Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa
File:                     d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa (raw, json)
Hash identifier:          IXzRm4ncruyzOx9IdmIRfJWt2xAaL1euI8vCfizQgCo=
Subject key identifier:   BB:D6:65:52:C0:CA:1B:09:A6:A4:5F:F9:81:A8:04:5E:05:14:67:56
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       180EDD692B5710021985654AD4EDAE4AEC24D52D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa
Signing time:             Mon 09 Jun 2025 17:50:15 +0000
ROA not before:           Mon 09 Jun 2025 17:50:15 +0000
ROA not after:            Mon 14 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.237.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0e:dd:69:2b:57:10:02:19:85:65:4a:d4:ed:ae:4a:ec:24:d5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun  9 17:50:15 2025 GMT
            Not After : Jul 14 23:59:59 2025 GMT
        Subject: serialNumber=8dcbe398df35058faf8a3c067da2b9bb0c350b5710276f6805bfe4f2fda99e0c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:f7:50:a1:95:f3:28:f3:59:9a:81:27:5a:
                    67:b4:3e:e5:0a:a3:88:c1:cb:f5:7b:ff:e4:00:98:
                    25:57:de:b1:51:8f:58:e2:f1:41:f3:80:02:15:1a:
                    d6:80:55:48:38:e1:76:b7:be:43:45:d0:ca:1b:d5:
                    39:1c:0e:77:c3:54:5a:52:e3:f0:43:b9:86:0f:00:
                    33:38:7a:0e:07:80:f6:05:3d:a6:3a:73:15:84:99:
                    54:5e:dd:ca:c0:23:f6:7b:2d:d5:24:5e:d3:e2:15:
                    32:1c:14:03:fc:b5:3b:d2:bb:d3:ad:a6:e9:bf:7d:
                    6b:86:bd:16:db:81:58:36:c2:f5:8a:09:dc:cc:b9:
                    1f:dd:7c:5f:2c:2a:b5:b3:d6:95:c2:03:ab:8e:4e:
                    40:ae:94:73:a6:cb:82:b3:79:78:0d:ba:3c:cf:f8:
                    3e:27:c6:f7:05:9b:10:c4:b2:cb:45:7a:23:6c:ac:
                    2a:29:73:10:ab:4d:af:bf:92:d6:9d:48:34:7b:54:
                    30:87:4d:b0:ff:f2:e4:72:90:46:74:a5:b9:4a:b7:
                    33:45:e2:0e:ea:d7:75:a3:fd:59:cd:71:56:0b:e5:
                    f3:b3:84:7c:28:68:3a:65:c5:57:64:84:73:1e:69:
                    22:e8:e7:4b:83:e2:a8:ca:1f:d0:60:91:64:9c:b6:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D6:65:52:C0:CA:1B:09:A6:A4:5F:F9:81:A8:04:5E:05:14:67:56
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.237.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:38:47:27:1c:16:96:5e:b5:da:e9:e2:6e:5a:25:4b:c6:9f:
         30:c0:7e:23:1f:6e:f7:42:2d:cb:6d:a2:4e:4c:69:96:4a:e5:
         8c:01:d8:75:cd:60:37:59:f1:a9:58:90:16:83:e5:84:4a:06:
         4c:5c:25:7c:ef:b2:37:c0:40:3d:0a:9f:99:04:75:19:b8:5e:
         31:07:31:b3:93:2a:35:ae:0e:87:4d:8a:c0:fe:f2:ee:b0:18:
         21:da:50:6d:60:c2:49:f8:94:61:5a:3b:c3:b4:1e:58:a4:15:
         80:72:2f:6c:99:89:a9:c9:50:ac:78:df:48:dd:df:f9:4a:bd:
         1c:21:59:a5:3c:3f:ac:91:f3:1e:05:dc:41:17:f1:30:52:5e:
         e1:ea:01:31:26:c0:67:c0:7d:0f:fa:c9:c2:16:fe:fb:88:46:
         35:8e:68:09:19:f4:8b:57:21:c0:e1:ec:4e:fb:71:6f:a3:19:
         bf:dc:4c:80:8d:ff:09:6c:b0:11:aa:fb:d4:32:50:a9:a8:11:
         04:73:7c:73:a1:94:17:1d:56:da:81:d2:68:e7:b3:9d:17:3c:
         b8:d8:02:e4:ef:57:a0:7c:84:bf:c6:23:d3:86:15:6b:a2:09:
         47:e7:4c:6d:22:0c:68:7b:9d:ca:c7:e1:29:55:7d:a2:4c:0b:
         eb:e1:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:41 2025 by rpki-client