Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76a36ab9-ada7-4025-9224-bcf99f3e1a8c.roa
File:                     76a36ab9-ada7-4025-9224-bcf99f3e1a8c.roa (raw, json)
Hash identifier:          d4+ceko6YwBtpyDap0kRySCRiKPL1pfN+4TtogqiRxg=
Subject key identifier:   F1:2F:36:A1:41:5B:C5:86:8A:DA:C9:4C:FF:8F:F6:53:C4:87:BD:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       38EA9944D0BD61ECC25339DA78025421C25F4130
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76a36ab9-ada7-4025-9224-bcf99f3e1a8c.roa
Signing time:             Fri 11 Jul 2025 15:51:07 +0000
ROA not before:           Fri 11 Jul 2025 15:51:07 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        152.137.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ea:99:44:d0:bd:61:ec:c2:53:39:da:78:02:54:21:c2:5f:41:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 15:51:07 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=518aa0401398a95dc4d3b0f79651d5e8d52e321915fff3b88f2e571874459845, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:49:d9:ba:ce:1f:34:87:ec:0f:07:2d:84:
                    fb:41:75:05:71:a4:2a:aa:31:35:f5:c8:06:a9:09:
                    38:89:db:09:c6:1e:00:be:c1:c0:10:35:5d:0f:90:
                    8d:17:d8:c2:09:f9:d3:9f:53:5e:4a:55:fa:d0:49:
                    d3:c3:64:cc:7f:46:bf:8a:39:69:4c:30:ba:26:a8:
                    a5:20:f6:9b:fe:d7:ac:b0:0e:0a:2d:da:e5:3c:30:
                    6a:1a:dc:af:34:c8:65:05:1e:4d:0d:15:20:61:36:
                    84:f4:fa:cc:2b:b9:1b:91:a8:cb:54:44:bf:a1:b2:
                    16:a4:57:a9:b9:fe:52:ef:52:aa:1b:81:a8:77:0a:
                    a0:86:ed:00:3c:77:7e:59:3e:5a:14:71:e6:8e:91:
                    f5:81:e1:9a:5e:e3:f8:6b:df:3a:9d:51:f5:ab:ef:
                    cf:7c:ed:a6:07:db:f3:82:f4:a3:c9:7c:df:cd:8d:
                    37:4b:b3:13:75:cd:7a:1c:9d:0f:5c:e7:6a:5b:64:
                    e0:42:2f:77:6d:29:ce:bb:a2:61:23:eb:d5:36:18:
                    18:85:c7:4c:06:d3:6c:72:c0:c5:46:3b:c0:26:c1:
                    43:61:f0:38:94:93:f3:32:34:fa:41:1e:30:3a:68:
                    7a:54:cf:8f:28:1d:b7:0e:c2:51:46:75:0b:f8:a4:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2F:36:A1:41:5B:C5:86:8A:DA:C9:4C:FF:8F:F6:53:C4:87:BD:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76a36ab9-ada7-4025-9224-bcf99f3e1a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:da:7b:ee:ca:79:3d:9a:7d:5c:02:4b:e2:eb:ba:18:95:9f:
         17:03:cc:aa:8d:6f:30:84:2b:ce:d8:7a:b9:26:aa:16:ac:b0:
         75:7a:bc:e8:23:7c:65:e9:c2:f8:64:56:bb:f0:1e:e9:f6:b1:
         a4:b8:1c:9a:99:68:af:0b:69:99:6a:46:a5:33:1e:b8:75:6a:
         f9:98:ae:b5:78:ce:bd:58:c8:13:5e:db:84:60:24:6f:44:81:
         49:67:8c:ff:b2:43:e1:cd:0f:cc:38:30:e9:d8:4a:d5:14:e9:
         f7:5c:09:d7:b6:e5:a4:07:c9:76:58:e6:fc:26:b7:67:77:f8:
         54:ea:de:7d:31:a8:a9:77:aa:6e:85:d5:28:b4:3b:9a:ce:9c:
         45:0b:c4:2c:28:82:0a:20:2e:87:be:90:d1:27:9a:dd:d8:c8:
         a3:e6:5c:c9:72:c6:12:4e:f8:63:2b:12:ab:13:6d:3c:1d:91:
         31:39:f3:42:3e:4a:03:92:ca:be:59:77:8d:03:53:3a:02:3f:
         34:b5:12:d8:3c:b9:bd:38:6a:93:e3:34:c1:0a:1c:5a:7c:39:
         d6:4f:65:19:e3:b7:95:8e:cf:ba:47:06:6f:34:0d:67:c5:33:
         d6:d9:40:e7:8f:a0:d8:5d:1e:f5:8e:d1:2b:40:82:62:7d:09:
         cb:de:02:8e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOOqZRNC9YezCUznaeAJUIcJfQTAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTU1MTA3WhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MThhYTA0MDEzOThhOTVkYzRkM2IwZjc5NjUxZDVlOGQ1
MmUzMjE5MTVmZmYzYjg4ZjJlNTcxODc0NDU5ODQ1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0WUnZus4fNIfsDwcthPtBdQVxpCqqMTX1yAapCTiJ2wnG
HgC+wcAQNV0PkI0X2MIJ+dOfU15KVfrQSdPDZMx/Rr+KOWlMMLomqKUg9pv+16yw
Dgot2uU8MGoa3K80yGUFHk0NFSBhNoT0+swruRuRqMtURL+hshakV6m5/lLvUqob
gah3CqCG7QA8d35ZPloUceaOkfWB4Zpe4/hr3zqdUfWr78987aYH2/OC9KPJfN/N
jTdLsxN1zXocnQ9c52pbZOBCL3dtKc67omEj69U2GBiFx0wG02xywMVGO8AmwUNh
8DiUk/MyNPpBHjA6aHpUz48oHbcOwlFGdQv4pFchAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8S82oUFbxYaK2slM/4/2U8SHvWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc2YTM2YWI5LWFkYTctNDAyNS05MjI0LWJjZjk5ZjNlMWE4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCYiTANBgkqhkiG9w0BAQsFAAOCAQEAh9p77sp5PZp9XAJL4uu6GJWfFwPM
qo1vMIQrzth6uSaqFqywdXq86CN8ZenC+GRWu/Ae6faxpLgcmplorwtpmWpGpTMe
uHVq+ZiutXjOvVjIE17bhGAkb0SBSWeM/7JD4c0PzDgw6dhK1RTp91wJ17blpAfJ
dljm/Ca3Z3f4VOrefTGoqXeqboXVKLQ7ms6cRQvELCiCCiAuh76Q0Sea3djIo+Zc
yXLGEk74YysSqxNtPB2RMTnzQj5KA5LKvll3jQNTOgI/NLUS2Dy5vThqk+M0wQoc
Wnw51k9lGeO3lY7PukcGbzQNZ8Uz1tlA54+g2F0e9Y7RK0CCYn0Jy94Cjg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:35:16 2025 by rpki-client