Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82d178ce-57c3-49bc-bac4-b0d29b61bc4a.roa
File:                     82d178ce-57c3-49bc-bac4-b0d29b61bc4a.roa (raw, json)
Hash identifier:          ZQWtWridYQwsXdvX3owhXiuwIanq6tWW1iA/hzWeXrI=
Subject key identifier:   AD:85:61:FC:56:54:5C:3B:87:75:97:B0:68:7D:5C:D9:3E:03:4B:5E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48E7C99B52F1501AB88013083DBE59DC18F2C3D4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82d178ce-57c3-49bc-bac4-b0d29b61bc4a.roa
Signing time:             Sat 26 Jul 2025 00:30:52 +0000
ROA not before:           Sat 26 Jul 2025 00:30:52 +0000
ROA not after:            Sat 30 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e7:c9:9b:52:f1:50:1a:b8:80:13:08:3d:be:59:dc:18:f2:c3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 26 00:30:52 2025 GMT
            Not After : Aug 30 23:59:59 2025 GMT
        Subject: serialNumber=f7f1d21ceafdfd0055cdaf4aa6b81080be5104c8f1a27345c264794ad3224034, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:f5:81:bc:33:2b:9a:d0:e7:29:5f:f7:ef:
                    b0:09:63:39:d8:39:f5:5b:f5:25:f7:56:60:00:b1:
                    c6:9f:91:5d:e6:45:7d:77:9d:62:87:67:31:08:db:
                    01:50:3b:53:e5:b3:47:fe:e4:bb:2f:6e:60:6e:ea:
                    b2:c9:3b:5d:b3:c0:43:fc:2f:34:90:37:f1:52:b5:
                    bf:36:d1:be:63:34:08:7d:5d:1e:7c:f3:16:39:ae:
                    9a:49:13:87:21:b0:d6:15:55:94:05:e4:9b:2e:9c:
                    48:a0:b8:89:8b:9b:ea:c3:1d:15:c4:f1:b3:1f:9f:
                    f6:2c:de:db:5a:60:23:d0:32:42:aa:43:6b:8b:41:
                    40:ce:64:01:e3:4b:71:e3:b3:34:23:45:d6:06:4e:
                    bd:3e:cc:2f:bf:b2:92:c6:8d:a0:54:52:97:93:52:
                    5b:ab:6c:d4:0e:44:98:18:75:50:b3:6b:0a:d4:60:
                    51:1e:c6:06:e1:e1:c4:95:e8:79:e8:4a:89:21:21:
                    e0:7a:69:59:2d:ef:21:65:2f:44:fa:ca:ea:52:bf:
                    44:60:ea:d8:b4:a4:85:6b:f4:af:1b:e8:c5:5f:09:
                    53:ff:f2:05:bc:7a:6d:ad:99:ee:5d:8c:cd:5d:68:
                    e6:e1:f3:91:56:64:f4:b5:45:e2:c0:d0:44:dc:fc:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:61:FC:56:54:5C:3B:87:75:97:B0:68:7D:5C:D9:3E:03:4B:5E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82d178ce-57c3-49bc-bac4-b0d29b61bc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:97:d3:fe:fa:42:2e:f3:0e:81:64:1f:1e:40:f1:e6:4a:9c:
         95:fb:09:7a:a9:26:48:1a:ae:b5:f5:3c:8f:0d:32:5f:68:ee:
         e3:3d:6e:6d:a7:85:25:5a:0b:99:02:b9:b8:21:05:bb:77:72:
         37:f3:f4:ed:cb:d6:89:2b:ab:4e:b0:0e:77:a6:7f:a4:f8:1b:
         1f:3a:7f:b2:c8:32:2b:20:f5:76:4d:8f:9d:d4:31:11:bf:1d:
         e1:32:b7:b3:dd:fa:0e:cd:e5:10:02:ae:b5:38:96:6d:ee:98:
         cd:ff:1f:f5:66:2f:a4:c9:94:c5:4f:f9:af:32:49:ca:58:01:
         2c:e4:7f:6b:56:dc:1c:7f:e2:99:81:0f:7a:3d:36:c7:7d:66:
         d2:27:b8:4a:35:25:04:b0:3e:9d:27:6e:93:92:35:2b:e0:6e:
         5b:8e:b1:ad:a7:f4:84:b6:19:7d:69:52:73:3e:ea:e8:e3:d2:
         9d:ff:94:48:70:ec:5b:c9:95:6a:dc:55:f8:61:6a:da:4a:79:
         c6:8b:23:71:31:d2:66:ca:a9:48:52:c8:97:c5:88:9f:ae:13:
         ec:99:33:07:35:f1:5b:4a:21:8c:25:58:5a:5b:2e:85:e1:34:
         c9:4e:35:11:b7:a1:6a:c5:07:a9:0b:4a:3e:eb:dc:fb:51:50:
         f1:d0:35:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSOfJm1LxUBq4gBMIPb5Z3Bjyw9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDAzMDUyWhcNMjUwODMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmN2YxZDIxY2VhZmRmZDAwNTVjZGFmNGFhNmI4MTA4MGJl
NTEwNGM4ZjFhMjczNDVjMjY0Nzk0YWQzMjI0MDM0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcmfWBvDMrmtDnKV/377AJYznYOfVb9SX3VmAAscafkV3m
RX13nWKHZzEI2wFQO1Pls0f+5LsvbmBu6rLJO12zwEP8LzSQN/FStb820b5jNAh9
XR588xY5rppJE4chsNYVVZQF5JsunEiguImLm+rDHRXE8bMfn/Ys3ttaYCPQMkKq
Q2uLQUDOZAHjS3HjszQjRdYGTr0+zC+/spLGjaBUUpeTUlurbNQORJgYdVCzawrU
YFEexgbh4cSV6HnoSokhIeB6aVkt7yFlL0T6yupSv0Rg6ti0pIVr9K8b6MVfCVP/
8gW8em2tme5djM1daObh85FWZPS1ReLA0ETc/NlXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrYVh/FZUXDuHdZewaH1c2T4DS14wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzgyZDE3OGNlLTU3YzMtNDliYy1iYWM0LWIwZDI5YjYxYmM0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP3OMwDQYJKoZIhvcNAQELBQADggEBADiX0/76Qi7zDoFkHx5A8eZKnJX7
CXqpJkgarrX1PI8NMl9o7uM9bm2nhSVaC5kCubghBbt3cjfz9O3L1okrq06wDnem
f6T4Gx86f7LIMisg9XZNj53UMRG/HeEyt7Pd+g7N5RACrrU4lm3umM3/H/VmL6TJ
lMVP+a8yScpYASzkf2tW3Bx/4pmBD3o9Nsd9ZtInuEo1JQSwPp0nbpOSNSvgbluO
sa2n9IS2GX1pUnM+6ujj0p3/lEhw7FvJlWrcVfhhatpKecaLI3Ex0mbKqUhSyJfF
iJ+uE+yZMwc18VtKIYwlWFpbLoXhNMlONRG3oWrFB6kLSj7r3PtRUPHQNaA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:40 2025 by rpki-client