Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76eb2277-b182-4cd2-a4b2-ef65da2565a9.roa
File:                     76eb2277-b182-4cd2-a4b2-ef65da2565a9.roa (raw, json)
Hash identifier:          329ZGxtIw3atmz6Oac/0uB4PKJGfEcUM73nlvQb7EYg=
Subject key identifier:   78:A5:1F:0B:98:10:11:AB:BD:2E:50:1F:44:5F:51:6B:D4:88:D9:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       52EC318A9DBAED5BF8ADBC634AEA51E5F4863CD8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76eb2277-b182-4cd2-a4b2-ef65da2565a9.roa
Signing time:             Fri 11 Jul 2025 16:51:35 +0000
ROA not before:           Fri 11 Jul 2025 16:51:35 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        47.10.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ec:31:8a:9d:ba:ed:5b:f8:ad:bc:63:4a:ea:51:e5:f4:86:3c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 16:51:35 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=0acf7b6455c43873cd2bd0003d1e07b7c822c0140446af01951b6081991a91b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:ca:64:50:74:2d:ca:2d:9d:50:41:85:fa:
                    76:bc:6c:fb:a8:10:a8:ae:be:08:c6:e2:dc:d9:72:
                    3d:56:2b:72:74:1a:68:47:ef:49:34:6f:da:4a:a1:
                    b1:b8:c5:59:71:66:84:be:d8:22:07:39:32:e7:8a:
                    06:54:3e:e0:3f:11:bb:c6:c8:0f:cc:45:ee:73:21:
                    74:12:15:2c:40:4e:c7:85:56:01:e4:92:f1:e9:a8:
                    18:ee:00:2f:6d:1e:d9:c9:21:2e:5e:55:a5:99:fa:
                    99:7c:42:27:74:05:2e:5f:d5:b2:0f:00:e2:de:49:
                    73:1f:f6:74:4f:e5:8a:36:15:60:b6:60:c5:d7:18:
                    03:89:b5:d3:dd:8d:98:ee:3a:f8:49:4d:9b:39:dc:
                    9f:31:ff:a7:c4:ea:c6:b7:b9:ea:58:c9:58:6d:aa:
                    c3:0b:f3:fc:5d:68:98:0d:c9:2f:d1:be:12:35:ff:
                    d0:54:2b:35:97:63:fa:8a:a0:aa:3d:d7:bd:63:53:
                    30:46:e8:cb:24:d1:8f:4d:fa:63:bd:5b:e4:1b:eb:
                    87:0c:79:73:ed:2b:7e:76:a9:90:cf:51:44:c1:db:
                    cb:f2:50:e8:f6:5b:05:fb:c8:45:5f:9a:41:64:79:
                    ac:5a:de:06:3a:89:01:28:00:4a:1d:76:27:13:d4:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:1F:0B:98:10:11:AB:BD:2E:50:1F:44:5F:51:6B:D4:88:D9:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76eb2277-b182-4cd2-a4b2-ef65da2565a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:df:28:f2:4c:68:96:96:41:ac:c1:8e:78:2d:43:a3:2b:2e:
         d1:68:98:91:19:05:a7:88:3c:f0:ac:e2:09:59:e3:52:ad:98:
         3b:60:50:c8:3d:d5:72:20:00:c1:6a:e5:7f:b1:d8:7c:1f:fd:
         07:88:d1:34:a7:89:62:a5:35:d4:fc:d6:a6:72:45:b3:0f:cc:
         39:b8:ce:85:b4:47:8e:48:51:42:20:70:2e:15:c6:9e:cd:98:
         eb:56:46:d3:3b:59:d8:53:28:aa:43:4c:ac:43:c3:16:af:f1:
         67:c0:ad:82:88:fc:20:1e:15:78:5f:62:5c:38:ce:2e:05:bc:
         96:5f:bc:0d:c8:77:e2:ab:c7:43:b0:63:33:77:ed:48:40:1b:
         61:f0:8d:10:ec:5f:1c:46:44:8c:63:58:40:79:7e:7a:d4:9b:
         ce:6f:36:b1:da:c2:d8:2e:82:b6:6e:b2:28:86:94:b2:17:bb:
         cd:7f:12:d3:72:bf:74:82:ce:09:b6:5b:40:dc:f4:0f:92:fb:
         28:42:a1:78:b6:98:b5:a5:9e:de:fd:89:7f:24:27:7b:80:0e:
         94:a8:6f:ae:ee:5b:ef:d7:45:c1:0e:fe:11:e1:ae:0d:3c:2b:
         df:5e:0d:1f:cc:bd:7b:c8:07:de:1b:ec:78:c5:33:bf:12:54:
         47:3a:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:24:26 2025 by rpki-client