Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/465b22a6-e5ab-419b-ad6a-55ce7704428c.roa
File:                     465b22a6-e5ab-419b-ad6a-55ce7704428c.roa (raw, json)
Hash identifier:          m2GglQcInP5o5lLICmJ2vd59fqGKGc0V6+VruIHycDM=
Subject key identifier:   57:D4:C2:0E:BA:C8:EA:5B:B7:22:0A:F2:DA:EC:90:4A:A1:FE:D1:E1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0B3C7A7699191BB1CFDD98655F8F1A45363DCE0B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/465b22a6-e5ab-419b-ad6a-55ce7704428c.roa
Signing time:             Fri 11 Jul 2025 17:21:45 +0000
ROA not before:           Fri 11 Jul 2025 17:21:45 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3c:7a:76:99:19:1b:b1:cf:dd:98:65:5f:8f:1a:45:36:3d:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 17:21:45 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=12f44180c45c853d6d878618f5d76043be10ded3bd116c7870e1372480d0e2d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:be:d6:98:dc:35:10:67:6b:26:07:e1:c3:
                    74:88:59:d2:d2:92:68:75:0c:4f:eb:44:ea:7e:9e:
                    95:a4:2f:39:1d:b5:ae:6b:69:33:ac:57:7a:e4:df:
                    6d:5f:84:85:b8:30:e0:12:54:5f:ef:ea:27:ec:36:
                    81:59:1d:b3:ec:62:69:67:11:a1:ef:d2:3c:a9:4d:
                    ae:ef:d2:fe:f1:54:60:ec:5b:45:23:1e:f8:95:c1:
                    f6:bb:a9:47:9e:f8:e6:f5:14:6e:71:1c:b3:f2:60:
                    12:68:e9:59:30:c4:b5:e7:22:25:09:7a:b6:70:7d:
                    e1:32:94:19:5b:c4:8f:9b:6b:a9:f6:17:dd:7c:3d:
                    f4:72:68:12:f2:61:2c:cb:49:80:af:ef:25:44:eb:
                    da:df:a6:80:0b:2a:6a:ae:00:5f:88:a1:dc:80:3a:
                    1a:17:66:28:f7:f4:e6:df:22:d9:7c:2b:13:74:4d:
                    1c:98:be:df:c3:a9:06:74:c3:f0:03:fc:20:dd:cb:
                    29:a7:04:d7:1e:3e:6c:96:4d:85:85:0e:d6:32:54:
                    55:af:53:53:63:2d:46:4e:b0:ee:79:e2:1d:8f:ea:
                    80:26:f1:8b:5d:db:50:74:f5:fb:00:6d:46:f8:55:
                    8a:34:c0:a4:aa:75:44:c2:b8:a1:58:46:69:fd:50:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:C2:0E:BA:C8:EA:5B:B7:22:0A:F2:DA:EC:90:4A:A1:FE:D1:E1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/465b22a6-e5ab-419b-ad6a-55ce7704428c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:96:65:07:55:e2:58:eb:71:8b:da:48:bf:33:11:bb:1f:66:
         6b:fc:38:79:4e:9f:03:95:28:75:80:05:57:c4:8e:70:80:fd:
         29:5b:a8:62:e7:8c:02:7c:18:d8:10:1a:c8:61:78:45:81:a4:
         fc:ed:d6:b0:0b:63:2d:03:15:d6:f5:ed:4a:48:e9:e8:2f:0a:
         3d:52:e7:7b:fc:07:ae:cb:99:fe:73:68:3b:77:1e:64:2b:d6:
         21:b8:b2:aa:8d:8f:22:d8:11:c0:2b:6b:65:60:72:14:41:1d:
         43:0c:e7:cc:41:77:e1:ad:2a:6e:83:95:1f:83:c5:33:6c:ea:
         2a:ef:d7:dc:28:3b:f1:a6:95:7c:54:23:4c:b3:5e:86:a0:1c:
         b9:5c:fb:d7:43:c1:ed:c8:73:30:12:a2:77:83:9e:be:bf:7f:
         5c:c8:ca:cd:b8:0d:93:4c:d0:4f:9d:32:ab:89:39:77:3e:a8:
         62:fe:7d:82:09:bb:07:e4:ad:2b:3d:bb:fd:51:fc:38:cd:ea:
         9f:a4:fe:99:42:95:4b:b4:21:05:e7:50:ca:23:72:23:96:85:
         a1:c6:18:e6:09:ee:9b:c6:aa:71:4d:87:83:9c:67:f1:04:a9:
         4c:95:16:d2:69:1e:71:6c:04:9f:5f:1b:93:b2:33:cf:3e:e1:
         31:b6:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:36:58 2025 by rpki-client