Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa
File:                     c74306aa-815f-437e-bc24-88cda4ef292e.roa (raw, json)
Hash identifier:          PxSuuFr9INyacJHsVHOhDQroNwplWxCICBYR9haiDUo=
Subject key identifier:   FE:81:9F:B2:24:4F:1F:CB:0C:8F:D4:71:BB:83:B7:8A:7A:46:7B:46
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       54273B13CE23DEF06536C3E8CA14F7E36774B2EA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa
Signing time:             Fri 18 Apr 2025 16:11:14 +0000
ROA not before:           Fri 18 Apr 2025 16:11:14 +0000
ROA not after:            Fri 23 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.199.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:27:3b:13:ce:23:de:f0:65:36:c3:e8:ca:14:f7:e3:67:74:b2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 18 16:11:14 2025 GMT
            Not After : May 23 23:59:59 2025 GMT
        Subject: serialNumber=e7342e920ff927abb28885c5363b5d38a5b264fbcc2bee31a42a790706a5f9f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:08:e3:b2:f4:95:2c:16:54:39:79:bf:6a:
                    a9:0a:30:03:46:05:04:3d:6f:73:23:9e:60:8c:22:
                    f8:de:72:73:ae:a6:89:12:3d:db:80:76:5a:e9:04:
                    25:fd:dc:dc:d8:4c:b1:a8:af:4e:15:a5:2b:59:17:
                    f8:e0:a2:0e:30:72:e0:c4:3e:58:8c:7a:27:a0:49:
                    01:85:e7:fc:7f:f4:8c:51:8c:96:78:97:e1:b2:e0:
                    4a:8a:6e:f8:1c:13:6c:85:30:cf:fc:45:f6:aa:e7:
                    ec:f6:16:a2:a4:a0:c9:7d:a1:7d:6e:d1:75:3a:3f:
                    50:13:bc:30:8e:67:75:72:9e:6f:ac:47:e7:af:b3:
                    34:53:e6:1a:ca:c3:cd:c3:a6:ed:84:cc:a4:44:9a:
                    12:de:29:00:f2:2f:bb:cf:1d:6f:1d:1a:ee:cc:0e:
                    8c:8c:73:b5:68:c0:9b:be:0e:02:94:09:e7:cc:f3:
                    ec:27:96:9b:5e:c1:83:33:54:0c:4e:41:64:b4:27:
                    64:6e:03:4e:12:8e:66:ef:ee:28:61:64:29:f9:92:
                    d7:f0:1f:42:2a:7d:85:3f:ee:d2:08:92:c0:39:3e:
                    fc:91:98:55:fd:cf:1c:35:55:05:f7:df:e9:f3:4f:
                    19:cf:12:c8:47:f7:21:77:23:fc:7f:28:82:0a:c5:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:9F:B2:24:4F:1F:CB:0C:8F:D4:71:BB:83:B7:8A:7A:46:7B:46
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.199.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:f7:07:9a:f6:ec:bf:c5:cc:65:47:28:99:bf:29:9e:ff:
         1e:26:57:29:db:ce:3d:f2:f6:19:26:85:82:ec:9c:88:d4:17:
         0e:43:7f:54:fb:dd:10:a5:b2:d5:92:5b:1d:d0:0a:7f:c8:d9:
         b9:2f:ed:73:e9:a0:66:01:94:67:16:74:39:a3:20:e6:8a:a5:
         28:9c:f6:01:10:f9:44:cd:cb:8e:20:0e:bc:c7:ec:86:53:36:
         30:5e:83:f4:96:bf:ae:8a:93:21:ed:e3:62:51:5c:6e:e9:ba:
         6d:b2:cb:7d:84:d1:6b:e7:e7:fb:c4:e1:47:0f:f1:17:e8:63:
         e8:da:0d:52:89:bd:b3:43:c2:2b:b3:0c:5a:76:25:2f:65:af:
         e7:72:f6:07:55:de:b8:7a:9c:d6:ba:22:a5:af:b5:cb:dd:c9:
         56:b0:4b:6c:e7:ae:c0:40:75:5a:0e:8c:ca:17:8b:ab:32:72:
         af:30:fc:de:a1:71:31:51:73:54:a9:84:02:c3:01:8b:e3:6b:
         3c:d6:0b:b2:b6:65:44:e4:b2:00:fc:87:c9:25:34:cc:2d:48:
         19:58:4d:ab:fb:61:bc:2d:d4:c1:fc:04:65:f1:dd:cb:31:78:
         b0:e0:c2:6f:27:1d:cd:d0:55:60:96:90:47:ba:83:54:a6:ac:
         b2:f4:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:47:04 2025 by rpki-client