Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67c10a72-12d9-498a-a768-82ce63f051c8.roa
File:                     67c10a72-12d9-498a-a768-82ce63f051c8.roa (raw, json)
Hash identifier:          uVMF6zYxV7DGV3vx2fNAXSESwM9gGT4AI5Yc/t00gd8=
Subject key identifier:   CB:94:21:9D:01:66:1A:4A:6F:7E:DC:90:7E:E3:96:67:99:DC:45:37
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0299801B4B3F7DFB67529279BDF70E1D11B69B95
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67c10a72-12d9-498a-a768-82ce63f051c8.roa
Signing time:             Mon 09 Jun 2025 16:11:16 +0000
ROA not before:           Mon 09 Jun 2025 16:11:16 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:99:80:1b:4b:3f:7d:fb:67:52:92:79:bd:f7:0e:1d:11:b6:9b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 16:11:16 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=1b73291e09878af624aa47b09a530537d48a401dd942dd2d9dba2bb1a9a986e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:c2:ad:ee:87:ea:46:84:bd:5b:e6:fd:f2:
                    24:5b:0b:c7:6f:00:ba:11:63:40:45:38:86:ae:cb:
                    9d:4d:d8:86:f2:a7:2d:b9:a9:0e:59:b2:b8:27:42:
                    91:93:99:60:f5:2c:73:50:0e:c6:d6:63:11:c9:c9:
                    e7:1b:ed:3f:0a:ce:56:9d:8d:19:95:73:11:e9:72:
                    96:43:28:3a:a2:86:1a:79:62:7d:95:22:7a:99:5d:
                    50:27:53:49:39:f3:4c:a7:51:c9:86:85:ce:81:96:
                    d7:8c:62:c6:b3:0e:af:62:30:2c:41:b5:ce:57:5e:
                    86:df:44:40:35:cf:bc:1a:b3:c7:b0:0d:dc:c4:af:
                    c3:e0:77:8b:01:18:f7:e2:32:67:de:0e:c3:3a:03:
                    9b:50:8f:cf:d7:9c:44:29:1f:41:9b:da:02:74:23:
                    51:ea:7e:24:ed:c6:eb:73:3c:97:7e:37:d4:72:b0:
                    9b:fa:f1:cb:da:1a:bd:ee:82:6f:47:80:60:84:ef:
                    78:55:cd:a1:1f:38:71:b5:01:65:5d:fa:8a:3d:ab:
                    73:da:93:ac:2c:09:2b:f4:44:45:a6:47:fd:1d:aa:
                    d9:94:e5:94:e0:5a:81:11:5b:01:a1:17:3b:f2:66:
                    d7:1e:de:3e:59:8a:14:bc:93:f5:bb:84:e8:f0:84:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:21:9D:01:66:1A:4A:6F:7E:DC:90:7E:E3:96:67:99:DC:45:37
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67c10a72-12d9-498a-a768-82ce63f051c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:db:1e:18:a9:59:94:4b:dd:da:bd:21:06:a2:62:ae:9f:0d:
         a2:b0:07:5a:6c:56:eb:d8:56:99:07:ac:f0:02:70:77:eb:1e:
         ae:48:0b:c6:dc:0a:79:46:3a:b4:ba:a6:7a:b1:1f:0c:34:a2:
         3d:41:ad:3f:d2:a7:45:78:1d:5e:83:7e:4e:61:e5:d5:70:6f:
         dc:9f:10:24:08:67:16:b3:74:d3:d4:ad:56:d1:0e:2b:56:5b:
         89:b3:e8:ef:8e:60:85:3c:be:8b:ec:ff:55:e4:00:86:07:4b:
         84:f8:a2:51:97:d9:cd:55:c9:a8:9e:ae:d4:c8:43:f9:0d:e3:
         7b:37:f4:e0:60:a1:ba:59:5d:c1:14:ea:67:54:b2:e2:2b:d5:
         3a:01:51:e5:91:97:cd:02:a7:58:8a:82:43:7e:08:99:24:a4:
         56:50:ec:de:70:b7:7d:3c:06:79:8e:8e:06:57:68:8b:25:de:
         fb:17:11:2c:a7:f7:80:19:71:54:b6:df:9b:46:27:06:42:ab:
         16:e4:9d:64:c2:5e:fc:0f:34:f4:5a:b3:ce:1d:83:76:fe:7c:
         58:c5:70:ff:ff:20:97:ba:a0:01:28:c6:3b:31:4c:c7:c0:c6:
         2d:b9:9c:f8:d6:0d:8a:77:e4:41:8f:8f:98:1a:c9:21:99:8b:
         dc:69:a6:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUApmAG0s/fftnUpJ5vfcOHRG2m5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYxMTE2WhcNMjUwNzE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjczMjkxZTA5ODc4YWY2MjRhYTQ3YjA5YTUzMDUzN2Q0
OGE0MDFkZDk0MmRkMmQ5ZGJhMmJiMWE5YTk4NmU3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4WMKt7ofqRoS9W+b98iRbC8dvALoRY0BFOIauy51N2Iby
py25qQ5ZsrgnQpGTmWD1LHNQDsbWYxHJyecb7T8KzladjRmVcxHpcpZDKDqihhp5
Yn2VInqZXVAnU0k580ynUcmGhc6BlteMYsazDq9iMCxBtc5XXobfREA1z7was8ew
DdzEr8Pgd4sBGPfiMmfeDsM6A5tQj8/XnEQpH0Gb2gJ0I1HqfiTtxutzPJd+N9Ry
sJv68cvaGr3ugm9HgGCE73hVzaEfOHG1AWVd+oo9q3Pak6wsCSv0REWmR/0dqtmU
5ZTgWoERWwGhFzvyZtce3j5ZihS8k/W7hOjwhLC5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy5QhnQFmGkpvftyQfuOWZ5ncRTcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzY3YzEwYTcyLTEyZDktNDk4YS1hNzY4LTgyY2U2M2YwNTFjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0LrowDQYJKoZIhvcNAQELBQADggEBALPbHhipWZRL3dq9IQaiYq6fDaKw
B1psVuvYVpkHrPACcHfrHq5IC8bcCnlGOrS6pnqxHww0oj1BrT/Sp0V4HV6Dfk5h
5dVwb9yfECQIZxazdNPUrVbRDitWW4mz6O+OYIU8vovs/1XkAIYHS4T4olGX2c1V
yaiertTIQ/kN43s39OBgobpZXcEU6mdUsuIr1ToBUeWRl80Cp1iKgkN+CJkkpFZQ
7N5wt308BnmOjgZXaIsl3vsXESyn94AZcVS235tGJwZCqxbknWTCXvwPNPRas84d
g3b+fFjFcP//IJe6oAEoxjsxTMfAxi25nPjWDYp35EGPj5gaySGZi9xppos=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:56:57 2025 by rpki-client