Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c3a9c22-46ba-496f-88aa-4dd1f5112cfb.roa
File:                     8c3a9c22-46ba-496f-88aa-4dd1f5112cfb.roa (raw, json)
Hash identifier:          osVOMG9nCOZ5ZuY+H7czv/vSg0YTdhWBn/T9TVzmz1M=
Subject key identifier:   39:53:E1:A8:54:DF:D2:2E:7D:7E:25:28:EA:21:81:C2:24:BF:CC:C6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2C1603F8CFFE384D65540A7CE7F3FE256F0B7E99
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c3a9c22-46ba-496f-88aa-4dd1f5112cfb.roa
Signing time:             Fri 18 Apr 2025 16:20:11 +0000
ROA not before:           Fri 18 Apr 2025 16:20:11 +0000
ROA not after:            Fri 23 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:03:f8:cf:fe:38:4d:65:54:0a:7c:e7:f3:fe:25:6f:0b:7e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 18 16:20:11 2025 GMT
            Not After : May 23 23:59:59 2025 GMT
        Subject: serialNumber=a516f67944e0faef998d4232741c829c199162c76b83ec721b47acb62a9885ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:4d:92:04:b8:de:19:c3:de:f4:75:b4:8f:
                    8b:b9:43:10:8d:73:50:f8:0f:45:9a:3a:4c:4c:35:
                    1a:f3:8d:ad:d1:0a:06:c2:a2:8a:ca:e3:6e:37:3c:
                    29:16:ed:85:75:27:44:4c:32:a4:a3:50:97:6d:08:
                    f1:73:c1:13:12:39:07:6d:63:3a:b5:55:6a:d3:14:
                    7c:e3:f0:7d:50:a6:84:d7:19:d9:47:46:bd:a8:3f:
                    af:72:b8:4c:25:2c:fb:29:5f:cd:86:65:d3:4a:52:
                    e2:2b:a6:cb:7e:3c:0b:31:d5:00:5a:70:40:4c:0a:
                    45:9a:94:d2:44:ec:d0:79:99:a3:d8:6f:eb:4e:d8:
                    65:e5:9e:c5:d9:82:28:52:91:6d:b0:70:e9:86:50:
                    25:61:a5:52:99:88:bf:10:f9:54:93:c5:50:4d:80:
                    7c:e2:37:42:2e:7a:02:47:08:50:20:ee:7a:aa:cc:
                    6b:7b:78:67:24:1b:17:31:69:ce:4a:bb:79:fa:45:
                    0a:a5:c2:09:a0:92:c5:bb:74:06:6f:65:d1:44:23:
                    ce:ed:66:8c:07:4f:a6:09:ce:18:93:d6:40:75:d9:
                    a2:7f:18:a3:9d:ef:b5:05:55:35:ee:18:dc:c4:10:
                    90:01:e3:e9:2c:68:1d:39:98:ab:16:57:43:e2:1e:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:E1:A8:54:DF:D2:2E:7D:7E:25:28:EA:21:81:C2:24:BF:CC:C6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8c3a9c22-46ba-496f-88aa-4dd1f5112cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:4a:be:68:83:98:6a:c4:b7:0c:87:25:67:07:06:46:8b:
         da:ee:d8:76:76:bd:96:d9:bb:1b:7f:2d:51:2a:4e:16:4c:6b:
         28:73:df:02:e8:19:37:c2:e4:21:b6:10:f0:35:bf:7d:28:d8:
         97:31:33:b0:25:67:05:c1:22:cf:8b:82:7a:1a:45:f9:c4:7a:
         7a:55:db:d9:97:bc:02:61:f4:d6:75:d8:45:92:f7:b4:cc:17:
         5f:8c:5d:cb:76:d1:7c:53:19:7a:73:9b:24:bf:9b:cd:22:94:
         87:59:33:87:c1:30:ba:2e:2f:62:c1:b8:aa:3d:09:52:69:16:
         0a:49:5c:50:49:34:13:35:9b:b5:84:e0:c8:a8:85:43:bf:b8:
         57:8d:e8:0a:94:e4:ec:97:1c:3c:1d:68:77:8f:12:3f:f9:56:
         86:fa:f1:0c:1b:25:fc:6b:f3:70:25:4b:50:81:d3:ea:4d:df:
         80:82:40:7d:db:b7:90:ce:05:3b:3c:b3:98:88:31:6a:01:a5:
         46:bf:7f:de:ef:e9:38:36:36:b1:f3:7c:c0:37:96:ef:2b:05:
         0a:6e:2b:d2:18:37:87:fd:02:fd:7d:e1:58:26:9c:fd:55:01:
         c2:09:c6:08:f0:83:fd:41:ad:a8:52:ba:36:ff:82:e5:f1:76:
         19:a5:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:16 2025 by rpki-client