Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8d0f45a-72ee-4040-a7a2-8dbe9bdb7203.roa
File:                     c8d0f45a-72ee-4040-a7a2-8dbe9bdb7203.roa (raw, json)
Hash identifier:          FshpOelc+DXa91a9Svi0AimPZtmkSAmCNIa7gFZqdYw=
Subject key identifier:   B8:CF:B8:8D:A2:59:5A:B6:AE:84:85:8B:EC:C1:35:FB:92:DF:CC:05
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       47A030C22BD3A9A6F0767988AC1E89B1FBA6A78A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8d0f45a-72ee-4040-a7a2-8dbe9bdb7203.roa
Signing time:             Tue 20 May 2025 15:50:21 +0000
ROA not before:           Tue 20 May 2025 15:50:21 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a0:30:c2:2b:d3:a9:a6:f0:76:79:88:ac:1e:89:b1:fb:a6:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 15:50:21 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=6358e9a829621c9a33e2eb1539fb625261f072bf262240da2b645f80ba4f6b51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:cc:e9:50:83:ae:4a:ad:f3:72:84:85:36:
                    62:13:67:f5:30:69:59:df:0d:04:88:3e:13:e9:89:
                    5e:02:1c:bd:5c:48:c3:c4:dc:ce:e5:40:2f:9f:55:
                    df:12:48:d1:58:85:a7:78:ba:1d:67:81:55:3e:31:
                    c7:10:47:fe:72:bb:2c:5d:97:56:a4:ac:9d:00:a7:
                    1f:1e:7c:ba:35:16:97:63:0d:cf:91:0e:07:d3:eb:
                    2f:2f:16:50:78:b2:1b:f4:7a:8b:f0:92:d5:b1:1e:
                    f4:48:d6:a0:30:9c:13:44:ae:90:b4:42:8f:40:f2:
                    a0:4a:e5:d5:e1:48:b3:6f:63:4d:bb:a5:00:1c:c9:
                    f5:d6:c6:b3:3f:af:92:41:6d:58:c2:eb:ae:ab:00:
                    ad:cd:9e:d3:b5:9b:5d:5b:d7:12:c7:0b:a4:58:9a:
                    d2:9d:7c:a2:11:ac:bb:c0:05:4d:04:38:8b:72:23:
                    92:d3:f5:57:20:1a:d5:41:4a:80:bf:64:5a:3f:23:
                    9f:66:98:67:b0:2f:95:42:43:3f:89:6e:61:a6:02:
                    38:8b:66:67:ed:d9:8f:c3:70:98:89:1e:10:24:f3:
                    40:c8:ab:37:7d:72:7a:95:a6:55:4a:b7:0f:77:76:
                    fa:20:59:e4:f8:4f:be:25:8b:82:a1:ee:c9:7b:4c:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:B8:8D:A2:59:5A:B6:AE:84:85:8B:EC:C1:35:FB:92:DF:CC:05
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8d0f45a-72ee-4040-a7a2-8dbe9bdb7203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:e0:5e:e3:5a:7e:a2:99:9f:2a:0f:67:c3:b9:7c:d0:37:
         73:8b:de:b0:dd:9b:0c:d7:f9:f5:d3:0d:62:8e:21:db:3d:04:
         49:68:74:89:06:b8:21:db:84:28:b1:83:d7:d1:d3:00:70:cc:
         9a:02:7f:e0:b1:5b:a6:72:b0:37:84:5f:c8:18:53:90:a7:31:
         d2:15:aa:27:89:c0:a7:4d:d4:fd:d5:3c:19:3b:32:18:27:5a:
         09:4b:12:3e:07:25:fe:6a:66:f9:98:2b:f7:08:59:a6:05:51:
         09:6f:43:f7:ac:0c:01:f1:06:c2:c8:b7:63:01:4a:99:2e:47:
         14:39:f1:50:ac:7f:e7:8a:01:ca:ea:c4:0d:8b:a5:71:2c:d3:
         05:c8:62:62:7b:31:fc:e5:0d:e4:2d:78:33:f9:08:80:8a:27:
         64:2b:57:72:9f:67:80:a3:49:1e:4c:66:05:7e:d1:99:9b:a9:
         e9:24:69:76:18:80:d4:3f:5b:08:07:7f:77:11:02:a1:e3:d3:
         76:6a:c4:6b:08:16:4b:67:eb:6b:4d:0b:b6:7b:30:f8:e5:ea:
         30:1f:f2:53:37:ee:4a:31:79:19:09:9c:64:47:b8:e1:9e:dd:
         87:94:55:e6:db:b3:37:fe:f8:66:3e:48:14:62:49:e3:73:9d:
         50:50:4b:08
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUR6AwwivTqabwdnmIrB6Jsfump4owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU1MDIxWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzU4ZTlhODI5NjIxYzlhMzNlMmViMTUzOWZiNjI1MjYx
ZjA3MmJmMjYyMjQwZGEyYjY0NWY4MGJhNGY2YjUxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCOszpUIOuSq3zcoSFNmITZ/UwaVnfDQSIPhPpiV4CHL1c
SMPE3M7lQC+fVd8SSNFYhad4uh1ngVU+MccQR/5yuyxdl1akrJ0Apx8efLo1Fpdj
Dc+RDgfT6y8vFlB4shv0eovwktWxHvRI1qAwnBNErpC0Qo9A8qBK5dXhSLNvY027
pQAcyfXWxrM/r5JBbVjC666rAK3NntO1m11b1xLHC6RYmtKdfKIRrLvABU0EOIty
I5LT9VcgGtVBSoC/ZFo/I59mmGewL5VCQz+JbmGmAjiLZmft2Y/DcJiJHhAk80DI
qzd9cnqVplVKtw93dvogWeT4T74li4Kh7sl7TF39AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUuM+4jaJZWrauhIWL7ME1+5LfzAUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M4ZDBmNDVhLTcyZWUtNDA0MC1hN2EyLThkYmU5YmRiNzIwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPjjANBgkqhkiG9w0BAQsFAAOCAQEAP9vgXuNafqKZnyoPZ8O5fNA3c4ve
sN2bDNf59dMNYo4h2z0ESWh0iQa4IduEKLGD19HTAHDMmgJ/4LFbpnKwN4RfyBhT
kKcx0hWqJ4nAp03U/dU8GTsyGCdaCUsSPgcl/mpm+Zgr9whZpgVRCW9D96wMAfEG
wsi3YwFKmS5HFDnxUKx/54oByurEDYulcSzTBchiYnsx/OUN5C14M/kIgIonZCtX
cp9ngKNJHkxmBX7RmZup6SRpdhiA1D9bCAd/dxECoePTdmrEawgWS2fra00Ltnsw
+OXqMB/yUzfuSjF5GQmcZEe44Z7dh5RV5tuzN/74Zj5IFGJJ43OdUFBLCA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:55:00 2025 by rpki-client