Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4994261d-13bf-4d13-b755-0781f1b50922.roa
File:                     4994261d-13bf-4d13-b755-0781f1b50922.roa (raw, json)
Hash identifier:          FMWjWowsDqwmvAtZD6VblETx56NldEu0NyCGAwMlk20=
Subject key identifier:   C2:EA:BF:21:4D:55:70:29:38:08:03:10:70:C5:02:A0:24:05:B3:3F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4ED54C9ACB9180CC4A4564B3A848FC2BD76CD386
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4994261d-13bf-4d13-b755-0781f1b50922.roa
Signing time:             Tue 20 May 2025 16:21:49 +0000
ROA not before:           Tue 20 May 2025 16:21:49 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        134.62.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d5:4c:9a:cb:91:80:cc:4a:45:64:b3:a8:48:fc:2b:d7:6c:d3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 16:21:49 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=5f4a828caa01fd3c6102e784c8c5b5d813e5b9507b837da3bfefa9433bdb891e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:45:5b:4e:50:24:54:de:47:eb:0d:ba:07:
                    d3:79:53:38:3c:3f:ba:bb:9c:07:ec:a0:9c:1b:7f:
                    e1:27:13:5f:db:50:30:3b:b5:d2:d3:d9:35:2a:53:
                    73:dd:0f:56:a8:6a:77:b1:2d:49:25:9d:8b:ad:96:
                    f9:32:57:17:30:fd:c2:d8:9c:a4:6c:b8:00:24:8a:
                    fb:41:23:b3:7d:ae:dc:bf:9b:cd:d0:fd:b2:3c:e3:
                    32:cd:0e:14:2a:8d:42:1c:38:02:47:9a:de:fa:c7:
                    ac:ea:2d:45:3c:8a:a5:e6:57:e2:2f:33:8e:75:88:
                    da:14:f7:34:85:fb:31:9c:15:1a:03:e0:b0:a6:05:
                    58:19:da:be:aa:6c:68:4e:b7:2f:63:f2:fb:9a:67:
                    43:6c:19:99:e7:90:32:6c:30:07:fa:aa:6b:73:b1:
                    c4:f7:93:7d:bb:b2:5e:ef:d6:6f:11:d2:ad:4f:93:
                    fa:4e:fa:7f:dc:89:6f:47:9e:ce:a0:01:e1:a6:5d:
                    da:87:f2:6d:57:9e:7d:3d:7d:11:f8:78:43:18:e5:
                    64:d2:21:11:a8:2f:b5:91:ad:38:9c:c0:17:c6:88:
                    b5:41:3f:03:b3:3d:e7:a2:18:11:4a:bf:85:e3:6a:
                    72:88:b9:f1:20:e6:3b:ae:70:ac:15:0d:ee:e5:47:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:BF:21:4D:55:70:29:38:08:03:10:70:C5:02:A0:24:05:B3:3F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4994261d-13bf-4d13-b755-0781f1b50922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:56:08:f5:1c:1a:c0:dd:7c:cc:7d:3f:2d:c2:2a:4f:ae:
         38:dc:bc:4e:0c:bd:00:24:d3:cf:b4:12:19:60:5f:05:8c:a9:
         95:24:b5:b6:00:ce:7a:1f:a5:7e:73:32:8a:c7:45:9a:91:f9:
         d5:a8:11:7b:c3:6e:13:00:b2:83:e1:81:e5:f1:f3:7c:e5:93:
         13:af:0c:68:02:05:06:56:70:62:2b:8c:fd:8a:0e:06:8b:b7:
         33:9d:fd:78:fd:5d:b8:4b:f7:d2:ec:ad:13:7e:67:45:33:b6:
         5f:94:d5:2e:9a:6a:69:6c:1e:e1:8b:33:0f:df:d7:66:8c:e7:
         50:4a:93:13:7c:97:99:2f:38:83:b2:a0:86:b8:cd:b4:7f:33:
         77:e2:2d:5e:cf:17:fa:60:3b:6a:f4:9f:66:ee:76:af:18:ba:
         2e:49:0c:b7:d8:4b:8e:20:ca:3f:91:d8:25:78:64:84:75:21:
         4d:94:55:7d:9e:4f:70:57:df:65:89:56:5d:ea:20:27:14:0a:
         3b:45:db:b3:39:c2:ea:ba:7d:b6:bc:89:6e:93:5b:63:6f:62:
         63:16:eb:ba:60:45:fc:ba:63:c3:d6:f8:25:c1:0f:5e:30:a8:
         7a:95:6b:7d:8f:c1:cb:4e:ae:2b:99:c9:b2:eb:7f:57:7d:b5:
         be:92:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:16 2025 by rpki-client