Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863b9fc8-bafd-4b27-aba8-54ea14f095bc.roa
File:                     863b9fc8-bafd-4b27-aba8-54ea14f095bc.roa (raw, json)
Hash identifier:          rzy5XksZFTIHzD3bBTmaZDYqR7Aoywdvw0v3W06jFnY=
Subject key identifier:   52:64:71:08:DD:70:65:8E:3A:EC:8B:A6:73:AA:8D:2B:12:5C:97:3A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4281D3B5CE10FE3C3480E7BAA335C9EE8DC257A0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863b9fc8-bafd-4b27-aba8-54ea14f095bc.roa
Signing time:             Tue 03 Jun 2025 15:11:39 +0000
ROA not before:           Tue 03 Jun 2025 15:11:39 +0000
ROA not after:            Tue 08 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        34.208.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:81:d3:b5:ce:10:fe:3c:34:80:e7:ba:a3:35:c9:ee:8d:c2:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  3 15:11:39 2025 GMT
            Not After : Jul  8 23:59:59 2025 GMT
        Subject: serialNumber=d5f86243f10c15c36db804e4ddd84fdec33124faa9419ea8855e3dffa5a091e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:4f:cf:ce:17:dd:9b:e2:92:2f:09:31:a4:
                    b9:7d:a9:7a:7c:61:c6:3c:52:c3:30:a6:8b:3d:40:
                    ac:93:3b:a1:e5:8f:ca:91:8e:55:98:ab:9c:dd:48:
                    7e:57:7a:0d:60:e2:2d:35:e0:bf:c9:9f:1e:aa:4f:
                    9b:dc:71:92:8e:f7:13:9a:7e:10:4a:4f:1c:2c:95:
                    f1:64:f8:a5:76:2d:04:00:f1:18:a9:92:49:0c:5a:
                    f8:69:a1:93:ee:a0:cf:7c:a4:17:c0:70:c2:08:df:
                    15:49:6e:bf:1f:39:7c:0f:91:a9:ee:52:26:29:b5:
                    82:5c:6e:d0:4b:05:fc:3d:d7:ea:47:46:c7:3e:99:
                    f6:c9:80:32:3d:79:92:dd:84:78:1a:18:fb:df:9a:
                    40:c3:32:21:8c:1c:59:46:87:43:9c:d4:6e:e4:48:
                    09:d2:cc:7e:4b:9b:2c:d9:e4:0e:7c:bd:d9:39:dc:
                    ab:97:6b:64:4d:3a:69:ee:77:b5:2e:10:7e:17:07:
                    1b:c5:c2:ca:39:20:70:13:1f:e3:6b:0b:69:5d:cd:
                    20:ba:7f:28:c5:84:8c:b1:1b:a3:11:0b:62:97:e9:
                    53:eb:00:6e:45:20:01:76:09:bc:17:7c:94:06:09:
                    96:02:92:4b:56:e8:d1:7e:1b:b0:bb:66:9c:8d:41:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:71:08:DD:70:65:8E:3A:EC:8B:A6:73:AA:8D:2B:12:5C:97:3A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/863b9fc8-bafd-4b27-aba8-54ea14f095bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.208.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:dd:5d:11:87:c2:bb:4f:6c:0a:11:33:b7:8d:f2:a1:6b:
         db:50:7d:61:5a:dc:0f:a1:13:30:1e:08:df:df:82:72:ab:be:
         ba:cb:cc:99:90:ee:6b:4b:f7:9d:9f:df:9a:8d:97:0b:62:18:
         20:e8:27:1e:6c:52:bc:16:74:c7:e3:3b:ce:2f:62:4f:34:e9:
         fb:dc:2c:45:2e:21:be:14:b8:dd:29:5d:77:85:ce:ba:72:71:
         f8:8c:7a:d2:14:e6:78:f6:19:dd:2b:9d:6e:21:e5:51:6c:ee:
         3c:8d:e2:15:f9:e7:de:6e:59:9b:60:21:75:8d:af:7b:df:7a:
         e9:5d:dd:1f:75:c4:1d:d1:9b:93:37:4d:96:5c:e4:2f:94:f6:
         3e:65:e4:74:9f:4b:8d:95:d3:80:3a:9e:86:72:e1:4d:93:e2:
         7f:5e:6c:64:5c:3f:0e:5e:68:0e:3a:4b:ee:f3:94:fa:36:33:
         22:25:61:d2:7c:b7:c2:4b:96:ce:43:41:33:5a:7f:5f:f3:fe:
         d5:46:2e:12:fc:f6:65:3c:76:be:e1:37:17:ba:c5:cc:21:92:
         28:ab:f2:2b:96:fa:7a:c2:c7:38:65:2f:06:44:06:c1:b3:c6:
         01:d6:09:75:15:b3:4b:2b:5b:fc:56:d4:4f:e4:fb:d2:d3:3d:
         e8:4a:06:65
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQoHTtc4Q/jw0gOe6ozXJ7o3CV6AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUxMTM5WhcNMjUwNzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWY4NjI0M2YxMGMxNWMzNmRiODA0ZTRkZGQ4NGZkZWMz
MzEyNGZhYTk0MTllYTg4NTVlM2RmZmE1YTA5MWU2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUJ0/Pzhfdm+KSLwkxpLl9qXp8YcY8UsMwpos9QKyTO6Hl
j8qRjlWYq5zdSH5Xeg1g4i014L/Jnx6qT5vccZKO9xOafhBKTxwslfFk+KV2LQQA
8RipkkkMWvhpoZPuoM98pBfAcMII3xVJbr8fOXwPkanuUiYptYJcbtBLBfw91+pH
Rsc+mfbJgDI9eZLdhHgaGPvfmkDDMiGMHFlGh0Oc1G7kSAnSzH5LmyzZ5A58vdk5
3KuXa2RNOmnud7UuEH4XBxvFwso5IHATH+NrC2ldzSC6fyjFhIyxG6MRC2KX6VPr
AG5FIAF2CbwXfJQGCZYCkktW6NF+G7C7ZpyNQZxBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUmRxCN1wZY467Iumc6qNKxJclzowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzg2M2I5ZmM4LWJhZmQtNGIyNy1hYmE4LTU0ZWExNGYwOTViYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwQi0DANBgkqhkiG9w0BAQsFAAOCAQEAO7DdXRGHwrtPbAoRM7eN8qFr21B9
YVrcD6ETMB4I39+Ccqu+usvMmZDua0v3nZ/fmo2XC2IYIOgnHmxSvBZ0x+M7zi9i
TzTp+9wsRS4hvhS43Sldd4XOunJx+Ix60hTmePYZ3SudbiHlUWzuPI3iFfnn3m5Z
m2AhdY2ve9966V3dH3XEHdGbkzdNllzkL5T2PmXkdJ9LjZXTgDqehnLhTZPif15s
ZFw/Dl5oDjpL7vOU+jYzIiVh0ny3wkuWzkNBM1p/X/P+1UYuEvz2ZTx2vuE3F7rF
zCGSKKvyK5b6esLHOGUvBkQGwbPGAdYJdRWzSytb/FbUT+T70tM96EoGZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:44:33 2025 by rpki-client