Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa
File:                     464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa (raw, json)
Hash identifier:          GPHSDA1kvjLE3lUiaxj/XjGzSgwgru3Y2mENLaiBtLY=
Subject key identifier:   51:97:A8:78:42:CB:24:F7:7D:2A:96:88:A1:A7:63:5A:96:55:99:66
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3815CF687C4EE7F23B6A41775D1704B889C426CA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa
Signing time:             Tue 03 Jun 2025 16:11:31 +0000
ROA not before:           Tue 03 Jun 2025 16:11:31 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.214.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:cf:68:7c:4e:e7:f2:3b:6a:41:77:5d:17:04:b8:89:c4:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 16:11:31 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=25425560b83bae8725bc5009da03124cb21ab906e97b4ed256f7b10a7b25a932, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:99:32:50:de:fc:79:ae:64:76:33:ec:6c:
                    f8:78:e8:5d:da:45:10:40:da:97:d3:7f:5a:84:8f:
                    ac:0f:86:4f:47:81:b9:31:b5:72:7a:f9:e9:a4:9b:
                    74:29:ee:6b:23:f0:c5:4d:cd:3d:6b:f6:6d:90:a2:
                    6a:ea:51:92:a6:b9:3b:85:8b:f4:cf:d2:15:33:82:
                    eb:19:8e:d6:50:78:c3:69:71:cc:66:01:83:df:8b:
                    1f:5c:c1:57:0a:46:65:bb:83:a5:42:8e:fb:16:f2:
                    c0:aa:76:85:70:82:29:9b:a2:a8:74:6c:03:42:48:
                    ce:19:71:cf:1b:6b:14:85:00:b6:97:75:ed:27:c6:
                    9c:9f:ef:0f:a3:68:86:c0:b5:b1:ed:b7:cb:dd:f4:
                    78:dd:05:e4:6c:92:d6:08:a7:e5:e4:0b:e9:b0:39:
                    29:3e:be:5e:43:7a:c5:cb:2e:52:7b:03:e6:6d:05:
                    2a:ab:2d:dc:49:5e:d0:f4:f2:c8:e3:90:58:9f:0c:
                    16:d5:07:93:67:af:41:66:7d:53:8b:13:c9:48:70:
                    52:65:01:1c:1b:2c:a6:09:60:a2:91:0e:c9:70:f0:
                    2b:4b:1a:da:fc:37:14:c7:69:ac:92:f0:08:b3:29:
                    cc:be:eb:64:ef:92:b8:50:e6:20:2e:c6:c3:77:51:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:A8:78:42:CB:24:F7:7D:2A:96:88:A1:A7:63:5A:96:55:99:66
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:e7:37:23:86:36:21:b7:7e:df:72:aa:9c:b9:15:5f:9e:
         09:37:54:47:91:a8:b4:70:c8:ff:47:0a:72:39:06:70:90:84:
         db:ea:8e:62:96:f8:0f:82:5d:34:60:56:9f:99:3e:96:7e:5c:
         29:a2:d7:d4:18:2d:be:d9:83:d0:04:ea:6f:55:55:50:5d:31:
         ed:5b:12:a7:9a:c2:ae:3f:f7:32:9b:00:ae:af:18:9c:d0:23:
         98:0d:63:b8:81:d5:6a:19:0b:40:77:0b:57:f9:56:7b:0b:9f:
         68:5f:fe:4e:c0:e5:d0:2e:c4:1b:8e:03:50:60:81:d3:1f:7a:
         d2:15:89:b5:b0:8e:98:83:dc:f8:b3:3d:09:14:de:5d:ef:c7:
         af:d3:86:90:91:37:83:b9:f8:68:3b:6b:2b:9c:b8:64:c8:aa:
         2d:6a:f0:05:7c:32:84:0f:1d:0d:54:a7:15:cb:d5:5f:9a:d0:
         8c:b0:ff:b8:0d:bd:5e:a4:04:3e:a1:86:5e:3e:7c:92:66:9d:
         c2:66:ec:cb:f9:ec:75:18:72:95:15:f1:2a:47:82:15:e7:38:
         a9:ee:99:1f:95:79:34:ca:cc:07:5a:a1:e7:98:38:75:0a:21:
         bb:de:87:df:23:1d:9c:d5:d3:75:e1:57:71:d3:6a:39:5c:9b:
         05:f4:3a:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOBXPaHxO5/I7akF3XRcEuInEJsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYxMTMxWhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTQyNTU2MGI4M2JhZTg3MjViYzUwMDlkYTAzMTI0Y2Iy
MWFiOTA2ZTk3YjRlZDI1NmY3YjEwYTdiMjVhOTMyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMlJkyUN78ea5kdjPsbPh46F3aRRBA2pfTf1qEj6wPhk9H
gbkxtXJ6+emkm3Qp7msj8MVNzT1r9m2QomrqUZKmuTuFi/TP0hUzgusZjtZQeMNp
ccxmAYPfix9cwVcKRmW7g6VCjvsW8sCqdoVwgimboqh0bANCSM4Zcc8baxSFALaX
de0nxpyf7w+jaIbAtbHtt8vd9HjdBeRsktYIp+XkC+mwOSk+vl5DesXLLlJ7A+Zt
BSqrLdxJXtD08sjjkFifDBbVB5Nnr0FmfVOLE8lIcFJlARwbLKYJYKKRDslw8CtL
Gtr8NxTHaayS8AizKcy+62TvkrhQ5iAuxsN3UcajAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUZeoeELLJPd9KpaIoadjWpZVmWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQ2NGRlYWViLTgwYzctNGRjYy1iYzFiLWVjYzFiNjQxZGQ4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc21gAwDQYJKoZIhvcNAQELBQADggEBABx45zcjhjYht37fcqqcuRVfngk3
VEeRqLRwyP9HCnI5BnCQhNvqjmKW+A+CXTRgVp+ZPpZ+XCmi19QYLb7Zg9AE6m9V
VVBdMe1bEqeawq4/9zKbAK6vGJzQI5gNY7iB1WoZC0B3C1f5VnsLn2hf/k7A5dAu
xBuOA1BggdMfetIVibWwjpiD3PizPQkU3l3vx6/ThpCRN4O5+Gg7ayucuGTIqi1q
8AV8MoQPHQ1UpxXL1V+a0Iyw/7gNvV6kBD6hhl4+fJJmncJm7Mv57HUYcpUV8SpH
ghXnOKnumR+VeTTKzAdaoeeYOHUKIbveh98jHZzV03XhV3HTajlcmwX0Ojc=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:37 2025 by rpki-client