Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79d34b7c-efd6-4fe3-a6f5-21625e889220.roa
File:                     79d34b7c-efd6-4fe3-a6f5-21625e889220.roa (raw, json)
Hash identifier:          FafHhaBW41qZtxoHGYrmVXlZeDzhVuT0vlg2X580HRM=
Subject key identifier:   2E:4C:2D:36:CB:65:98:B4:A6:5C:4A:3D:7C:3B:6E:D0:B7:F4:5F:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       21F3F5BE33C6B2DA6D0C1799E19F9A65986D0261
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79d34b7c-efd6-4fe3-a6f5-21625e889220.roa
Signing time:             Fri 06 Jun 2025 00:30:58 +0000
ROA not before:           Fri 06 Jun 2025 00:30:58 +0000
ROA not after:            Fri 11 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.193.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f3:f5:be:33:c6:b2:da:6d:0c:17:99:e1:9f:9a:65:98:6d:02:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  6 00:30:58 2025 GMT
            Not After : Jul 11 23:59:59 2025 GMT
        Subject: serialNumber=3f8b2eb1fb40ca895ad377f86a967c2b874e9ecef003427ea24e9f5d53bd3ee0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:51:84:62:02:fe:6c:d0:1c:ba:6b:85:c5:
                    36:f0:b6:7c:68:7d:e5:65:1a:ef:b9:2e:4b:e5:f6:
                    f4:5a:bd:7b:76:32:e0:67:4e:ea:36:c6:61:5c:b8:
                    70:7f:60:50:03:8c:29:0c:e0:ca:5e:4b:df:48:45:
                    8e:13:03:ee:cf:2d:d8:c3:6c:54:75:90:57:b2:46:
                    6b:d1:58:f7:af:87:ac:34:3c:59:c9:b6:01:0e:96:
                    dc:77:38:8d:3b:d5:2c:c0:5c:25:8f:6b:37:07:74:
                    19:b5:6c:63:e4:87:be:af:1f:27:27:1c:73:87:4a:
                    b5:cb:9a:06:87:ac:25:67:bd:35:a3:bf:05:71:0b:
                    d8:b0:af:01:64:2c:6e:ca:f5:43:68:5e:7d:d1:c3:
                    74:cd:e7:e6:61:0e:78:4a:50:8b:c2:9b:25:5a:d9:
                    44:08:87:73:50:ad:bc:f6:21:87:c4:b3:88:e6:e2:
                    1f:e8:d8:73:24:95:96:7e:38:42:8b:14:8a:e9:74:
                    df:f5:58:06:c2:de:33:f6:0b:96:2f:15:7d:e1:21:
                    15:9e:70:c3:a4:4a:af:38:70:8c:29:98:28:e2:a8:
                    4f:ad:b0:1f:a7:18:7e:40:5c:ec:b7:18:91:9d:5d:
                    08:56:a9:77:f3:c4:6e:fd:50:2f:17:a0:04:e8:67:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:2D:36:CB:65:98:B4:A6:5C:4A:3D:7C:3B:6E:D0:B7:F4:5F:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79d34b7c-efd6-4fe3-a6f5-21625e889220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:44:b7:1b:08:00:7b:28:3a:50:b9:b8:74:21:3d:12:70:4c:
         aa:e5:b4:ed:8b:8a:27:c4:ab:58:04:a7:03:60:ca:f9:75:ff:
         73:ec:82:1e:96:70:10:2d:90:b8:39:cc:e1:f8:52:d2:b6:88:
         34:82:7c:6d:c9:3f:35:98:14:45:0a:3d:2e:10:db:8e:66:3b:
         fd:7f:e0:5a:fd:67:83:dd:ec:cd:ba:2a:2e:6d:05:39:f6:07:
         8a:e6:75:26:75:20:37:b8:49:7c:ea:01:91:75:08:68:f0:08:
         3c:d9:ab:b8:a5:15:27:54:43:37:9c:9b:75:ed:22:7b:d2:e9:
         2f:e8:fa:9d:ab:26:46:3e:38:52:79:1b:bc:89:89:d7:07:4e:
         3b:cf:e8:52:75:61:83:d6:a8:a6:d9:84:5c:14:27:15:3a:93:
         3f:0b:b1:51:55:da:1b:bb:02:22:63:4c:02:f1:51:62:95:8e:
         14:f2:98:b5:ea:db:df:28:ba:ed:5f:35:a7:bb:f4:c3:f3:3e:
         a2:57:53:03:d1:68:99:e3:31:ff:48:a2:32:a6:7b:a4:e2:98:
         73:5d:ba:66:cd:52:73:60:01:8e:68:9e:43:7d:a4:18:b9:6a:
         50:9e:54:43:97:56:bc:c5:fb:dc:81:f1:23:15:16:49:77:9c:
         23:4b:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:34 2025 by rpki-client