Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa
File:                     48a5c303-790e-4793-8605-635e3316bc86.roa (raw, json)
Hash identifier:          hR8f6be1yGtPNg6GB6fGqQEE9R4Uhmmk2Oxyly36FOw=
Subject key identifier:   F6:26:39:E8:3A:64:3A:DB:F6:AC:47:51:85:1C:EC:DB:8A:BD:3C:A8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E76457ED6E07B6EF59CB0EEEB7653FFE4D7648F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa
Signing time:             Fri 25 Jul 2025 16:10:58 +0000
ROA not before:           Fri 25 Jul 2025 16:10:58 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.160.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:76:45:7e:d6:e0:7b:6e:f5:9c:b0:ee:eb:76:53:ff:e4:d7:64:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 25 16:10:58 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=20bef7bb3058c21aeb242b5b3c8abd1bd17d65f2ea76d1d7a71fb781423c6d32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:81:9f:64:7d:ad:91:ac:22:ea:1d:6e:99:
                    92:46:d5:5b:fa:94:2e:8b:aa:c7:7a:5e:50:2f:0b:
                    a9:ad:06:56:aa:26:26:b4:5f:a4:94:fd:5c:fa:9a:
                    e6:66:09:53:18:8f:e8:69:2d:28:1b:12:dc:ea:73:
                    20:39:f0:2c:a8:a1:fc:3c:99:2f:2a:e5:34:17:ee:
                    54:ff:82:5f:eb:60:24:cf:2a:01:61:2d:2d:a5:3b:
                    ff:93:3c:80:39:ce:45:a2:7f:db:90:c8:c7:de:2b:
                    03:2e:79:07:7d:30:72:7d:2f:91:e1:a5:4b:7a:04:
                    e6:21:96:ff:c4:38:f5:52:fb:07:93:e3:fe:b2:93:
                    bb:a6:d5:a4:ca:a4:e2:7b:ca:47:21:94:71:71:3a:
                    3e:ad:41:fc:60:59:d5:bc:5b:a6:b6:9c:04:b4:f4:
                    cb:c4:5b:aa:9b:b2:47:c0:88:a1:d8:63:53:97:09:
                    17:e5:89:93:09:a3:b6:ca:98:99:2e:93:dc:52:bc:
                    1c:7f:75:a0:87:83:75:cd:7d:c4:51:1b:15:cc:cd:
                    c1:6b:25:14:d4:0f:ed:0e:8d:c3:e8:d7:01:eb:91:
                    df:0e:ab:4c:e4:ff:62:aa:36:8d:50:9f:9c:50:0e:
                    06:3f:39:45:2b:73:a5:55:86:1a:f8:a8:09:df:e6:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:26:39:E8:3A:64:3A:DB:F6:AC:47:51:85:1C:EC:DB:8A:BD:3C:A8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         8d:7d:9a:94:59:f5:08:8f:97:37:88:a4:74:c5:3b:34:38:06:
         9c:a2:ae:65:53:b7:1c:d9:35:ff:88:47:14:33:bb:a3:b0:49:
         46:25:2d:ee:4c:6d:ca:fc:52:e7:4a:a7:f4:10:87:af:9f:23:
         10:f3:09:ec:68:e5:0c:ac:54:af:16:6d:ca:10:f9:d2:f3:46:
         82:48:0c:56:d4:3a:36:6b:26:ff:48:15:d6:97:29:c6:96:01:
         d8:ae:6a:7d:06:40:2c:f5:ab:db:9f:30:39:49:c8:6e:46:03:
         32:35:33:44:5d:8a:fb:81:00:bf:79:69:f9:88:29:80:2f:c2:
         93:df:b4:4b:fa:21:bb:5b:8d:08:46:91:c7:a5:fd:8a:10:7b:
         5a:ec:71:b5:73:91:26:a0:db:9f:76:f5:45:8b:df:65:2c:08:
         26:69:a7:fc:95:dc:c8:db:76:02:2e:36:7a:e9:a8:78:40:5d:
         72:e0:9b:0d:de:32:81:dd:4e:08:c8:19:9c:fb:ac:73:dc:d6:
         63:b5:bc:04:df:b8:fa:a0:14:04:8d:bb:21:e6:f4:6d:1b:0e:
         09:1e:8f:d6:c5:c6:4f:d2:2c:15:0f:2b:f0:5c:c7:2f:0f:28:
         4d:ab:92:9a:04:fc:ff:bf:c3:e7:24:b4:bc:db:5a:09:4f:bd:
         cb:e8:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:02 2025 by rpki-client