Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa
File:                     5f0772d8-f455-463e-9417-4ddc13856c48.roa (raw, json)
Hash identifier:          YI+EeaCZmraZ6Pt+mCFM8u8j6HdrR2VmobCi50ftrvI=
Subject key identifier:   B2:54:A0:9E:51:3D:09:7E:5B:3C:C6:7F:A0:B5:ED:19:5D:0B:99:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7ABCE2F0D2853E3C657A9E1B7FF0FC8DC9D7841B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa
Signing time:             Fri 11 Jul 2025 16:10:23 +0000
ROA not before:           Fri 11 Jul 2025 16:10:23 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.148.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bc:e2:f0:d2:85:3e:3c:65:7a:9e:1b:7f:f0:fc:8d:c9:d7:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 16:10:23 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=0d8df37df8e5ba84cd5e4e8557bc2f7155a5c3390fbbc96216d93a4d02bfa715, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:55:2b:26:49:86:24:d8:4a:e4:41:ec:a1:
                    df:45:99:60:fe:66:76:75:17:4f:5a:21:0a:fe:80:
                    3a:9a:51:91:0d:2b:56:63:10:a7:db:1d:f3:e6:f3:
                    9b:25:a9:40:e4:0e:17:01:0c:84:1e:a3:fb:a5:c3:
                    2b:5c:99:aa:d4:31:43:59:44:76:17:72:ce:ea:7a:
                    d6:10:68:f1:d3:0f:55:36:a8:6d:0a:05:02:ae:4b:
                    c5:9d:69:1a:06:f5:0d:50:f1:b1:7d:f9:b8:d4:69:
                    d4:60:11:e7:87:5a:8c:97:77:72:a9:1f:24:76:22:
                    9d:31:76:fa:e1:8f:2c:d1:d1:26:b1:ac:98:93:14:
                    c9:5e:0c:fa:23:0e:9a:59:0c:1a:7e:90:03:00:fd:
                    a1:59:6c:44:36:58:3c:6d:63:31:d7:1b:ca:34:dd:
                    cb:6d:ad:aa:d2:dc:75:7e:c5:47:05:b7:3e:7b:76:
                    2b:1a:2b:02:d2:ff:41:42:fb:83:0b:12:6a:17:0c:
                    6c:5c:7c:26:d4:f6:dd:e1:75:ae:72:64:9b:2f:46:
                    ca:07:e1:48:57:18:11:5c:28:c7:20:34:41:b9:04:
                    f7:b8:c0:45:bd:a1:b6:a5:3f:08:be:09:19:97:05:
                    fa:72:22:d2:9a:7f:11:5d:e1:fe:a6:0a:df:6a:01:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:A0:9E:51:3D:09:7E:5B:3C:C6:7F:A0:B5:ED:19:5D:0B:99:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f0772d8-f455-463e-9417-4ddc13856c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.148.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         af:7f:5c:c6:88:a6:0c:b9:57:ce:d0:a9:34:5e:2d:d4:79:b2:
         e5:59:be:8f:01:37:da:f3:82:38:a5:50:09:13:41:36:fb:04:
         6d:dd:45:d3:33:5a:83:13:ae:ea:8e:f1:e3:56:01:18:75:62:
         89:98:03:dc:dd:d3:7b:4d:a1:53:0a:d9:ae:0e:d3:53:05:dc:
         25:25:ab:d4:47:5e:64:8b:25:89:d4:69:93:ea:60:f7:16:ad:
         a4:a6:20:08:21:cd:48:77:b5:bd:eb:40:88:a2:00:b5:6e:6f:
         5d:40:07:b2:e3:40:92:4b:4a:c8:a9:44:bf:f5:12:34:19:6f:
         21:d8:59:37:c2:ef:d2:a6:6f:b4:65:81:50:25:97:6e:0b:a2:
         39:7a:f6:cf:6b:ed:b9:57:11:08:80:03:8b:84:14:18:0d:ee:
         18:cb:e0:5f:f7:21:f5:54:74:29:c6:02:fc:a2:c7:20:22:6a:
         ba:92:3a:b6:16:ff:7e:ed:1f:a7:69:7f:09:15:eb:a5:74:fb:
         b2:c4:09:14:99:49:cd:2f:47:5c:80:c6:da:74:0c:98:9b:e3:
         27:fc:44:52:f8:c2:b6:ee:aa:1e:01:a6:37:60:ac:aa:91:db:
         25:ae:d8:c1:c9:36:81:42:1f:11:e2:17:cf:2b:94:0d:64:02:
         76:5c:ed:83
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUerzi8NKFPjxlep4bf/D8jcnXhBswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTYxMDIzWhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZDhkZjM3ZGY4ZTViYTg0Y2Q1ZTRlODU1N2JjMmY3MTU1
YTVjMzM5MGZiYmM5NjIxNmQ5M2E0ZDAyYmZhNzE1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDn/VUrJkmGJNhK5EHsod9FmWD+ZnZ1F09aIQr+gDqaUZEN
K1ZjEKfbHfPm85slqUDkDhcBDIQeo/ulwytcmarUMUNZRHYXcs7qetYQaPHTD1U2
qG0KBQKuS8WdaRoG9Q1Q8bF9+bjUadRgEeeHWoyXd3KpHyR2Ip0xdvrhjyzR0Sax
rJiTFMleDPojDppZDBp+kAMA/aFZbEQ2WDxtYzHXG8o03cttrarS3HV+xUcFtz57
disaKwLS/0FC+4MLEmoXDGxcfCbU9t3hda5yZJsvRsoH4UhXGBFcKMcgNEG5BPe4
wEW9obalPwi+CRmXBfpyItKafxFd4f6mCt9qAT8PAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUslSgnlE9CX5bPMZ/oLXtGV0LmXMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVmMDc3MmQ4LWY0NTUtNDYzZS05NDE3LTRkZGMxMzg1NmM0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwISlDANBgkqhkiG9w0BAQsFAAOCAQEAr39cxoimDLlXztCpNF4t1Hmy5Vm+
jwE32vOCOKVQCRNBNvsEbd1F0zNagxOu6o7x41YBGHViiZgD3N3Te02hUwrZrg7T
UwXcJSWr1EdeZIslidRpk+pg9xatpKYgCCHNSHe1vetAiKIAtW5vXUAHsuNAkktK
yKlEv/USNBlvIdhZN8Lv0qZvtGWBUCWXbguiOXr2z2vtuVcRCIADi4QUGA3uGMvg
X/ch9VR0KcYC/KLHICJqupI6thb/fu0fp2l/CRXrpXT7ssQJFJlJzS9HXIDG2nQM
mJvjJ/xEUvjCtu6qHgGmN2CsqpHbJa7Ywck2gUIfEeIXzyuUDWQCdlztgw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:37 2025 by rpki-client