Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa
File:                     1b80efda-eeda-46b9-a4d2-4d1341510396.roa (raw, json)
Hash identifier:          W7IV00ehwT60Phr+ef9z0FAGKHdLaoXjnI4qZlolUL8=
Subject key identifier:   EE:CA:50:D0:C6:B3:50:02:C9:74:1D:4C:F2:19:48:AF:29:CC:3B:DE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27816F00F4098D41368961B344F86C81F7788A64
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa
Signing time:             Tue 29 Jul 2025 15:50:54 +0000
ROA not before:           Tue 29 Jul 2025 15:50:54 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.151.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:81:6f:00:f4:09:8d:41:36:89:61:b3:44:f8:6c:81:f7:78:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 29 15:50:54 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=a0cc05e6e9d317287512cc5b7061d74d4e79dd2c98c0ed0cc3130b79407529cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:15:4e:00:c1:4b:ea:79:7a:68:35:e6:58:
                    7e:1f:c8:f5:41:1f:4d:84:91:f8:24:ea:35:1b:96:
                    8b:94:ac:55:82:20:f5:74:66:32:cc:45:a3:77:1e:
                    89:bb:ca:49:65:09:1e:8e:97:e6:fa:be:dc:84:e8:
                    0a:21:4e:ea:79:6f:9d:eb:8e:c6:d7:2e:c4:bc:9b:
                    6f:e9:d8:ac:3b:2c:06:a2:76:89:64:83:57:4f:90:
                    58:5a:9e:b9:a2:84:fb:25:42:ee:f0:05:e0:88:9a:
                    9c:a0:91:70:91:52:93:6b:6b:b8:b7:be:83:8b:d4:
                    e2:5c:c3:30:81:fb:ca:7d:46:3f:e7:f4:a2:c4:85:
                    36:19:68:40:f5:5d:c3:c1:dc:c2:38:d7:23:a7:f8:
                    bd:30:4b:ae:62:84:cb:2f:cd:1b:62:f9:ee:5e:0e:
                    23:af:e1:3e:a9:ee:a0:1c:8b:c0:b1:60:1e:ca:61:
                    fc:38:f2:c4:8b:88:ea:d1:51:34:92:56:86:7c:a9:
                    5d:98:0d:49:49:67:17:4d:45:63:f1:56:0a:91:67:
                    99:73:30:4a:ff:48:c0:e3:bd:db:f0:99:e4:95:d8:
                    92:3f:f8:e9:37:d2:10:9d:0f:fa:4e:05:71:31:92:
                    6e:67:b1:bc:ab:9b:02:9c:7e:79:10:10:a9:bc:99:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:50:D0:C6:B3:50:02:C9:74:1D:4C:F2:19:48:AF:29:CC:3B:DE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b80efda-eeda-46b9-a4d2-4d1341510396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.151.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:39:28:44:5a:47:90:29:78:f2:15:d2:52:79:58:ca:5c:b5:
         36:d8:94:2b:2f:73:80:3e:b4:4e:56:75:c1:64:cf:21:52:2c:
         aa:77:d4:58:72:15:e5:7b:18:8c:5b:21:57:01:ee:a0:fb:c6:
         f4:8f:77:4b:f3:ad:30:8e:e8:7c:9e:68:ab:0b:79:e5:16:40:
         12:ab:6b:56:2a:19:37:00:a3:db:8e:98:c0:06:50:51:83:9d:
         3a:ff:6f:07:53:d2:5f:e0:24:be:b9:fc:75:d0:b0:26:94:a2:
         3f:18:90:ff:4c:d3:87:ee:36:68:ec:ef:35:dd:d9:29:71:8a:
         63:ec:0f:0d:09:31:33:a8:76:7a:cd:7e:1d:62:81:52:a7:12:
         68:5e:e8:ab:66:e2:d5:5e:67:b0:d5:c4:8a:e7:52:e7:29:69:
         53:e6:db:8a:77:b7:42:69:40:f6:32:9f:5f:0d:d7:36:ef:c1:
         2f:90:02:1f:82:0a:fb:6b:1c:4a:1d:6a:20:85:58:85:91:10:
         7d:a4:d6:02:ad:b8:d9:c5:13:c5:77:63:cb:c3:c7:99:6f:40:
         4e:31:38:ac:7d:02:5f:23:b7:d9:0d:c6:33:d3:77:c2:f0:d0:
         93:e5:9b:fc:13:99:40:0a:00:74:87:2d:da:bc:39:88:bd:d5:
         11:ca:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:31 2025 by rpki-client