Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa
File:                     80880214-f2cb-4edf-bc41-dd2edd36e075.roa (raw, json)
Hash identifier:          oK9fAWTHL+Gu7TapJImTdEccTuRE4tFZEo6mTpt0FaA=
Subject key identifier:   0B:59:20:76:43:87:D2:CD:F6:CF:74:FF:78:53:3B:8A:B1:D5:68:F3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5F234F7DFC4C8A03F4B65B8C910D3860ED6F8B33
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa
Signing time:             Fri 25 Apr 2025 15:51:35 +0000
ROA not before:           Fri 25 Apr 2025 15:51:35 +0000
ROA not after:            Fri 30 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:23:4f:7d:fc:4c:8a:03:f4:b6:5b:8c:91:0d:38:60:ed:6f:8b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 25 15:51:35 2025 GMT
            Not After : May 30 23:59:59 2025 GMT
        Subject: serialNumber=361add0cc22652ae8a28d08a60a4686380dda060bb22e4c3cc5d8bbd8b1a00c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:f1:38:a8:b3:08:c8:b2:e4:a3:cf:b1:80:
                    d7:ab:5a:60:83:2b:d7:07:c9:7d:ab:ed:ef:0d:a6:
                    97:df:58:3c:7b:aa:d9:da:10:1a:8d:a8:39:e6:7b:
                    75:8d:68:4d:68:ec:78:34:36:8d:24:22:d3:2f:f5:
                    ef:6d:13:04:8e:b7:fd:d4:7d:28:dd:17:d6:5a:cd:
                    51:15:ef:47:9d:18:1f:83:34:7a:f1:3b:66:1f:3b:
                    71:f6:22:5c:e8:65:63:4f:62:01:36:1b:d8:05:db:
                    7c:dc:ae:a8:81:d6:07:9b:9b:b3:cc:1d:bb:7a:59:
                    6e:a7:c0:72:b5:65:73:f2:af:6f:92:cc:f9:86:82:
                    7c:aa:72:38:ae:58:fe:9f:1f:9a:c2:15:59:2d:06:
                    59:c1:1e:6b:03:df:ba:65:85:19:9a:b1:8c:9f:01:
                    ed:22:5b:69:c2:2c:19:e0:be:f1:3a:1f:87:89:dc:
                    0d:36:f5:98:62:48:5f:8a:0d:3b:02:a5:6f:99:d5:
                    46:e6:2e:fe:ed:90:fe:4b:e6:12:2d:8a:b0:f6:73:
                    af:bf:9a:52:02:4f:61:d0:29:d8:e6:0f:9e:41:5a:
                    ad:75:d0:21:b5:21:99:90:d0:df:0f:7b:cf:96:7d:
                    3b:ec:0b:25:ae:25:4c:d0:b1:65:81:bb:a5:4f:07:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:20:76:43:87:D2:CD:F6:CF:74:FF:78:53:3B:8A:B1:D5:68:F3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:0e:f3:ec:3a:d2:1b:3b:79:3f:63:cd:35:54:17:6e:39:
         cc:3d:af:d3:2a:b6:dc:a6:50:4b:ee:be:78:f5:aa:f8:3d:f5:
         39:58:41:ac:3a:25:21:35:a8:20:fd:b2:30:b4:0b:1c:bc:ff:
         94:ce:ca:bb:4c:9f:67:7b:72:0a:fb:82:11:6b:d8:0c:d1:8a:
         d0:a2:14:49:ca:8c:33:e9:72:de:e8:11:ec:b8:71:1a:ef:14:
         01:38:5b:7c:87:01:58:39:b3:01:ce:df:76:98:c1:83:4f:4d:
         b3:db:1d:ee:53:08:bf:01:a6:2d:22:f2:d7:11:8b:1c:90:7a:
         3b:54:16:e2:99:36:cb:57:b9:ef:c9:9c:f4:ce:31:bb:f4:89:
         64:51:99:4c:82:4f:cc:0b:be:79:0d:37:3a:50:53:fb:79:a0:
         af:71:01:45:de:13:25:a7:af:b2:4f:49:52:08:42:a7:11:4a:
         08:6a:26:b8:f6:9f:75:b6:08:4e:07:69:3f:3c:b3:d6:0c:24:
         a6:28:2f:ea:45:5a:af:7e:73:00:45:3f:11:47:18:f0:76:9f:
         29:e0:21:0f:c4:cb:43:e0:14:52:39:6c:f3:c6:89:c5:e4:2c:
         d6:30:fa:c3:6c:3f:d8:af:16:1a:cb:0f:3f:54:e0:98:c4:af:
         5d:5b:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:37 2025 by rpki-client