Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa
File:                     61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa (raw, json)
Hash identifier:          UHKSSJ6kRBZiL66LJRiNbXLaQF3KvD62uLfKME+90Ok=
Subject key identifier:   3C:C2:C6:93:F0:2B:EF:F9:7F:01:1D:02:89:F8:4D:82:6D:70:1E:C1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       43F8DE7E8C7D8FEB014ABC4F64FCE1FCE9F75B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa
Signing time:             Sat 31 May 2025 00:20:56 +0000
ROA not before:           Sat 31 May 2025 00:20:56 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        52.93.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:de:7e:8c:7d:8f:eb:01:4a:bc:4f:64:fc:e1:fc:e9:f7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 31 00:20:56 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=1dfddb847859bac66274c2ecd742aa11326ce7bdf1c9d57bc20b61e02e2ea718, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:0e:10:59:6e:13:b0:b5:63:ec:bb:13:e7:
                    9c:cc:2d:e0:ed:c4:12:8c:1e:fd:2a:69:b1:c4:25:
                    55:1b:56:8d:af:1f:7d:c4:5c:b5:36:31:0b:37:d5:
                    c3:7e:37:87:a6:24:11:30:4e:51:72:a9:90:45:83:
                    56:76:18:8b:6c:cf:2a:ff:1a:28:06:cb:d1:4c:91:
                    0e:be:9a:ba:bf:2a:52:69:3b:a9:f7:88:2c:20:40:
                    a1:bf:e9:f4:36:62:f3:6a:13:0f:0b:b4:62:48:ff:
                    16:59:d7:e5:f6:40:05:41:63:5d:82:71:9e:11:68:
                    00:00:15:53:0b:fe:f1:1e:ac:17:61:89:f5:54:b9:
                    1f:11:cd:d0:35:b2:a4:ba:b2:41:4d:32:92:54:be:
                    9b:dd:ce:9a:b9:47:5c:1c:d2:1f:ec:d3:cb:0d:81:
                    ec:c7:84:50:aa:2c:e7:f1:d9:c8:f7:3d:27:76:7f:
                    6f:8c:6c:9b:a3:5e:6f:5e:55:d3:59:52:48:7c:7a:
                    0c:8f:77:6b:a5:7f:34:8b:2b:ca:92:84:ef:b3:e8:
                    ae:af:00:5a:21:59:a9:82:65:45:a5:89:4e:03:0b:
                    f7:cb:bd:21:b3:a4:11:e7:91:ac:03:72:56:98:ea:
                    80:4a:10:38:80:6c:71:e4:b4:72:1b:e5:8c:cf:60:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C2:C6:93:F0:2B:EF:F9:7F:01:1D:02:89:F8:4D:82:6D:70:1E:C1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:66:e5:fb:b9:a8:85:5f:0b:54:51:f1:c7:0c:cf:db:1f:
         6c:13:70:c5:f0:58:6c:8f:fa:b6:d3:27:58:33:b2:10:15:cd:
         5f:ad:e8:95:50:53:35:05:84:1a:0a:2e:15:6f:04:66:c7:0f:
         e8:b2:1d:db:b2:73:f4:9c:5f:91:6a:3b:04:68:16:0c:44:c9:
         46:f1:75:7a:7b:a1:2e:a9:13:87:ae:ad:fb:dc:e7:a3:3f:93:
         07:90:40:31:5b:45:00:2f:94:85:56:2a:08:b2:3f:21:a4:5d:
         c5:22:96:69:3c:75:8f:98:ab:0a:fd:71:14:91:ff:07:c1:44:
         17:46:ef:25:91:ba:7f:4e:f4:97:cf:bf:27:5f:ef:19:cf:da:
         06:90:a9:5e:99:76:35:ef:77:dd:dc:67:e8:41:ec:cb:4a:41:
         11:0f:90:3c:89:d6:20:aa:0f:66:11:90:06:ca:b0:8f:fb:9f:
         de:2b:1e:f1:f9:fb:f1:ea:c1:f6:36:9f:90:3e:97:02:a1:b6:
         53:a5:74:15:8b:d5:a6:54:a7:d3:5f:37:f5:f8:57:3f:6f:0b:
         a3:e2:2f:83:f0:07:ae:7c:53:d5:00:fa:16:7b:1a:4d:b2:77:
         57:a5:63:c2:d6:89:8a:48:9f:9f:85:09:ed:29:1b:b8:e2:7e:
         18:ee:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:40:11 2025 by rpki-client