Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62bf8ee1-c8bc-46e1-bcf1-6a38dbe6b2b8.roa
File:                     62bf8ee1-c8bc-46e1-bcf1-6a38dbe6b2b8.roa (raw, json)
Hash identifier:          gyU3+Ah6fMd3OsRhNIDdsXdMfMrFxyZlpwb3GlEfdJA=
Subject key identifier:   2A:10:DC:34:A5:E9:83:79:FA:2D:81:ED:77:43:2C:E3:8C:CC:D2:DA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D36D08D4DE0673C58EFE79CF029D8EAF688A868
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62bf8ee1-c8bc-46e1-bcf1-6a38dbe6b2b8.roa
Signing time:             Mon 09 Jun 2025 17:10:50 +0000
ROA not before:           Mon 09 Jun 2025 17:10:50 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.202.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:36:d0:8d:4d:e0:67:3c:58:ef:e7:9c:f0:29:d8:ea:f6:88:a8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 17:10:50 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=149b8430fa0d2035aec738526db923a3bec601e09e04f447e63f80dac849c68c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:57:2c:f0:af:9e:74:ad:73:f3:04:26:7b:
                    df:17:de:06:ec:4d:e8:ab:69:49:d7:82:ac:7d:c5:
                    f2:d5:74:65:6e:1e:d2:4e:fe:fa:2a:17:a6:5f:72:
                    ce:de:86:51:fb:48:9a:5d:fa:3b:a7:ef:63:a7:9c:
                    ee:90:ed:5e:f0:07:a1:3b:64:f5:6e:c2:55:17:f1:
                    ce:dc:c8:52:78:44:a8:ef:4a:0b:8a:b0:a2:f6:c8:
                    8a:cd:61:57:9e:5b:3b:62:90:a3:1a:8f:bf:48:34:
                    6b:43:86:51:ce:9f:bc:26:9b:10:ea:24:2b:b2:86:
                    34:c0:70:82:2a:cc:ca:32:96:a3:c2:34:86:9e:ee:
                    03:3c:0d:a9:76:e0:41:a3:94:a9:1f:d1:00:e2:9b:
                    4c:61:ea:f1:3f:23:c1:95:28:8d:32:28:c3:8d:ca:
                    9b:39:3d:75:ec:95:48:16:be:99:9a:ef:5e:56:4d:
                    02:c3:76:7a:6b:42:81:47:87:b7:ee:38:55:bd:a2:
                    aa:eb:42:2c:5e:20:15:a7:2b:43:e2:ff:c6:d0:f8:
                    f8:d2:63:04:de:cd:69:2f:48:a6:df:b7:4d:b0:75:
                    0f:f5:b8:85:8a:62:38:96:00:b0:ef:39:fc:0f:c6:
                    18:c3:95:c5:97:47:d5:e0:94:8c:84:4a:1a:a0:35:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:DC:34:A5:E9:83:79:FA:2D:81:ED:77:43:2C:E3:8C:CC:D2:DA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62bf8ee1-c8bc-46e1-bcf1-6a38dbe6b2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.202.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:79:be:d8:3d:cb:d5:6f:d3:be:d3:8b:6f:77:83:72:db:53:
         a0:cd:9d:8e:99:00:9a:d4:e7:4e:25:a5:9f:0f:9d:fb:5b:f6:
         77:37:7a:ab:be:1f:0b:9c:46:19:69:8a:b3:c7:7c:04:92:bd:
         d6:3e:23:ea:b1:e4:ae:94:e1:ca:57:25:86:59:87:d7:cc:1b:
         f5:57:1f:4b:85:80:40:87:ed:50:d3:b0:17:43:80:69:a8:ff:
         90:ab:9d:2f:de:1b:ef:c0:de:16:41:f1:50:39:82:52:59:35:
         05:2e:79:d9:23:7e:a0:cc:5d:97:4a:dd:4f:47:04:3a:25:c8:
         88:d0:5b:c4:ce:d7:e9:fa:35:1a:a6:41:47:ae:df:1b:e3:4a:
         62:c0:00:2c:ca:5a:33:81:76:2a:3c:78:a1:d5:a2:a8:e2:6e:
         4d:bf:61:c7:e7:cd:46:8d:60:a0:2b:7e:f0:65:7d:62:a2:6f:
         2a:6f:a2:a0:4b:80:bd:6e:3a:76:2a:07:d7:cc:70:20:23:4b:
         6b:ae:36:b1:98:81:27:4c:4d:44:eb:64:59:8d:c7:35:b6:fd:
         b8:36:b1:d2:91:db:0a:71:43:45:60:6f:26:e0:bc:6e:fa:9d:
         1f:35:95:bc:cc:5a:4b:2a:1f:be:59:8f:88:90:94:a6:00:65:
         0d:94:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:05:19 2025 by rpki-client