Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
File:                     06632fd0-6abb-437c-aec2-0a661e165739.roa (raw, json)
Hash identifier:          qqJ2DMX3Q6++qsMPvyrC0kH4s4KEHt7XV+rsZ3SQThg=
Subject key identifier:   A1:AD:7F:1D:C1:0B:B3:18:6D:C7:FB:55:93:6E:2B:A9:EC:FA:F2:CF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4012600EB623D703D3564219609964A3A8A41DAB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
Signing time:             Tue 20 May 2025 17:30:21 +0000
ROA not before:           Tue 20 May 2025 17:30:21 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.83.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:60:0e:b6:23:d7:03:d3:56:42:19:60:99:64:a3:a8:a4:1d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 17:30:21 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=53fbe57d067072a89ff3d1d2a79f3e49eea87e1af73077d24796d5e7f5ca8b7c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:31:f8:d7:df:5b:14:93:15:41:a4:e9:d7:c9:
                    01:24:58:a1:e4:67:2e:77:89:6c:5f:57:8a:c6:5b:
                    70:2c:d8:41:77:2a:71:86:b5:45:8b:b2:40:fb:89:
                    90:bf:65:32:f8:35:23:39:0c:47:f2:a4:57:73:aa:
                    bf:1a:d5:d6:1d:a2:6e:98:f0:80:fa:4c:21:22:52:
                    65:bb:55:c2:73:82:51:c7:68:20:0f:b5:93:08:ba:
                    27:2f:ae:5d:54:b3:26:8e:36:83:3e:10:ef:f3:52:
                    d8:d5:e0:14:f1:06:e8:d9:5e:67:6e:b2:97:6c:c8:
                    26:fb:75:9f:d8:fc:78:35:05:7e:60:10:71:74:5f:
                    18:34:fe:fb:ea:3b:14:fd:b5:33:a0:2e:7c:38:bf:
                    52:4c:a8:f0:06:7b:46:a3:b2:5f:53:70:de:3c:22:
                    dd:d0:82:ef:8b:01:05:90:0c:e8:8a:9c:81:ef:89:
                    d8:b1:8c:60:62:75:55:92:95:2c:72:70:e1:92:63:
                    b2:13:4b:9c:14:1a:4e:c8:ae:fa:a8:27:c6:ae:68:
                    5a:7c:9d:b0:91:43:1c:fa:0f:e9:6d:8e:b5:7e:8a:
                    c0:20:7a:ec:a5:96:12:7f:04:4a:f9:68:b2:f7:80:
                    d0:16:b7:a9:99:d5:3b:78:d5:01:e5:8f:66:03:ed:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:7F:1D:C1:0B:B3:18:6D:C7:FB:55:93:6E:2B:A9:EC:FA:F2:CF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:5e:e8:37:f4:47:af:bf:76:04:ab:15:0d:d5:cf:0a:1c:c4:
         75:3a:7d:fe:92:be:47:52:d8:90:d7:cc:ef:62:7a:86:64:9f:
         70:4a:55:bd:75:a7:53:59:9e:ff:29:c3:23:3d:3e:37:64:46:
         75:28:72:d7:80:82:6c:a6:86:ef:e1:1b:88:83:9f:7d:c0:02:
         11:29:0f:00:d0:4f:9b:28:3c:b7:ed:0a:91:9d:89:1d:c4:1d:
         ee:8b:de:9d:c5:4b:c9:36:41:2b:90:f3:2e:37:7f:12:88:91:
         37:24:58:36:0d:bc:f9:7c:aa:dc:20:1f:4d:89:fd:21:45:8a:
         b5:96:82:2f:8b:ea:a9:af:ce:1c:04:b5:f4:82:3d:c5:89:71:
         1a:8b:04:9c:b1:cf:0c:00:a6:dc:82:b4:13:13:6f:db:0d:de:
         6a:a9:41:18:a5:76:91:60:1f:b8:61:fa:c8:9f:32:55:d5:1e:
         87:6a:6a:f1:9a:10:22:ba:c4:63:16:8a:70:8e:e4:ca:1b:69:
         e5:e9:8a:c7:42:d3:38:45:3a:84:18:57:dc:88:4b:57:db:2f:
         ce:97:96:ec:74:51:1f:10:a4:ec:83:40:d2:e7:a9:6c:4f:57:
         1f:4b:07:b2:dd:0e:06:06:cb:58:cf:38:2b:ce:f1:b8:b1:47:
         e6:9a:f4:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQBJgDrYj1wPTVkIZYJlko6ikHaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTczMDIxWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1M2ZiZTU3ZDA2NzA3MmE4OWZmM2QxZDJhNzlmM2U0OWVl
YTg3ZTFhZjczMDc3ZDI0Nzk2ZDVlN2Y1Y2E4YjdjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqMfjX31sUkxVBpOnXyQEkWKHkZy53iWxfV4rGW3As2EF3
KnGGtUWLskD7iZC/ZTL4NSM5DEfypFdzqr8a1dYdom6Y8ID6TCEiUmW7VcJzglHH
aCAPtZMIuicvrl1UsyaONoM+EO/zUtjV4BTxBujZXmduspdsyCb7dZ/Y/Hg1BX5g
EHF0Xxg0/vvqOxT9tTOgLnw4v1JMqPAGe0ajsl9TcN48It3Qgu+LAQWQDOiKnIHv
idixjGBidVWSlSxycOGSY7ITS5wUGk7IrvqoJ8auaFp8nbCRQxz6D+ltjrV+isAg
euyllhJ/BEr5aLL3gNAWt6mZ1Tt41QHlj2YD7RsNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoa1/HcELsxhtx/tVk24rqez68s8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA2NjMyZmQwLTZhYmItNDM3Yy1hZWMyLTBhNjYxZTE2NTczOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2U4AwDQYJKoZIhvcNAQELBQADggEBAK5e6Df0R6+/dgSrFQ3VzwocxHU6
ff6SvkdS2JDXzO9ieoZkn3BKVb11p1NZnv8pwyM9PjdkRnUocteAgmymhu/hG4iD
n33AAhEpDwDQT5soPLftCpGdiR3EHe6L3p3FS8k2QSuQ8y43fxKIkTckWDYNvPl8
qtwgH02J/SFFirWWgi+L6qmvzhwEtfSCPcWJcRqLBJyxzwwAptyCtBMTb9sN3mqp
QRildpFgH7hh+sifMlXVHodqavGaECK6xGMWinCO5MobaeXpisdC0zhFOoQYV9yI
S1fbL86Xlux0UR8QpOyDQNLnqWxPVx9LB7LdDgYGy1jPOCvO8bixR+aa9FY=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:52:52 2025 by rpki-client