Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db28a28a-67ee-4d85-bb3d-cad7e12c11b1.roa
File:                     db28a28a-67ee-4d85-bb3d-cad7e12c11b1.roa (raw, json)
Hash identifier:          o7MFSykOKAoX5tM4LrOXYz/0ueGDoOwfYfWgu9WoiBk=
Subject key identifier:   E5:7F:6A:D7:00:03:74:13:82:6A:BE:13:A0:C0:AD:C9:51:A7:D2:4F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       634D183B6CD6E3286D97C5549C619397D8FEE71C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db28a28a-67ee-4d85-bb3d-cad7e12c11b1.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.158.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4d:18:3b:6c:d6:e3:28:6d:97:c5:54:9c:61:93:97:d8:fe:e7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:24:0e:15:3b:15:41:c3:83:ec:00:fa:c5:
                    e4:aa:8f:b9:f6:77:5e:84:06:14:61:1d:54:90:d9:
                    79:cf:6b:8a:56:8f:e2:71:86:cb:8c:17:b6:32:eb:
                    ec:62:1d:80:48:d9:a7:0b:57:e1:5a:e9:f8:4f:04:
                    af:23:24:11:3d:6c:1b:ce:d3:46:7a:e9:5a:ba:c6:
                    83:b4:79:28:e7:64:ac:26:c3:99:d0:75:f7:4e:65:
                    33:47:4b:3e:c6:d9:19:e9:40:a5:52:b2:e8:45:02:
                    d2:68:4a:72:a5:d8:99:c3:e0:a8:8e:35:eb:fa:18:
                    de:2e:4a:d1:93:70:d8:98:73:41:d3:53:41:59:6c:
                    36:4d:96:91:5f:3c:46:9f:b0:72:21:51:8f:26:1f:
                    14:69:a3:20:6f:90:c8:55:9e:37:37:ab:50:49:f8:
                    fb:ba:f5:47:f7:1f:36:4f:10:5d:d6:46:37:6c:d4:
                    28:4a:81:e3:07:4b:f2:e7:60:f3:fb:b3:ae:4d:90:
                    c1:f8:e8:2b:5c:b5:41:81:8a:77:81:1d:6c:24:b2:
                    1e:e5:7a:09:11:0a:3e:de:64:47:7d:18:51:56:0a:
                    57:ea:1d:26:95:f8:c3:cc:44:0d:f0:cb:4d:db:19:
                    48:75:39:a6:51:1f:b3:8f:a6:b2:c9:36:7d:b4:34:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:6A:D7:00:03:74:13:82:6A:BE:13:A0:C0:AD:C9:51:A7:D2:4F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db28a28a-67ee-4d85-bb3d-cad7e12c11b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.158.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:9d:60:a9:55:a4:d1:7b:ee:59:bd:c8:bf:f1:a4:93:b1:
         34:1a:9b:fc:df:ae:01:14:ee:b7:01:74:b8:bc:e5:55:af:0e:
         06:da:49:a0:04:06:82:3a:a9:24:57:00:04:b1:da:51:96:13:
         2b:60:50:73:1f:6c:49:74:16:7f:ad:b6:99:3a:11:0e:db:a5:
         09:4a:76:f1:1b:cc:4f:71:d2:3f:75:59:a2:3c:03:55:9f:d3:
         88:91:59:bf:a8:55:2b:b8:02:dd:5c:50:bf:de:1f:58:6e:86:
         fe:a5:e8:c7:5b:0a:50:5e:42:8a:81:37:c9:43:54:5d:bb:b9:
         be:0b:f0:f9:32:bd:62:99:d2:55:4a:21:71:d9:cb:f5:4b:0b:
         22:e9:71:11:6e:59:98:80:46:6b:22:1e:c1:ad:73:ae:f7:6a:
         94:63:14:98:45:87:b0:1f:fc:81:5d:16:1d:7b:3a:6b:88:a2:
         7e:fd:8a:bc:4c:86:3c:1a:54:af:48:6f:6d:b0:6a:93:aa:99:
         e0:61:43:aa:5b:96:22:6e:ce:d5:74:4e:20:26:58:5b:0d:cd:
         81:3f:f6:db:20:52:a3:b5:a6:bc:84:7c:f3:5f:77:1c:b3:7e:
         ab:1d:92:82:8a:a2:28:04:52:ba:6d:b7:aa:21:70:0b:2f:f1:
         7a:0a:20:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:29 2025 by rpki-client