Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/763f4e39-fc22-4547-8b02-5b3f44b8e8f8.roa
File:                     763f4e39-fc22-4547-8b02-5b3f44b8e8f8.roa (raw, json)
Hash identifier:          MHtTzMmJOLNcSdpoV2xSoaN2yWt2htQ1mo+Y0q/ioMc=
Subject key identifier:   9C:88:83:74:05:74:45:3A:7D:AC:FE:47:2D:DC:DB:F5:97:4C:5D:D6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6B371B5D58D10E4258FA2B5069BC7B9786135400
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/763f4e39-fc22-4547-8b02-5b3f44b8e8f8.roa
Signing time:             Tue 19 Aug 2025 16:01:09 +0000
ROA not before:           Tue 19 Aug 2025 16:01:09 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.170.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:1b:5d:58:d1:0e:42:58:fa:2b:50:69:bc:7b:97:86:13:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 16:01:09 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=1aee5601117155cfbf500158b5c942cdc5197063444b5b7af07aaa1b159635ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:ab:9c:b7:8a:8c:47:22:b7:74:4e:34:d5:
                    9f:6f:eb:e4:47:65:20:99:fe:d8:ca:ea:1c:9c:0d:
                    a1:31:c4:29:5a:5d:e7:56:c8:82:49:a3:73:a0:a9:
                    14:3d:d4:04:23:8e:cd:b0:f4:26:0e:92:84:a4:8c:
                    b9:f6:34:b4:0d:56:b6:a6:d3:a7:7b:da:d0:70:79:
                    df:ba:07:81:22:d5:68:fc:ee:21:4f:49:67:1e:03:
                    53:d7:1e:03:00:53:69:c5:80:3c:6a:62:91:c1:aa:
                    8e:ec:ef:69:56:b8:6f:36:35:83:10:77:48:f5:f7:
                    01:eb:65:1d:73:15:2f:52:9a:70:61:3d:69:60:02:
                    9c:fb:7c:47:03:67:48:12:24:51:be:d9:b5:26:5c:
                    2c:52:20:ab:83:85:02:e1:09:ba:f5:13:5f:6a:2c:
                    7f:42:48:d9:6f:83:1e:6c:8e:01:1f:67:a4:ee:36:
                    ba:df:25:65:81:79:32:52:85:8e:29:db:20:3c:c6:
                    47:63:dd:19:0f:c0:4e:48:2d:a5:2d:09:a4:b8:dd:
                    ea:6d:f4:03:98:e2:43:b7:5c:1e:45:03:5c:3d:27:
                    cd:10:4a:66:50:25:18:4e:67:a6:d3:b0:d0:82:32:
                    89:39:77:c5:1f:9c:4e:2d:90:c4:33:c9:34:2e:23:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:83:74:05:74:45:3A:7D:AC:FE:47:2D:DC:DB:F5:97:4C:5D:D6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/763f4e39-fc22-4547-8b02-5b3f44b8e8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.170.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:3a:b2:0d:1c:dc:5f:b2:7b:8f:62:3d:1d:74:da:b7:d2:
         40:9e:ee:2b:1e:87:f5:94:86:ab:33:74:9e:fc:96:1a:eb:54:
         65:1d:02:e1:98:63:37:00:3a:43:05:b4:b8:8f:1a:d3:58:fd:
         74:8c:01:2f:fa:89:57:42:a8:fd:7f:9a:49:33:cd:67:df:36:
         2c:1c:1b:46:c9:b2:d2:75:18:bd:6f:9d:68:ec:9b:9e:8f:88:
         59:ff:a9:82:cb:e2:97:79:60:aa:3c:5a:02:d0:63:ab:ce:8f:
         af:f9:f7:89:9d:f8:ce:70:7e:bb:cb:c7:3d:fd:34:01:38:46:
         6d:88:d6:04:52:7c:ff:88:56:0c:ed:33:25:ce:e0:cc:f8:42:
         15:59:d3:ea:cd:5e:63:4b:df:65:2a:7f:18:64:8e:c4:39:fc:
         4b:93:90:92:0a:a6:4d:1c:db:bf:28:ee:81:2a:b0:d7:e0:c9:
         11:82:a7:e1:7d:12:63:3a:1f:6d:55:e6:a9:1e:a2:b5:01:bd:
         09:7b:e4:91:ee:b0:d5:27:f1:62:08:bf:22:83:71:81:4a:42:
         c1:72:70:cd:ca:8c:41:e2:82:42:35:6d:41:b1:75:4a:09:36:
         a4:9a:3c:08:33:ca:68:b4:ae:56:56:94:2c:15:32:ea:af:87:
         2f:55:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:41:26 2025 by rpki-client