Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa
File:                     7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa (raw, json)
Hash identifier:          ABwpU0oMb6dATFPZE53X/yec2GGuNdhh70YIGGM3OT4=
Subject key identifier:   27:50:12:C1:6D:27:40:85:E7:A8:66:6C:DA:36:CD:36:62:09:4E:EB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       78888A22F9845316FB49553347AD424707C99285
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa
Signing time:             Sat 26 Apr 2025 00:10:18 +0000
ROA not before:           Sat 26 Apr 2025 00:10:18 +0000
ROA not after:            Sat 31 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:8a:22:f9:84:53:16:fb:49:55:33:47:ad:42:47:07:c9:92:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 26 00:10:18 2025 GMT
            Not After : May 31 23:59:59 2025 GMT
        Subject: serialNumber=51c1cc018a6a6116a3b4406ecd7f2aa52e4d6aa2a22d3a68e6403e76e8a22b14, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:22:b7:3a:00:78:a1:45:ce:ee:18:3f:2d:
                    5a:aa:f7:6c:74:0c:5a:b8:61:9e:16:99:4c:ee:19:
                    c0:89:e7:53:c0:f8:16:ed:76:55:eb:6e:3a:40:d5:
                    0f:5e:ec:19:8c:dc:e5:1b:59:9d:0f:d6:eb:df:07:
                    bc:50:b3:cc:b7:d0:08:22:c8:e7:20:70:08:7e:2b:
                    e6:8a:7f:e6:95:c0:1c:41:ca:be:5d:1e:1e:b6:dd:
                    c9:ab:fc:67:32:a2:85:a0:29:54:74:11:e5:c6:c8:
                    09:19:93:51:87:df:80:13:ff:b2:82:d8:5b:b8:31:
                    7e:95:64:23:8f:3a:40:e9:2b:5d:0f:87:c6:51:a5:
                    9b:b2:11:9d:e1:51:a5:9f:10:b8:a3:d1:06:5d:bf:
                    4e:f4:3a:d0:ba:f8:be:c8:6c:92:49:1e:e6:fc:e9:
                    e6:14:06:ef:c1:03:6d:8c:6a:93:92:a6:81:de:c8:
                    8a:1a:6b:46:4f:d2:be:98:81:1d:9f:89:19:6e:d7:
                    20:6d:a8:e8:26:59:92:3e:0d:66:76:43:97:a7:a6:
                    48:4f:a9:1f:90:44:3e:d4:f2:d9:ce:f0:04:05:70:
                    cf:a6:a0:74:0a:76:91:9d:ad:b1:a0:0e:58:ea:36:
                    10:a3:d6:48:d8:b3:50:c3:87:0c:2b:f1:8d:0b:4a:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:12:C1:6D:27:40:85:E7:A8:66:6C:DA:36:CD:36:62:09:4E:EB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a67c8ed-7429-4fd9-8396-98fc7429e3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:a3:62:37:7e:3c:6d:67:50:6b:b3:d4:ee:c9:1f:b4:ef:
         55:81:b2:01:43:62:ed:a5:da:19:85:2b:48:44:10:27:0f:6d:
         e8:07:bd:6a:c3:72:e8:52:3e:b9:ab:1e:b7:ca:a3:ce:af:d7:
         ca:b5:57:fb:8f:f2:e3:01:50:e2:bd:63:ac:e9:75:b4:ee:b3:
         2d:02:89:a6:0e:24:b9:3e:87:53:5b:38:a3:aa:88:b0:a3:47:
         7d:20:f5:e5:b8:d3:05:77:31:41:fc:49:1c:7f:15:02:77:6b:
         15:7e:8d:2a:0f:70:b7:dd:b9:77:93:65:f7:ef:ff:15:1c:86:
         4b:40:39:6f:d0:92:9c:6e:9d:81:11:6d:5b:61:35:95:d2:ad:
         53:5e:53:bb:98:70:62:4d:66:3b:f1:a0:7e:f3:8a:c8:71:7a:
         25:6e:4e:23:71:cd:87:3e:d0:3c:4c:02:9c:77:f9:50:24:47:
         36:d8:c9:ad:42:34:c0:59:4a:f7:65:b6:bc:1b:fa:0b:1e:77:
         5f:75:d1:37:d7:5d:c9:0d:d0:91:89:fa:e5:8c:e9:16:17:ed:
         36:bf:4a:c5:ce:42:f4:fe:db:c6:af:b0:20:40:bd:0f:9d:d4:
         5a:c2:1d:a0:e1:f4:fd:fb:c1:92:75:df:38:d9:5c:a1:45:10:
         10:19:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:52:47 2025 by rpki-client