Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02e1c12d-4148-4d82-a499-de2a31ace895.roa
File:                     02e1c12d-4148-4d82-a499-de2a31ace895.roa (raw, json)
Hash identifier:          pvHdiDzcWHfW9iFQd1AP/v63uuW3JuPPSr0426kJH4A=
Subject key identifier:   E5:F9:B5:B0:25:0D:95:4D:3B:CD:96:4F:5F:0E:46:8C:89:CC:CE:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       706DF944D53FD95EF95C865F2724A6E129EC38D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02e1c12d-4148-4d82-a499-de2a31ace895.roa
Signing time:             Tue 03 Jun 2025 15:50:07 +0000
ROA not before:           Tue 03 Jun 2025 15:50:07 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.160.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:f9:44:d5:3f:d9:5e:f9:5c:86:5f:27:24:a6:e1:29:ec:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 15:50:07 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=04bb7aeb14598d54db75c90806c6377b5a8dcc40084a488e1d3591da982bb357, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:d7:77:9f:c9:b4:d9:06:4b:48:61:e6:7c:
                    db:ea:3b:40:6b:02:83:47:50:d6:59:46:b8:79:d4:
                    37:93:4f:3e:9d:22:14:55:2f:d0:14:42:94:ec:65:
                    17:ee:df:b0:bd:ae:86:b6:af:e6:8f:d1:d3:ba:28:
                    29:5b:29:09:39:0b:dd:75:9f:a1:4c:bb:9f:75:fa:
                    ac:e1:9a:16:6e:ef:a9:c9:02:37:b1:f9:4f:dc:c7:
                    37:8a:d3:2c:43:35:99:64:05:d7:71:b4:8b:c6:3e:
                    3c:7b:ca:c9:a8:e1:cd:56:b6:bc:c7:77:d7:a4:86:
                    44:5d:ed:c2:c0:6a:5b:25:a0:5c:70:b6:ee:dd:59:
                    79:6a:05:0a:cc:e6:6a:a8:fb:03:97:e9:18:c2:56:
                    77:cb:4d:e4:06:e0:0a:e0:45:ef:60:5e:42:34:6b:
                    f8:45:6c:69:3c:d0:4c:e2:a5:0d:15:5b:76:c9:d9:
                    07:49:4e:6f:7b:e1:c6:ec:ac:c0:98:0a:75:d7:29:
                    ea:6a:90:49:3c:7b:bd:8f:23:1e:0e:73:4e:9c:09:
                    77:1d:50:3e:e3:33:a4:50:c2:15:5d:0a:54:ff:d2:
                    7b:b5:c7:b0:84:e5:c3:7f:02:48:4c:cb:ef:f4:27:
                    8a:fa:77:6c:19:63:05:24:16:ad:66:01:c0:87:5a:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:B5:B0:25:0D:95:4D:3B:CD:96:4F:5F:0E:46:8C:89:CC:CE:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02e1c12d-4148-4d82-a499-de2a31ace895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:88:1c:3e:9e:46:85:eb:73:0f:b9:81:57:23:f2:83:24:82:
         41:60:8a:89:55:ea:1a:22:c1:c8:b3:27:f1:b7:a4:ac:f7:08:
         28:43:8c:22:38:d1:b3:c6:5d:e7:7c:a0:83:93:c7:22:07:74:
         22:0f:83:08:15:22:4a:3d:b3:03:6e:b3:c7:94:4b:68:28:05:
         56:45:f8:d2:7a:dd:ba:b5:c5:d1:02:c8:01:df:3a:ed:1e:d0:
         04:37:93:eb:54:fb:b2:99:46:cd:e4:5c:06:d5:b9:a6:02:74:
         87:f7:72:0d:e2:65:98:d7:48:54:f3:21:c5:40:e5:8e:d3:dc:
         17:b4:97:08:2c:54:ad:3e:5a:1d:9d:12:7e:f8:c7:58:4e:e4:
         14:da:3f:19:93:fe:42:d3:05:3c:d4:ff:37:f4:5b:3c:ff:7e:
         79:a8:4e:91:47:0b:84:af:37:2a:df:85:fc:62:e0:8a:64:05:
         7f:16:fa:f1:2e:e0:37:1a:fd:6d:e5:2a:f3:34:be:ff:bb:e2:
         f5:c0:59:51:bb:97:b5:29:63:ad:65:79:d6:69:46:be:b5:ff:
         b5:78:22:02:97:c5:c7:ed:5b:50:37:36:8d:9b:4c:c1:40:1d:
         81:d7:45:47:9b:4b:f7:4d:b9:c1:2f:df:5c:00:a4:a2:e8:0a:
         92:41:5e:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcG35RNU/2V75XIZfJySm4SnsONIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTU1MDA3WhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGJiN2FlYjE0NTk4ZDU0ZGI3NWM5MDgwNmM2Mzc3YjVh
OGRjYzQwMDg0YTQ4OGUxZDM1OTFkYTk4MmJiMzU3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDi29d3n8m02QZLSGHmfNvqO0BrAoNHUNZZRrh51DeTTz6d
IhRVL9AUQpTsZRfu37C9roa2r+aP0dO6KClbKQk5C911n6FMu591+qzhmhZu76nJ
Ajex+U/cxzeK0yxDNZlkBddxtIvGPjx7ysmo4c1WtrzHd9ekhkRd7cLAalsloFxw
tu7dWXlqBQrM5mqo+wOX6RjCVnfLTeQG4ArgRe9gXkI0a/hFbGk80EzipQ0VW3bJ
2QdJTm974cbsrMCYCnXXKepqkEk8e72PIx4Oc06cCXcdUD7jM6RQwhVdClT/0nu1
x7CE5cN/AkhMy+/0J4r6d2wZYwUkFq1mAcCHWl67AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5fm1sCUNlU07zZZPXw5GjInMzmIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzAyZTFjMTJkLTQxNDgtNGQ4Mi1hNDk5LWRlMmEzMWFjZTg5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2oAAwDQYJKoZIhvcNAQELBQADggEBABGIHD6eRoXrcw+5gVcj8oMkgkFg
iolV6hoiwcizJ/G3pKz3CChDjCI40bPGXed8oIOTxyIHdCIPgwgVIko9swNus8eU
S2goBVZF+NJ63bq1xdECyAHfOu0e0AQ3k+tU+7KZRs3kXAbVuaYCdIf3cg3iZZjX
SFTzIcVA5Y7T3Be0lwgsVK0+Wh2dEn74x1hO5BTaPxmT/kLTBTzU/zf0Wzz/fnmo
TpFHC4SvNyrfhfxi4IpkBX8W+vEu4Dca/W3lKvM0vv+74vXAWVG7l7UpY61ledZp
Rr61/7V4IgKXxcftW1A3No2bTMFAHYHXRUebS/dNucEv31wApKLoCpJBXjU=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:53:50 2025 by rpki-client