Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa
File:                     44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa (raw, json)
Hash identifier:          BRWL2y46GOH7/BzjkzmtfT0uVBdw9Mgsdp+ECCB2jyg=
Subject key identifier:   D7:69:36:16:D8:7A:6B:A1:9F:91:82:24:87:18:4E:B3:4A:38:64:CA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2A3033A37FD575F8BEE1545973CF00ADE8BBD232
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa
Signing time:             Sat 26 Jul 2025 00:51:35 +0000
ROA not before:           Sat 26 Jul 2025 00:51:35 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.32.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:30:33:a3:7f:d5:75:f8:be:e1:54:59:73:cf:00:ad:e8:bb:d2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 26 00:51:35 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=dc77ffa294718e571906d3888e0c29bc3ed64448f2793486a08460c8e1b62444, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:c8:a6:91:92:b9:bc:87:af:fd:30:5f:10:
                    19:4e:c9:85:05:0e:97:db:83:b7:51:5c:39:ad:4d:
                    40:5a:37:f8:b2:5f:a1:fa:0a:57:7a:73:34:57:4f:
                    91:cd:76:37:2a:85:e6:d7:8a:b7:b7:ac:74:6c:4b:
                    56:7f:06:f1:df:c3:94:10:a7:61:84:88:c3:28:b3:
                    a5:64:d1:ba:54:92:a4:81:ee:08:35:aa:2d:6c:6f:
                    30:b8:f3:0c:39:5c:fd:0b:a5:c7:54:0f:df:39:ee:
                    6a:f0:59:ad:26:f7:0a:28:6b:29:39:59:80:16:55:
                    81:02:8a:0e:76:f7:cb:7a:7d:d4:a7:45:a0:f3:8a:
                    3b:ef:a3:1b:9d:3b:13:b4:73:04:d2:49:04:bd:c1:
                    a9:fb:ef:59:b0:e6:dc:7b:0e:28:2f:fa:df:d0:ad:
                    3a:05:90:61:d7:dc:62:d6:24:d4:35:96:aa:df:1e:
                    8f:5b:dc:98:c9:cd:2b:07:8f:a2:2e:d7:9c:2d:09:
                    a7:7c:22:a6:36:41:4a:2f:4a:53:0a:8f:29:27:b6:
                    8d:8e:f4:c4:4f:8f:f5:19:f3:d2:43:c1:18:cd:84:
                    5d:fd:3b:9e:94:9e:5c:05:5d:fe:61:c2:64:ed:61:
                    94:f3:c8:bc:88:bd:18:b3:50:76:97:06:c1:32:d4:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:69:36:16:D8:7A:6B:A1:9F:91:82:24:87:18:4E:B3:4A:38:64:CA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44bfd9c3-cf8b-4f99-b10c-d93453aaa64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:42:0a:65:e6:7b:2b:8b:26:93:74:9b:ec:96:e8:0b:74:
         42:c0:cf:ed:2b:f7:c7:09:a9:e3:29:88:b8:ac:c0:16:9f:05:
         b7:22:30:e1:28:24:79:2e:f7:19:4b:59:5a:7c:aa:8c:de:77:
         92:1b:7c:52:7a:c8:ec:42:62:e0:0a:e4:9c:f1:1e:c0:e5:24:
         eb:1e:53:35:76:f0:10:90:d9:ce:8f:c0:cd:8b:3e:1e:8b:ec:
         bb:fb:44:bc:d0:83:54:e3:d5:4f:10:ae:1e:39:7c:42:f5:13:
         62:ed:37:23:01:a9:9f:90:9d:8d:a1:af:69:cd:d5:bd:64:ef:
         77:e5:9a:28:0b:e6:82:64:dd:47:aa:4b:24:64:e9:76:0a:bf:
         4a:e1:6f:af:21:57:05:19:f2:66:24:d0:8a:07:b3:c2:69:42:
         ca:c0:25:a2:9b:d5:d1:f6:2c:fc:e0:cb:e5:93:9a:8f:03:24:
         22:43:8d:bb:fa:3e:4b:35:fa:b7:0a:ce:f9:ff:8b:89:95:8d:
         2d:32:14:60:90:60:20:fc:4e:3a:aa:2a:35:68:59:f8:8a:9a:
         9e:00:b2:3f:bb:f4:15:a1:c4:87:55:e5:00:74:e4:39:5c:10:
         3f:e8:43:0c:46:f0:6c:49:d0:59:6e:d6:d6:81:2e:4b:2f:33:
         86:f5:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:30:00 2025 by rpki-client