Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a7a294-817c-41ee-88c9-54ffa2c6c545.roa
File:                     b5a7a294-817c-41ee-88c9-54ffa2c6c545.roa (raw, json)
Hash identifier:          QADo+ai1W4W3v5uvcUxk8fKznWTrYa9sqNOqeANi+UU=
Subject key identifier:   0E:13:E0:04:05:A3:81:32:81:C7:EB:71:12:56:70:18:F8:65:A7:90
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F67ED5B5AB0C6CB856FE935594064FD05F64A8C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a7a294-817c-41ee-88c9-54ffa2c6c545.roa
Signing time:             Wed 16 Apr 2025 00:10:45 +0000
ROA not before:           Wed 16 Apr 2025 00:10:45 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:ed:5b:5a:b0:c6:cb:85:6f:e9:35:59:40:64:fd:05:f6:4a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 16 00:10:45 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=5ad1891a200922b6448f7b2fff089d4a4ba492c8381ed2fa6d582a2636442211, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:42:cc:6f:89:33:c1:5a:fa:bc:38:0b:8c:
                    2f:21:35:36:8b:a9:97:47:1c:a7:d4:38:c2:0a:2e:
                    04:84:ad:b5:4e:73:c0:d6:80:1a:a3:fd:0a:6d:01:
                    82:10:1e:54:e4:0b:3d:bc:9b:01:92:3e:e1:98:d0:
                    aa:48:ea:d2:3f:6d:bd:9e:c2:87:2b:2a:44:a8:7c:
                    a0:96:23:1f:9d:a8:da:ed:32:b7:85:80:d7:7b:d9:
                    bf:c3:8a:90:c1:67:8f:25:cf:9f:12:90:f1:ea:b7:
                    1e:c0:3b:16:23:1c:ec:40:8b:98:70:96:00:cb:6e:
                    d0:69:08:b0:33:ad:8d:fd:5b:51:e8:49:cd:05:cf:
                    ca:cf:74:4d:05:ba:83:3b:08:fb:dd:c5:e4:6a:fb:
                    60:78:44:b0:75:cf:1c:19:12:8f:b4:c1:8a:e8:d9:
                    85:a0:8f:fa:73:c7:b5:78:65:19:0f:78:63:f6:69:
                    bb:cd:16:90:95:b8:fe:63:d9:64:da:e8:7f:b9:32:
                    d8:4b:ba:b1:8f:44:02:3f:31:6d:69:6d:e3:e3:c6:
                    e6:bb:d8:94:e8:c9:8b:5b:b1:56:53:16:a8:be:1a:
                    7f:0e:96:09:7f:16:e2:14:8b:e0:67:8a:78:bc:c8:
                    b6:c4:23:83:cd:dc:bb:21:d5:c6:39:6f:98:c2:67:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:13:E0:04:05:A3:81:32:81:C7:EB:71:12:56:70:18:F8:65:A7:90
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a7a294-817c-41ee-88c9-54ffa2c6c545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:45:51:c1:f6:4b:26:d1:26:71:d8:86:5e:e1:d2:ef:20:
         3d:5f:09:f0:ce:1e:00:d9:f9:13:59:8b:1f:87:e2:0a:f8:38:
         8b:82:df:df:9c:e2:c5:88:8d:de:20:0e:01:f7:11:b4:43:12:
         d3:b1:5b:65:84:07:0b:92:d7:48:8d:f5:36:84:34:2b:8e:b0:
         9e:12:75:11:55:c0:ef:b2:f8:a3:98:2a:03:0f:6d:52:2a:14:
         aa:ec:65:ce:d2:b0:2a:00:c7:cc:ea:68:96:ce:31:8d:ff:2d:
         d0:11:18:2b:1b:3c:8f:a5:fd:b2:84:b0:b5:56:32:8a:25:a2:
         fa:f3:d5:93:61:72:64:71:39:6f:ba:9a:c3:f0:4d:45:fa:a9:
         e6:7c:e8:93:20:02:c6:2a:fa:81:6f:3e:dc:80:65:4c:4a:42:
         73:af:1a:86:2e:93:b8:7f:23:4c:be:b7:b6:dc:0e:6b:ed:19:
         53:bf:09:c7:6c:96:80:f5:a1:d9:57:16:9b:68:6e:62:36:c1:
         bb:3d:3c:ae:0c:34:cf:58:0d:62:1a:59:01:71:92:7d:1d:d5:
         90:a1:03:e8:1e:e9:06:81:7a:42:72:e0:93:e2:b7:c2:fb:d5:
         c3:2a:07:9e:83:01:30:3f:6c:46:59:b0:a5:39:6b:1c:15:ed:
         4d:0b:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:47:18 2025 by rpki-client