Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa
File:                     794debef-4ebf-4ab2-a76b-bed994258774.roa (raw, json)
Hash identifier:          HoQCjbk/s9vZ6eogP55+4Ajw1VrEhTRoXAof3xB6aYM=
Subject key identifier:   A6:00:1A:49:5B:1C:F3:81:9C:81:AF:82:21:38:A8:89:C4:74:AE:0D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A12D5ACB7088B78949DE9690DCD6B18B096A760
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa
Signing time:             Mon 09 Jun 2025 17:21:49 +0000
ROA not before:           Mon 09 Jun 2025 17:21:49 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.237.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:12:d5:ac:b7:08:8b:78:94:9d:e9:69:0d:cd:6b:18:b0:96:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 17:21:49 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=c8daffd69184eef26662483bac51cd4e6caba63ea12a9516971cd6af7ed9c8d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:88:db:cd:c9:b6:1c:c3:19:15:3b:ad:30:
                    9b:16:32:5d:f0:0d:1f:2e:d0:a6:8e:8e:e5:ac:42:
                    4e:16:4f:c6:7e:67:06:0c:00:d2:84:b3:89:3f:1b:
                    cb:f0:3b:51:fe:13:f2:ab:57:9e:9b:dc:52:e5:a0:
                    6c:9e:5c:87:2b:2d:0c:92:3e:98:28:21:d4:a9:b1:
                    65:51:1b:8e:aa:59:28:cd:ab:7d:67:1f:02:64:c4:
                    b4:85:72:35:a8:dc:05:32:9d:b6:05:1c:8f:0b:f5:
                    9f:95:cb:fb:79:a3:83:4f:6a:34:fc:47:a4:f9:6b:
                    16:e4:d8:80:6f:7d:4b:62:e3:63:a8:8c:9e:a2:14:
                    85:a3:94:7d:5f:33:df:24:bd:5a:6a:6d:66:8c:1f:
                    8b:62:a7:e5:97:2f:2a:ca:fe:1e:31:2f:62:0d:39:
                    ed:82:1a:b4:24:7f:4f:66:38:42:a5:e2:d7:44:34:
                    2f:c1:dd:52:d3:51:c7:64:4e:c1:d1:4f:ee:85:7b:
                    ca:88:0a:41:95:b8:e5:6f:4c:40:b8:c4:67:d0:02:
                    f8:d1:2f:98:a9:e1:cd:ad:67:7e:68:a6:bc:b7:be:
                    64:e0:ea:8f:13:15:64:61:3c:02:6e:1c:03:5d:bf:
                    1a:04:69:77:7b:f5:fe:55:86:1a:9e:a1:fe:56:2c:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:1A:49:5B:1C:F3:81:9C:81:AF:82:21:38:A8:89:C4:74:AE:0D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/794debef-4ebf-4ab2-a76b-bed994258774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.237.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:a1:c8:63:d4:90:9b:c0:7c:6b:32:12:96:5f:81:99:2e:
         a0:73:09:82:83:76:c2:f1:4e:df:28:94:48:58:1c:f9:56:b4:
         21:bf:83:50:b2:8e:82:d2:05:a7:3f:42:9a:4b:60:33:ab:60:
         8d:d8:90:40:46:d8:29:92:fe:b2:2d:9d:cf:62:3a:a4:48:48:
         84:86:b9:12:62:66:62:e2:85:41:64:28:71:75:fd:7d:cb:b2:
         61:6d:fa:eb:01:db:08:fe:a8:f9:4d:13:08:b0:29:62:a1:e5:
         30:49:b7:38:50:d7:ee:93:9e:0d:b7:51:72:5a:cd:87:20:93:
         85:c9:22:87:27:49:50:06:e5:eb:73:b3:c3:cc:4c:4a:3b:2a:
         ef:77:61:8a:71:7c:fb:36:48:14:91:15:16:a6:5b:05:65:f9:
         e8:96:55:f2:b8:2c:e7:cd:52:98:b3:b9:3d:28:ab:f4:4a:b4:
         cf:e6:3d:56:1c:0d:78:7f:cd:3c:3a:57:0d:fd:6e:56:97:d5:
         60:34:b3:c1:77:4e:68:fb:8b:f1:f1:15:e5:21:61:82:34:9b:
         a3:55:b2:19:c7:44:5e:57:ad:10:1d:f5:a1:fe:30:75:69:6e:
         a9:e8:b0:34:53:4a:23:0f:e9:67:cf:fd:ea:18:43:92:6b:9c:
         89:a1:2b:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWhLVrLcIi3iUnelpDc1rGLCWp2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTcyMTQ5WhcNMjUwNzE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGRhZmZkNjkxODRlZWYyNjY2MjQ4M2JhYzUxY2Q0ZTZj
YWJhNjNlYTEyYTk1MTY5NzFjZDZhZjdlZDljOGQ1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYzYjbzcm2HMMZFTutMJsWMl3wDR8u0KaOjuWsQk4WT8Z+
ZwYMANKEs4k/G8vwO1H+E/KrV56b3FLloGyeXIcrLQySPpgoIdSpsWVRG46qWSjN
q31nHwJkxLSFcjWo3AUynbYFHI8L9Z+Vy/t5o4NPajT8R6T5axbk2IBvfUti42Oo
jJ6iFIWjlH1fM98kvVpqbWaMH4tip+WXLyrK/h4xL2INOe2CGrQkf09mOEKl4tdE
NC/B3VLTUcdkTsHRT+6Fe8qICkGVuOVvTEC4xGfQAvjRL5ip4c2tZ35opry3vmTg
6o8TFWRhPAJuHANdvxoEaXd79f5Vhhqeof5WLHuZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpgAaSVsc84Gcga+CITioicR0rg0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc5NGRlYmVmLTRlYmYtNGFiMi1hNzZiLWJlZDk5NDI1ODc3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA27f0wDQYJKoZIhvcNAQELBQADggEBAD/5ochj1JCbwHxrMhKWX4GZLqBz
CYKDdsLxTt8olEhYHPlWtCG/g1CyjoLSBac/QppLYDOrYI3YkEBG2CmS/rItnc9i
OqRISISGuRJiZmLihUFkKHF1/X3LsmFt+usB2wj+qPlNEwiwKWKh5TBJtzhQ1+6T
ng23UXJazYcgk4XJIocnSVAG5etzs8PMTEo7Ku93YYpxfPs2SBSRFRamWwVl+eiW
VfK4LOfNUpizuT0oq/RKtM/mPVYcDXh/zTw6Vw39blaX1WA0s8F3Tmj7i/HxFeUh
YYI0m6NVshnHRF5XrRAd9aH+MHVpbqnosDRTSiMP6WfP/eoYQ5JrnImhKzU=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:02:14 2025 by rpki-client