Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/741f335f-920f-473e-a577-c562b2725f1c.roa
File:                     741f335f-920f-473e-a577-c562b2725f1c.roa (raw, json)
Hash identifier:          5inZ8T1w0Owb4ZG38OPslhYN1WQOYm6n86q5k8epLLQ=
Subject key identifier:   F4:27:FD:5C:45:21:24:8B:03:67:42:91:42:EF:7E:4E:60:B0:D7:AB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7209FDF6A0E54926E51F54F25504225A6B5D67
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/741f335f-920f-473e-a577-c562b2725f1c.roa
Signing time:             Tue 20 May 2025 16:11:49 +0000
ROA not before:           Tue 20 May 2025 16:11:49 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:09:fd:f6:a0:e5:49:26:e5:1f:54:f2:55:04:22:5a:6b:5d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 16:11:49 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=513e48dc09993f7c2cc82763796d2e9a0be766064c7d177de28e0808a92f5869, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:c1:8c:60:57:e0:d5:ed:f6:fd:63:25:e4:
                    df:80:18:22:65:c8:24:53:e3:d0:ab:f1:bd:a0:27:
                    f1:76:90:5a:ae:06:94:28:68:a9:ce:54:2a:51:b5:
                    b6:43:c7:86:4c:e2:24:38:9a:05:84:49:2c:0d:61:
                    02:75:8d:b7:13:69:4a:40:0f:95:94:ed:4b:48:38:
                    f7:c8:59:10:0f:2e:1d:39:4d:c6:90:70:c3:f0:dd:
                    a7:67:8e:45:be:11:71:1c:82:f0:af:11:a9:dd:03:
                    db:b7:0e:de:96:12:05:65:fa:3a:f8:38:e8:ab:41:
                    11:5a:4b:9d:8d:58:3e:0e:31:bc:98:90:af:5b:bf:
                    6c:60:58:1e:ef:92:2b:b9:fd:e4:0d:76:0c:a3:57:
                    48:c3:fe:0f:62:09:01:88:4c:07:f8:1a:08:e2:f5:
                    ec:05:eb:91:43:66:30:4a:6c:1b:c6:a9:4d:af:f2:
                    bd:70:be:80:1a:17:3e:7c:de:4a:9e:54:1a:06:d8:
                    75:1f:96:f9:96:d9:74:88:d1:4e:28:84:4c:98:e6:
                    30:e1:3c:7c:64:85:5a:a6:45:c0:69:09:8c:b5:2a:
                    a7:97:9a:08:e4:7f:20:ba:85:a6:9b:51:c7:93:56:
                    73:ad:b4:a9:b1:23:81:ec:0e:22:8f:53:17:06:d5:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:FD:5C:45:21:24:8B:03:67:42:91:42:EF:7E:4E:60:B0:D7:AB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/741f335f-920f-473e-a577-c562b2725f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:1e:f6:ee:0e:18:00:b4:10:f2:30:41:8d:2f:2e:6b:30:
         58:06:3f:c7:90:04:52:c8:96:ef:de:8f:fc:75:9b:55:ec:5e:
         b9:a6:b1:39:37:d0:9e:41:9f:76:90:29:50:d3:f4:e3:4c:be:
         8f:72:34:fb:82:79:05:39:38:78:f7:1f:13:a4:38:56:5c:fe:
         5a:93:d2:c1:c7:1a:67:69:b9:9f:d3:4e:46:a4:d5:93:c0:26:
         e8:15:55:ce:43:72:8b:ca:e1:74:d6:de:e4:80:e1:65:5f:ef:
         c2:1d:e3:14:a5:db:45:11:3b:ee:39:0d:f9:11:77:03:df:b6:
         a1:2b:10:31:77:d7:fc:34:a9:fd:19:4a:39:c3:d3:71:bf:0b:
         80:85:18:01:16:8d:c4:f8:fd:90:4f:00:22:31:9f:54:7a:ad:
         98:06:ba:68:b6:f8:dd:b4:1f:49:4d:bd:74:35:55:4b:ff:b7:
         34:89:67:b9:e1:3d:b0:b9:07:35:c3:b2:47:d6:a3:f1:14:cd:
         94:d7:79:e4:ff:fa:40:df:ff:41:35:90:c9:a8:3d:63:d9:e3:
         39:28:7a:dd:e4:d7:d1:b7:65:58:df:b5:50:ef:e9:ea:a8:93:
         61:5f:1d:57:09:e1:77:18:59:cb:14:3d:43:cb:fc:cb:ec:57:
         68:b4:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:38 2025 by rpki-client