Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f7baf32-49d8-4e8f-990c-772af5b5f57e.roa
File:                     5f7baf32-49d8-4e8f-990c-772af5b5f57e.roa (raw, json)
Hash identifier:          Ahi9tv7UkDVyyBfxcSCG0PETlkTIKwvMueQEtobSyD8=
Subject key identifier:   CC:D8:B9:6B:93:5F:46:6A:F7:E3:F9:10:97:C2:D0:72:EE:6D:E3:DA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       045674C0F437FD78B865599C008BADFDAEA04F50
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f7baf32-49d8-4e8f-990c-772af5b5f57e.roa
Signing time:             Tue 03 Jun 2025 15:20:20 +0000
ROA not before:           Tue 03 Jun 2025 15:20:20 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        34.224.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:56:74:c0:f4:37:fd:78:b8:65:59:9c:00:8b:ad:fd:ae:a0:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 15:20:20 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=490e33cefcb18dec030b00180572107c39d64791a8d52fcb70d5b1eb7237c9b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:da:ce:b0:bd:47:3a:ce:8b:d7:0b:27:ec:
                    64:31:ca:e5:fb:50:b0:87:f4:a3:37:fd:98:8b:f7:
                    95:c8:20:51:ec:67:ef:6e:89:ea:60:cf:18:46:69:
                    fc:0f:05:2d:aa:e5:ac:26:e0:bf:f2:b8:ce:61:04:
                    ee:a5:53:b4:dc:db:65:ab:25:23:73:f6:36:28:89:
                    75:66:8c:94:97:bd:8a:37:00:db:60:e6:ff:3e:11:
                    b7:59:c9:31:2f:a8:19:7f:92:c2:db:c4:7a:c5:46:
                    0c:5b:97:7c:7c:f8:4e:88:88:4d:8d:39:dc:8f:49:
                    08:12:19:9d:21:13:ae:7d:ec:58:e3:a7:2e:e2:c5:
                    a3:5c:dc:44:d9:db:66:a5:a2:cf:0b:21:7a:4c:e2:
                    4f:46:35:71:7a:fe:cf:5d:1f:33:87:ca:ee:d8:10:
                    24:dc:7b:d9:e5:f7:0c:85:77:c8:e9:72:71:ab:bd:
                    4a:a6:a6:a0:59:b1:d5:b7:52:aa:01:e6:a8:06:d1:
                    58:e7:30:b0:86:42:78:f4:77:66:a5:0a:0b:36:59:
                    d0:32:26:9d:ce:03:37:04:01:7e:c5:81:7a:68:e1:
                    b6:97:0d:e8:52:3f:42:4e:b4:e2:b4:5f:df:78:26:
                    f0:6b:97:89:17:97:bd:a2:c9:4f:b9:47:86:b6:82:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D8:B9:6B:93:5F:46:6A:F7:E3:F9:10:97:C2:D0:72:EE:6D:E3:DA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f7baf32-49d8-4e8f-990c-772af5b5f57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.224.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         88:95:56:6d:f2:33:b1:79:18:62:89:69:49:90:88:94:12:ea:
         7e:6a:99:f6:5f:5e:88:3e:ed:48:20:1e:a0:55:17:39:90:c0:
         44:e9:c3:60:30:98:34:e2:d9:c9:72:01:38:29:de:60:32:ff:
         48:17:27:e3:b5:4d:22:9c:f9:50:73:53:49:24:98:f5:7f:79:
         5b:43:59:dd:0b:c9:ec:c4:6d:cf:13:e2:4f:ff:0a:fe:49:fb:
         cf:08:90:19:5e:dd:05:11:b7:9f:f1:11:f4:1b:81:bd:68:ad:
         1a:6d:ba:f3:9c:45:3a:12:b8:bb:c0:ce:14:7a:0d:75:5b:72:
         f0:2e:89:8c:eb:22:50:48:45:b0:06:14:ba:14:08:fe:75:0c:
         df:38:4d:54:b5:4b:f7:cc:3d:80:66:29:09:07:ed:44:59:a1:
         ae:ab:88:bd:22:b9:c1:86:d6:a1:3d:59:af:69:55:e8:66:22:
         95:9d:8a:8e:04:09:5c:3d:08:1d:2a:a4:24:aa:c5:5e:57:8e:
         d5:f2:a6:4d:98:fb:05:86:15:97:80:b3:87:b7:72:fc:bf:5e:
         94:ed:85:8f:f9:03:76:ab:e0:ba:87:5b:ab:de:8c:d4:97:4e:
         36:66:78:19:7a:bb:c8:20:43:81:14:0e:01:18:41:5b:39:c7:
         71:6d:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:36 2025 by rpki-client