Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6ca8b8d-c551-4e2b-b2d3-1c2fe2345ce5.roa
File:                     c6ca8b8d-c551-4e2b-b2d3-1c2fe2345ce5.roa (raw, json)
Hash identifier:          Z9OMY2Ex9Ko0ToyDl/Y7N4spxIZ9jwzCGEVYG3SsE2Y=
Subject key identifier:   07:0A:02:D8:99:6F:C9:C5:BF:F9:DC:C8:1D:24:D5:E8:2C:23:04:92
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       46D65E0C0142E78F07D5DD478A97A232B0ACE087
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6ca8b8d-c551-4e2b-b2d3-1c2fe2345ce5.roa
Signing time:             Fri 11 Jul 2025 17:21:43 +0000
ROA not before:           Fri 11 Jul 2025 17:21:43 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        52.94.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:5e:0c:01:42:e7:8f:07:d5:dd:47:8a:97:a2:32:b0:ac:e0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 17:21:43 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=a465fd59f9794cb76c3e44481fa21af72d46f03fde89b6d01ceae74754d2e9fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:9d:df:76:28:94:ec:fa:30:2b:a1:32:94:
                    5c:a0:78:4d:8b:f3:22:1c:74:33:4e:21:9e:4e:7e:
                    bf:3e:29:50:b0:41:18:f0:c3:54:08:7f:ea:48:82:
                    7a:45:da:b6:08:9e:6d:e9:8b:ae:fa:cd:78:be:ab:
                    50:74:b2:9f:db:50:3b:bb:2e:4e:34:63:40:d9:2c:
                    7e:36:c2:b0:7a:d2:a2:53:bd:d5:98:36:13:e3:fe:
                    1b:04:35:08:37:d9:a2:67:fc:c1:8a:4e:4f:18:5e:
                    00:79:3b:99:f4:7a:3b:ae:6d:9b:3a:bf:19:c6:65:
                    a3:1c:67:7e:0a:16:3d:f2:ef:fd:8d:3e:d6:b4:e9:
                    2f:8d:b1:8b:6e:8f:85:b7:1c:a0:f0:94:7f:8b:92:
                    94:06:e3:93:cf:a0:b1:cd:28:7f:26:4e:f5:1f:c0:
                    ce:fa:b8:55:b1:d2:64:64:2a:e7:1b:65:7c:95:f3:
                    d9:0f:45:8e:1d:ad:b1:33:04:cb:bf:ca:4b:8a:65:
                    8e:6c:24:e0:88:c4:00:b4:88:12:88:b5:f9:0a:d9:
                    1c:e6:ce:3b:97:e9:5d:8c:3f:4f:b0:1d:e0:96:01:
                    86:dc:e7:e3:34:ff:1a:fa:6d:e9:8f:ae:59:0d:3d:
                    ec:d8:1e:b5:12:72:0c:02:42:2c:bc:ce:f6:1f:26:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:02:D8:99:6F:C9:C5:BF:F9:DC:C8:1D:24:D5:E8:2C:23:04:92
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6ca8b8d-c551-4e2b-b2d3-1c2fe2345ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:aa:6d:32:10:c3:40:08:91:2f:d3:69:0b:96:43:24:7f:
         ab:39:61:2c:55:b0:a2:ff:65:31:b5:48:05:1f:a1:54:eb:bb:
         23:58:c8:35:84:6a:cb:e6:72:8d:8c:87:b6:54:29:4c:3d:09:
         b4:9c:66:54:83:9b:c2:61:cc:7d:9f:df:4f:33:9f:a3:5f:ca:
         21:25:e5:90:fe:69:11:28:ed:c9:cb:09:44:39:f3:04:f7:78:
         21:a8:14:c0:78:83:c1:d6:f3:77:f3:e3:0e:db:ae:7a:25:6d:
         f9:5f:a4:c1:b5:12:4a:d8:b1:1c:69:ce:d6:a9:ff:78:c0:2b:
         25:40:5d:5f:10:9a:b0:50:91:ca:74:1c:0b:27:2c:b2:5e:22:
         ec:f4:89:cf:2e:a7:02:90:69:2a:ab:bc:c9:3f:45:c0:75:3a:
         eb:52:c7:a9:b8:66:3e:0d:84:ec:7b:68:ff:23:ec:53:46:5b:
         50:34:68:55:cd:85:dd:1d:57:ed:92:79:a3:62:a1:69:f5:6e:
         3f:5d:da:6a:61:65:76:85:af:74:e8:56:8f:87:da:cd:17:09:
         da:44:25:ee:56:8f:8b:e0:ee:03:f5:3e:3f:ce:21:d8:fb:61:
         f0:49:e0:c6:7a:c6:13:48:df:62:9c:95:6e:1b:f6:e5:1b:e6:
         07:17:71:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:42 2025 by rpki-client