Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/292a5665-c917-49f2-8ee9-452a2ed62317.roa
File:                     292a5665-c917-49f2-8ee9-452a2ed62317.roa (raw, json)
Hash identifier:          t4fUIarkUxhTGJl7pNTt793o3FYeuSwVmm/rxZ51Hds=
Subject key identifier:   27:AF:ED:FE:8E:44:9F:FB:7A:3B:C2:D5:30:0B:50:D8:66:BC:AB:CF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5071BDDEAC2A66D109626D352D03BF4DB87D3D34
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/292a5665-c917-49f2-8ee9-452a2ed62317.roa
Signing time:             Tue 03 Jun 2025 15:01:20 +0000
ROA not before:           Tue 03 Jun 2025 15:01:20 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.248.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:71:bd:de:ac:2a:66:d1:09:62:6d:35:2d:03:bf:4d:b8:7d:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 15:01:20 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=5806807a4fabf7cb7d7351022639b7b6329c099e9a7db23f39b2426fcf3c2991, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:b8:74:15:02:b1:dd:73:cf:51:88:d4:f2:
                    af:12:4f:1b:dc:4f:d6:45:3f:2d:43:1d:f0:77:a0:
                    21:33:a8:f7:e1:b7:6a:00:49:d2:11:f0:d8:9b:e9:
                    3c:07:93:c9:dc:2a:1c:16:17:29:17:d1:c0:06:97:
                    bb:07:9a:51:b3:1b:3b:e4:ed:8b:c5:61:8a:ff:9b:
                    0a:05:0a:c2:36:21:0d:f2:34:f8:59:32:ea:28:db:
                    2f:a0:65:0f:68:92:bb:0b:4b:60:04:01:6f:fe:26:
                    64:d2:0c:e0:f6:cc:4e:99:03:1f:36:26:15:7e:d1:
                    3d:a8:9f:f4:9a:44:d5:96:67:06:5a:f9:f1:48:c9:
                    b1:21:8b:da:ab:40:8b:38:9b:37:79:cc:1d:97:3e:
                    c2:07:37:36:aa:24:31:2f:4d:42:fc:dd:f1:d1:4b:
                    7a:d3:4c:9f:f0:ca:ed:cf:dc:66:86:fd:4a:43:71:
                    ca:61:ed:5b:f5:50:b6:ce:3d:26:57:3f:7b:2a:4c:
                    fd:ad:ec:3f:18:14:26:49:fa:22:a0:86:a7:d1:10:
                    03:dc:4b:21:a4:42:98:81:a9:1c:d0:95:1a:de:5e:
                    e5:fd:c3:d6:5c:5d:00:86:6f:31:56:b1:12:25:3b:
                    c0:e6:37:71:5e:e6:ad:36:e0:b7:89:1f:b2:17:1d:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AF:ED:FE:8E:44:9F:FB:7A:3B:C2:D5:30:0B:50:D8:66:BC:AB:CF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/292a5665-c917-49f2-8ee9-452a2ed62317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.248.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:68:d6:53:6b:de:f3:8e:1d:2d:4e:ce:98:50:e4:25:6b:60:
         48:c2:31:17:58:96:5f:e0:db:9a:b9:f3:a6:35:f7:0f:a4:d8:
         93:19:93:8b:05:17:15:82:6e:5b:3a:1e:37:3d:c1:c3:60:41:
         af:cf:14:a7:57:2f:46:d6:1f:5c:15:6d:84:fe:19:24:12:64:
         4a:43:72:e6:05:8d:47:95:2a:cf:b9:87:6f:7b:24:dc:8b:09:
         b4:bf:ee:f3:c9:4c:09:fa:88:8f:f7:c6:1e:19:e1:52:30:56:
         ee:96:33:20:85:43:b9:31:40:c7:ed:cb:9a:62:37:0a:3a:80:
         e8:87:e3:f0:63:7d:8e:e4:3d:07:ff:8f:01:6c:a8:97:53:65:
         a7:a4:a2:8b:71:c5:f3:54:30:18:e7:0b:b4:7c:f0:57:fa:da:
         c8:ec:a1:69:c7:97:ac:c3:d7:fd:7e:4f:49:9f:30:c9:1c:47:
         2b:86:62:1d:fd:38:29:71:6a:51:0b:21:17:e2:5f:86:b2:9a:
         d8:a3:f9:d8:e2:c4:c4:f0:2b:9c:36:96:04:d1:b6:ba:cd:56:
         4b:53:0d:4d:73:7f:2d:04:b5:00:e2:5a:05:44:fe:12:e2:a5:
         29:f1:9a:8f:49:36:55:cf:cc:f6:70:6a:2d:22:64:a3:1f:62:
         42:c8:fb:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUHG93qwqZtEJYm01LQO/Tbh9PTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUwMTIwWhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODA2ODA3YTRmYWJmN2NiN2Q3MzUxMDIyNjM5YjdiNjMy
OWMwOTllOWE3ZGIyM2YzOWIyNDI2ZmNmM2MyOTkxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5rrh0FQKx3XPPUYjU8q8STxvcT9ZFPy1DHfB3oCEzqPfh
t2oASdIR8Nib6TwHk8ncKhwWFykX0cAGl7sHmlGzGzvk7YvFYYr/mwoFCsI2IQ3y
NPhZMuoo2y+gZQ9okrsLS2AEAW/+JmTSDOD2zE6ZAx82JhV+0T2on/SaRNWWZwZa
+fFIybEhi9qrQIs4mzd5zB2XPsIHNzaqJDEvTUL83fHRS3rTTJ/wyu3P3GaG/UpD
ccph7Vv1ULbOPSZXP3sqTP2t7D8YFCZJ+iKghqfREAPcSyGkQpiBqRzQlRreXuX9
w9ZcXQCGbzFWsRIlO8DmN3Fe5q024LeJH7IXHXBrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJ6/t/o5En/t6O8LVMAtQ2Ga8q88wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI5MmE1NjY1LWM5MTctNDlmMi04ZWU5LTQ1MmEyZWQ2MjMxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQD+OAwDQYJKoZIhvcNAQELBQADggEBAFJo1lNr3vOOHS1OzphQ5CVrYEjC
MRdYll/g25q586Y19w+k2JMZk4sFFxWCbls6Hjc9wcNgQa/PFKdXL0bWH1wVbYT+
GSQSZEpDcuYFjUeVKs+5h297JNyLCbS/7vPJTAn6iI/3xh4Z4VIwVu6WMyCFQ7kx
QMfty5piNwo6gOiH4/BjfY7kPQf/jwFsqJdTZaekootxxfNUMBjnC7R88Ff62sjs
oWnHl6zD1/1+T0mfMMkcRyuGYh39OClxalELIRfiX4aymtij+djixMTwK5w2lgTR
trrNVktTDU1zfy0EtQDiWgVE/hLipSnxmo9JNlXPzPZwai0iZKMfYkLI+yc=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:20 2025 by rpki-client