Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7548a798-1ee1-411b-9334-05aa053078b8.roa
File:                     7548a798-1ee1-411b-9334-05aa053078b8.roa (raw, json)
Hash identifier:          QFrvbEExC/rM+O9FAtTdEy+kiltaO3tnhj7wKtb6R5E=
Subject key identifier:   2B:3E:F1:8F:D2:1C:7F:4C:5A:DE:12:91:9A:9E:70:B3:EE:B0:40:4E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       692D9DDED68523CDF66FE4A3B37F4A5A2743B73F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7548a798-1ee1-411b-9334-05aa053078b8.roa
Signing time:             Tue 29 Jul 2025 16:50:47 +0000
ROA not before:           Tue 29 Jul 2025 16:50:47 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.232.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2d:9d:de:d6:85:23:cd:f6:6f:e4:a3:b3:7f:4a:5a:27:43:b7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 29 16:50:47 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=f3ac94851d432f9cff1af1f0c6b5cca72398bd0b3b634ef854ae0cbc31cbdcf2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:c2:6d:b9:f2:a6:dc:14:93:5b:5a:6a:7e:
                    b5:21:f7:13:a7:8c:6a:47:94:df:5a:fb:00:08:e6:
                    ff:24:a3:63:ca:68:58:36:58:31:27:6c:c8:35:7f:
                    40:b9:29:d7:4e:42:bf:c7:35:38:da:2d:91:9a:a7:
                    69:5b:b4:88:6b:74:eb:53:99:50:85:e6:6e:4b:85:
                    88:f7:ce:a6:52:7f:a3:03:bf:a3:99:fe:82:17:f7:
                    75:8a:64:19:3c:2a:79:fc:c3:6e:05:74:43:25:de:
                    05:32:ef:a2:c2:73:86:7b:15:0d:05:14:50:b0:19:
                    28:72:08:f1:9c:67:af:d6:f3:0a:8e:9f:d3:f6:a3:
                    2f:6c:c3:e5:70:21:fc:b3:09:c9:c1:0c:c7:b8:d5:
                    bc:99:6c:56:e4:b4:d8:7a:8b:90:9d:e5:5e:9f:a9:
                    fc:19:bf:ac:b1:8c:3e:50:e2:c6:5b:c3:ea:9c:d2:
                    97:58:4c:34:b7:04:3d:21:67:df:c6:bb:af:51:9b:
                    6c:16:59:f3:f1:19:4d:19:87:30:7b:df:50:b0:e3:
                    61:f0:e3:d0:35:e0:bf:dc:10:07:70:95:e9:74:bb:
                    3e:53:bc:ce:1c:75:14:6a:a2:42:16:f1:f7:4e:0a:
                    3c:d2:8d:89:69:ef:65:15:2f:d1:d6:34:f8:e1:72:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:F1:8F:D2:1C:7F:4C:5A:DE:12:91:9A:9E:70:B3:EE:B0:40:4E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7548a798-1ee1-411b-9334-05aa053078b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.232.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:2d:57:4c:f3:c5:3b:56:74:20:35:f5:09:f7:89:85:f6:
         dc:32:ef:8a:40:1c:1f:de:d5:51:67:8a:cc:98:41:4a:ed:d9:
         2b:49:8a:45:38:1c:32:10:2f:b7:9d:57:5e:af:50:8f:dc:fb:
         12:04:73:1e:1b:9b:67:e0:8a:6b:49:a7:6e:6c:fe:68:89:54:
         4e:74:89:0d:91:fa:87:3e:8c:08:5a:c7:5f:0c:1c:49:c0:e9:
         f8:d2:b1:53:b3:a0:f3:3a:fd:a3:01:86:f9:d0:69:46:a3:58:
         6e:99:58:dd:b4:6c:06:21:24:6b:90:ed:f6:d0:7d:4f:9b:89:
         8b:53:8a:04:97:25:ce:f9:49:0c:23:78:43:80:a3:0b:04:73:
         26:97:15:49:49:8d:30:f4:1d:19:a8:95:b7:7a:cb:13:7d:af:
         78:ac:c3:31:1d:01:c2:de:73:19:27:ec:8a:21:b4:ea:8c:91:
         47:19:38:26:c1:3b:97:94:1c:16:78:1a:bf:41:fa:dd:b4:d8:
         e1:50:e9:f3:a1:a7:f6:47:58:bd:40:7d:c4:19:61:1b:a1:0d:
         d2:ad:87:2b:1c:a1:91:cc:bd:72:d2:30:94:9d:bf:bd:23:80:
         59:d5:1b:d8:8a:33:c3:af:22:90:35:f9:85:fe:fd:34:7e:49:
         8d:40:d9:a3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaS2d3taFI832b+Sjs39KWidDtz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTY1MDQ3WhcNMjUwOTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2FjOTQ4NTFkNDMyZjljZmYxYWYxZjBjNmI1Y2NhNzIz
OThiZDBiM2I2MzRlZjg1NGFlMGNiYzMxY2JkY2YyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNV8JtufKm3BSTW1pqfrUh9xOnjGpHlN9a+wAI5v8ko2PK
aFg2WDEnbMg1f0C5KddOQr/HNTjaLZGap2lbtIhrdOtTmVCF5m5LhYj3zqZSf6MD
v6OZ/oIX93WKZBk8Knn8w24FdEMl3gUy76LCc4Z7FQ0FFFCwGShyCPGcZ6/W8wqO
n9P2oy9sw+VwIfyzCcnBDMe41byZbFbktNh6i5Cd5V6fqfwZv6yxjD5Q4sZbw+qc
0pdYTDS3BD0hZ9/Gu69Rm2wWWfPxGU0ZhzB731Cw42Hw49A14L/cEAdwlel0uz5T
vM4cdRRqokIW8fdOCjzSjYlp72UVL9HWNPjhctevAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKz7xj9Icf0xa3hKRmp5ws+6wQE4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc1NDhhNzk4LTFlZTEtNDExYi05MzM0LTA1YWEwNTMwNzhiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY26IAwDQYJKoZIhvcNAQELBQADggEBAGrALVdM88U7VnQgNfUJ94mF9twy
74pAHB/e1VFnisyYQUrt2StJikU4HDIQL7edV16vUI/c+xIEcx4bm2fgimtJp25s
/miJVE50iQ2R+oc+jAhax18MHEnA6fjSsVOzoPM6/aMBhvnQaUajWG6ZWN20bAYh
JGuQ7fbQfU+biYtTigSXJc75SQwjeEOAowsEcyaXFUlJjTD0HRmolbd6yxN9r3is
wzEdAcLecxkn7IohtOqMkUcZOCbBO5eUHBZ4Gr9B+t202OFQ6fOhp/ZHWL1AfcQZ
YRuhDdKthyscoZHMvXLSMJSdv70jgFnVG9iKM8OvIpA1+YX+/TR+SY1A2aM=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:08 2025 by rpki-client