Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/284965ec-abd5-4b19-9d3c-8bdfd54bbaf1.roa
File:                     284965ec-abd5-4b19-9d3c-8bdfd54bbaf1.roa (raw, json)
Hash identifier:          u4tcwH+zJLXWU52qpKGl99+iH3GbzseYQ/8reUIwbVM=
Subject key identifier:   FD:7D:91:46:1B:EB:B7:33:53:FD:5D:41:58:B5:A0:87:9E:E9:B9:1C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       53DA3A5B68153BA444AC03A07C63BA23FF50DC9F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/284965ec-abd5-4b19-9d3c-8bdfd54bbaf1.roa
Signing time:             Tue 20 May 2025 16:00:10 +0000
ROA not before:           Tue 20 May 2025 16:00:10 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:3a:5b:68:15:3b:a4:44:ac:03:a0:7c:63:ba:23:ff:50:dc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 16:00:10 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=484036ca5a8bcf00733acbd1b372b4bcd8263a37851063249a2c0756f422e949, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:a7:c4:ec:8e:fd:a8:0d:80:d2:a6:50:4a:
                    dd:db:93:84:d2:f4:83:ee:77:05:6c:3b:77:17:07:
                    5b:6d:ca:4e:f8:c1:f3:5e:0f:36:ac:7d:db:6f:ff:
                    b7:1e:d4:af:a8:ad:95:ea:25:67:81:ba:02:bf:70:
                    93:88:e8:cd:de:74:28:59:af:6c:2f:ef:c6:ab:92:
                    bf:16:68:aa:54:42:cc:61:54:a7:72:3e:0e:d8:24:
                    bc:08:fc:df:7e:e6:37:a4:12:5e:51:7e:5c:41:93:
                    e3:c5:bc:50:83:bd:04:06:44:90:13:41:ce:07:84:
                    7d:ab:78:12:ce:71:bb:37:82:8d:58:a1:f7:cb:5e:
                    15:04:aa:88:6a:fb:30:a9:7a:87:e3:e7:a4:c6:69:
                    fb:e9:49:1b:9c:47:c6:9b:e7:2b:c3:76:25:89:fa:
                    ba:7c:7f:c8:94:aa:b7:70:10:5e:b9:03:00:8c:5a:
                    e3:68:c7:19:cc:b7:d9:84:8d:b3:e4:5e:dc:33:e6:
                    2a:70:d9:ff:8b:3a:70:eb:23:b8:a8:72:21:dd:9f:
                    90:e4:70:03:43:c7:99:7c:19:11:6c:f1:8b:36:61:
                    f9:80:11:9a:6f:bf:f1:74:40:4c:fb:45:9b:73:49:
                    41:c3:86:ae:7b:52:1c:68:ac:8e:06:a3:cf:9e:90:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7D:91:46:1B:EB:B7:33:53:FD:5D:41:58:B5:A0:87:9E:E9:B9:1C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/284965ec-abd5-4b19-9d3c-8bdfd54bbaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:52:25:11:0e:7a:0b:04:39:1e:f4:7a:ad:1f:da:e0:e1:
         50:8d:0c:1e:79:8d:ed:bc:31:49:51:78:e9:0f:d0:30:6d:0f:
         cf:c9:97:a6:38:1a:1d:a7:95:80:e5:34:70:35:fe:20:23:c5:
         58:4d:70:54:2e:53:1f:cc:b8:8e:7b:49:16:c2:99:0a:69:1d:
         89:7f:bb:49:16:9d:5a:9d:ad:2f:6d:95:5b:26:5e:89:f4:5a:
         f5:f4:f3:c1:86:7f:2e:03:28:5e:21:fc:73:20:5a:c3:e0:de:
         b2:46:d7:4d:09:63:59:24:9b:e9:6e:2d:e8:ed:fe:de:01:bb:
         d6:62:5a:6c:49:b9:ad:e2:cc:3a:7d:98:3c:01:72:40:2f:fb:
         32:e4:dc:79:13:43:19:71:c2:5b:1e:1e:21:82:85:b9:ee:c2:
         58:bd:dd:9e:d9:4b:02:6b:d4:46:56:81:63:dc:9c:3e:a3:cf:
         9f:6c:f0:8c:61:07:d3:28:75:5b:94:c1:b2:56:6b:0a:a6:d8:
         2b:70:c3:e7:32:cd:9f:22:2c:99:74:c1:90:51:a3:84:3e:4a:
         e1:d8:b2:9b:4e:39:79:4a:a8:f6:be:c8:34:e2:f3:a5:96:94:
         8d:f7:ce:c2:6d:ab:4e:ca:3b:f7:0f:2f:b4:e2:a2:d5:ba:05:
         08:b4:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:42 2025 by rpki-client