Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17aa1c29-ae73-40dd-8eb0-37df9b0b7600.roa
File:                     17aa1c29-ae73-40dd-8eb0-37df9b0b7600.roa (raw, json)
Hash identifier:          ftqt4xGZ6Xz4HfoAV8JT/0X/6B1D84ppHdf4d9+qMRY=
Subject key identifier:   4E:E9:2F:8B:43:CE:15:CF:1B:A1:67:93:58:80:18:F4:38:06:46:CF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6A1398423106C1A572F9BC8547FF2B93D0C6F280
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17aa1c29-ae73-40dd-8eb0-37df9b0b7600.roa
Signing time:             Fri 25 Jul 2025 16:30:17 +0000
ROA not before:           Fri 25 Jul 2025 16:30:17 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.212.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:13:98:42:31:06:c1:a5:72:f9:bc:85:47:ff:2b:93:d0:c6:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 25 16:30:17 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=438062f049fd992dbaf3f6a401c0fe4485a069c23174b0c3d368862ae0594045, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:07:e9:cd:fb:f6:b2:56:89:5d:7f:16:34:
                    2b:f9:7e:01:e0:e7:2c:15:c7:f1:20:c0:a8:4a:8e:
                    c7:f6:03:cf:0d:7b:5e:a6:43:cd:fc:f8:f8:b2:34:
                    b1:a7:ce:cb:15:95:20:4e:a9:92:3d:48:09:49:8e:
                    9a:f9:dd:8e:b9:41:b1:97:b9:97:38:9b:34:35:69:
                    88:8a:04:56:71:fd:13:48:7f:b3:c2:f1:70:b9:69:
                    31:c4:65:7c:50:00:b9:b9:08:cc:15:48:5c:6f:6f:
                    af:3d:29:69:95:73:b7:d8:91:ed:23:7e:3f:f1:b0:
                    bc:da:f0:ea:c0:21:ad:e2:40:b7:dc:dd:db:36:a2:
                    1f:ad:0d:2f:e2:69:ad:3a:ac:d2:6e:72:7b:ce:f5:
                    5f:ad:84:3d:fb:17:8f:07:ed:27:1b:ed:4d:b6:f4:
                    53:1b:94:f3:33:cf:9c:20:8e:ea:05:7d:77:aa:20:
                    63:06:23:85:d7:7a:72:de:70:4e:41:9c:1a:f8:03:
                    81:0c:55:39:ac:76:c6:e7:3e:85:1e:4a:ee:62:74:
                    09:73:01:a4:aa:f3:f0:2d:90:ec:bd:97:ca:53:2d:
                    94:f5:56:aa:04:d4:9e:8e:3f:d5:50:e5:35:37:41:
                    39:bc:5c:50:2c:83:9b:9d:d3:af:c6:58:b9:36:08:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:2F:8B:43:CE:15:CF:1B:A1:67:93:58:80:18:F4:38:06:46:CF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17aa1c29-ae73-40dd-8eb0-37df9b0b7600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.212.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:91:6d:b4:7f:5c:66:46:5a:a3:15:b7:20:e3:70:7a:cd:
         a3:bb:22:9f:ef:f3:af:5d:5c:cd:1e:ce:4a:27:37:90:d5:b1:
         17:7f:2e:05:3f:a8:b9:87:f4:3c:c2:f2:5d:99:39:2b:ef:85:
         52:7d:ef:89:65:dd:1a:22:1d:88:77:e9:38:d0:89:b8:28:50:
         49:6b:a6:ad:85:e8:ca:80:8c:2d:67:d1:9d:85:ae:da:cb:98:
         0c:9f:a9:b2:23:c4:14:47:a5:7a:c7:80:0a:0b:d8:91:f7:d5:
         b7:2b:98:42:69:b4:d7:a1:6b:62:ee:16:ce:a7:91:74:e3:38:
         6b:ac:3e:ad:cc:17:16:d1:c2:cf:3e:71:39:d4:33:fd:09:c6:
         3f:b5:d0:14:fe:34:55:f6:71:a5:61:05:5f:bb:88:f8:2e:cc:
         25:fe:a8:48:88:27:a5:ab:e3:73:dc:d0:40:b1:8b:b5:35:c9:
         82:f9:58:9b:d7:50:2e:a2:0c:78:29:e0:0b:47:48:82:4a:d9:
         35:d9:ff:10:40:4a:88:d4:9e:f7:4e:31:f5:45:f5:40:a5:de:
         e0:2a:15:99:f3:fc:6b:16:52:cb:fd:28:d9:1e:13:29:21:be:
         86:3f:a6:1f:ab:f2:a9:b3:ec:f7:68:1c:4c:dd:ec:33:42:97:
         6f:78:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:41 2025 by rpki-client