Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa
File:                     f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa (raw, json)
Hash identifier:          pkHTtIMRc1rXZctdO75mGxYvqSPL9WPBOlcsl5kOKrE=
Subject key identifier:   F1:8F:D6:57:18:4F:A8:4B:04:CF:58:27:3A:10:90:08:A4:22:10:18
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       04C50392F8C9D35FA8ACB0FFABFEDB6A8333D560
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa
Signing time:             Mon 12 May 2025 15:30:17 +0000
ROA not before:           Mon 12 May 2025 15:30:17 +0000
ROA not after:            Mon 16 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c5:03:92:f8:c9:d3:5f:a8:ac:b0:ff:ab:fe:db:6a:83:33:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 12 15:30:17 2025 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: serialNumber=6d2a5cbfa9befb467fcb8e52de41ac95af0d430f25afbc1be36acbbd79eb76d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:d9:0c:76:24:8e:8a:b1:26:7e:0e:ec:06:
                    e7:d0:1a:8e:85:33:c5:96:6b:0a:2e:6d:77:03:83:
                    ea:5c:78:b7:85:ca:97:85:d0:69:6c:b3:32:7d:59:
                    c8:4f:1b:0f:e6:5e:98:2f:9c:f4:65:92:2b:c4:c9:
                    0f:09:0b:77:57:dd:42:3e:ee:78:bb:96:db:83:8b:
                    a0:ca:2f:99:1d:46:d6:cb:54:5d:51:49:8d:cd:18:
                    69:86:49:9e:39:cf:f9:39:f6:a9:d3:47:e5:ea:05:
                    d1:4b:0d:a4:52:f5:21:69:c1:fd:a4:49:17:4b:5f:
                    4a:ac:12:95:09:5a:1f:d8:c8:4d:c1:59:d6:a7:f4:
                    a9:c9:ac:88:6d:00:35:16:ff:b7:1d:b2:b0:21:28:
                    b2:9f:4a:c9:78:5d:59:3b:7f:ad:24:34:ed:b7:5c:
                    42:51:b3:77:2b:ae:0a:5f:7d:4a:b0:03:32:81:d4:
                    fa:8e:47:d6:44:8a:6d:f6:75:2a:4c:32:a4:bd:b2:
                    d7:1e:68:4f:3d:80:0f:bb:80:19:46:8a:65:d1:2b:
                    a4:f7:a0:79:fe:b1:3c:9a:95:17:37:76:86:02:bf:
                    05:40:dd:74:c6:2c:75:d7:5c:73:46:73:5e:a7:ab:
                    27:c7:19:39:83:8f:c1:3f:da:91:ac:e7:79:0f:69:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:D6:57:18:4F:A8:4B:04:CF:58:27:3A:10:90:08:A4:22:10:18
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:30:3d:69:b4:c6:6c:30:3a:f0:78:f9:46:09:2f:20:d5:92:
         5e:b0:6e:b5:88:e3:e9:26:9c:81:f9:a5:7d:50:53:07:a9:1c:
         50:79:7b:6d:c8:54:26:51:6d:a6:44:c6:7f:50:a9:b9:ef:3c:
         b9:7b:6d:bc:5c:d3:aa:2e:9c:09:43:ca:84:43:cf:91:64:92:
         59:4a:72:a6:f9:bc:6a:ff:c6:b3:05:4c:cd:30:f4:0f:8f:b0:
         14:0d:a3:d9:86:5c:16:3f:e0:72:1d:28:87:ca:62:63:51:50:
         72:6b:06:c9:0a:dc:b4:c5:8e:84:bd:ff:ea:d7:18:0e:fb:52:
         cf:bd:93:4c:8b:8c:5f:cb:8e:08:13:bb:7c:b8:cf:ac:02:7a:
         13:0c:87:e8:bd:51:9b:f6:b5:5b:e4:ea:2c:f7:5f:e3:1c:9f:
         d3:b4:33:b2:f3:90:b2:43:a1:07:a0:f6:bb:c7:08:1d:1e:60:
         87:ea:c0:4a:93:c2:ce:81:c5:24:6f:cb:61:19:fe:0d:67:f6:
         f0:5e:f8:93:8a:4a:c2:68:1d:f5:b4:97:18:e5:d0:32:be:b6:
         44:c0:00:ac:82:83:4c:e6:d7:c1:04:9c:7c:d6:89:95:b0:28:
         d9:c0:b3:eb:40:2a:99:cb:22:54:4f:e1:72:2b:32:bb:45:68:
         48:36:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:29:17 2025 by rpki-client