Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64f7e756-527f-4509-9a67-104e748046da.roa
File:                     64f7e756-527f-4509-9a67-104e748046da.roa (raw, json)
Hash identifier:          ijeP+j6MCd4p1EVG7ayxHmRFCUOzpRXJ+0UaFRoDsXs=
Subject key identifier:   3F:E0:00:77:90:65:99:C9:80:2B:C1:88:DE:AD:04:01:02:C9:A9:09
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1BEF816B5A6D785AE11DEAD31D2C71EEA123EF57
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64f7e756-527f-4509-9a67-104e748046da.roa
Signing time:             Mon 09 Jun 2025 16:51:16 +0000
ROA not before:           Mon 09 Jun 2025 16:51:16 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.147.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ef:81:6b:5a:6d:78:5a:e1:1d:ea:d3:1d:2c:71:ee:a1:23:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 16:51:16 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=b50d021227403436b944fc578ef70f73fa45eff650050f4da0c294748fc5e411, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:25:a6:c3:90:48:ca:ed:7a:81:37:f9:f8:
                    18:01:04:44:43:9e:83:c1:3e:aa:ba:f6:d0:cf:e2:
                    33:90:af:a4:7c:1e:80:04:8d:0a:4d:70:d3:92:42:
                    86:fb:4a:5d:f1:03:51:1f:4f:d5:65:c9:19:ba:fa:
                    72:12:31:8e:c1:f5:80:c6:c0:2a:26:1f:98:4b:4a:
                    cf:28:34:d3:6c:1c:46:ab:fd:d0:27:85:0c:69:2a:
                    d4:e4:65:78:48:cc:16:27:cc:e1:09:ac:8b:38:0f:
                    1a:98:a7:fb:ba:88:32:f0:3a:45:dc:65:31:58:59:
                    fb:69:5f:f0:d6:c6:55:55:de:cf:f3:dc:d5:23:55:
                    34:54:28:52:12:80:97:da:1d:8f:ef:07:c9:99:b7:
                    7d:07:6b:69:c2:94:af:8b:d2:55:33:b6:f2:b4:c8:
                    35:4e:7d:4f:bb:72:c4:51:97:8a:7a:14:d3:28:79:
                    09:c4:84:ed:e5:0a:3f:65:ee:8b:b2:12:97:e5:a9:
                    f5:7a:d8:5a:cf:b3:b4:78:ea:64:80:c5:27:5a:14:
                    a9:80:1e:27:b1:51:93:8f:10:bc:de:87:c4:07:41:
                    43:4d:5d:45:2a:db:cd:af:e2:d9:0c:a2:c1:8e:22:
                    1b:e3:fb:f2:2e:dd:24:e8:2c:bb:ed:bb:df:3e:61:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:00:77:90:65:99:C9:80:2B:C1:88:DE:AD:04:01:02:C9:A9:09
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64f7e756-527f-4509-9a67-104e748046da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.147.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:86:51:22:0c:30:24:06:40:38:99:09:bc:e0:d5:77:cc:1e:
         f8:fe:ad:a5:a2:ad:77:77:99:6f:0a:c3:88:70:08:9f:a7:61:
         5c:35:4e:6f:bd:6e:21:f6:ad:94:66:f2:13:36:6e:97:4c:b2:
         8e:17:91:b5:88:22:ae:2e:77:77:49:12:2c:c3:e3:52:49:b5:
         84:01:b8:a1:ec:6a:89:d3:15:1d:c0:9a:e3:74:f5:52:f6:e5:
         a8:a3:97:8f:b2:75:c3:57:cd:cf:8d:1c:54:18:4a:c9:5d:e0:
         af:e8:e4:ba:d9:3a:d6:e1:2b:ba:3a:1d:5e:8c:f5:e8:2f:9f:
         c5:fe:50:8d:b5:a3:e2:c4:c4:09:06:ea:af:e5:96:8b:da:a4:
         fd:a3:02:29:83:7f:fc:6b:98:69:90:45:30:56:99:2a:74:4d:
         87:58:37:a6:d9:86:37:e9:a1:c1:d6:92:6f:05:d2:6c:9c:7d:
         71:11:47:6e:62:9e:c7:8d:ac:a1:fd:c3:f5:9d:e5:51:cf:db:
         20:70:3a:33:86:f7:d7:01:06:9e:65:d7:e9:8a:75:44:c2:f8:
         75:42:0d:9a:51:c2:47:0e:9e:e9:c0:0a:78:05:0b:8a:68:37:
         18:44:0c:4d:0c:6a:a1:ef:be:75:7e:c1:5c:04:5c:37:d6:f6:
         41:1b:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:28 2025 by rpki-client