:08:bd:e6:fe:a4:31:0e:b2:
         7b:b2:21:55:9f:cf:a0:95:1e:e8:09:58:bc:a0:64:e4:c2:04:
         bc:dd:3d:8d:bb:00:8a:9c:15:7f:4f:77:9a:32:5e:b2:2c:32:
         7a:9f:13:c9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBXYYmxoOCZs1Ahy3cwjd+q3tvewwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzA3MDAzMDI2WhcNMjUwNDExMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODYyZGYxZTI5N2QzMmU1NTIxMzg0ZmMzNTZmMzNjMzlm
MmMxZjg1ZWMxZjM3MWQxODRlODViOTU2OGZkNmY1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiOYuUtkABbj3TsxuW77JQAwJianENv9fvL8Ny+VQppqF/
xnLUxQyIKtY379k43fr89BrUWSY087nf8RzNvc5/eYF4WnvONxdO22MzayTvujY1
gTeB7bmoAtcSXxCBM2hK9D1D5zqmRdl5dWHbkX5xNRQZeKA+XT7hSj8bspW7Ovgy
8OLd9hlJAWl73G8lMPfc51olpZmiD9HTbU4S59yc52xhqEPl7sP2Jy8rncccGhw4
v/+6aWGcNePOyFT4omMQUAMOzGfwexNghzYEPRGeQilZ3Lg51+PkYwACZEj/+xgA
qnG+qTHy86sN1N4cAfx1+CMlpiQeJP5Zqx+c6F0PAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURz/+sGFOhL+CUVlkNrQ2bVFeTTgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzcyNzE3NDdmLTM5Y2YtNDQzYy1iMGU5LWJjYzVhMjRlYmVmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASMDANBgkqhkiG9w0BAQsFAAOCAQEAAH2yOqpnbm7SwGjH0jdmgzHu0qQs
8oyy/HdrXFdLJrAeSxChupBWAkXA11VAkX15xgjJV6BGqA8iUjJ9f23+DkSgmapw
Lw7QuZlSjJrMUHeYR7X86O221puhmyJvuqJovAloWIshQAj83fn8UhBwWF7fqrgY
YbwZi+FMOXDeRxEx1yTmOyw583oOvhbh/walNN/i7lNdMLh95egVVOT6tFKrUria
N8I9odMPz+xde7IFt5Tg5td8hkjBe9okb8FW5z23j4MfIN/NN0EYSfczNgi95v6k
MQ6ye7IhVZ/PoJUe6AlYvKBk5MIEvN09jbsAipwVf093mjJesiwyep8TyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:47:30 2025 by rpki-client