Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa
File:                     e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa (raw, json)
Hash identifier:          xuDbH2yLcGQaLk4ZyiqZdbhvozzQW/9E007CdtpBGLo=
Subject key identifier:   D4:EC:A0:1F:FD:AD:2A:E8:67:5E:4B:18:58:C5:84:98:22:16:CD:0A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       755C05F53527AAE0A3BBC4E0B15C90C82ED73D2E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa
Signing time:             Fri 11 Jul 2025 16:30:52 +0000
ROA not before:           Fri 11 Jul 2025 16:30:52 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.193.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5c:05:f5:35:27:aa:e0:a3:bb:c4:e0:b1:5c:90:c8:2e:d7:3d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 16:30:52 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=863d6fc33e2753e7d3fb96f56820222fac5e94aa9dc30a34e80bd5ff68f3eef6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:8e:ae:37:08:a9:19:ee:36:e7:81:b8:91:
                    9f:64:47:92:59:4f:1d:74:e3:50:76:6f:47:54:47:
                    c9:68:b8:ec:c2:c3:32:38:07:d1:22:f6:43:d5:ab:
                    52:da:92:57:43:15:8f:7a:13:ad:5c:9f:8a:93:c2:
                    3a:c1:27:f0:f6:40:21:3b:5a:f1:b1:52:b9:c7:fb:
                    88:e3:33:30:c3:00:ba:6d:0e:eb:4d:ba:37:b8:de:
                    89:6e:ad:e5:56:05:6e:b6:eb:20:05:21:32:df:95:
                    3f:af:00:27:ce:4a:cf:cd:63:ae:d1:52:41:bb:65:
                    f9:84:99:7d:2e:d3:e8:3a:7b:f1:b8:4e:c9:a4:27:
                    40:cc:9e:aa:4a:6d:9f:0b:c2:2a:a3:ea:6a:4d:33:
                    82:47:dd:8c:3e:5e:bf:4c:f6:3a:3f:a4:bd:8d:66:
                    43:71:d4:4d:e3:5e:39:3c:b8:a2:bc:34:cc:3d:f7:
                    8b:fb:c3:3b:b3:3c:ac:48:8c:6b:0a:92:21:0e:ed:
                    bd:f2:29:7a:59:71:2b:48:ac:f9:92:af:10:21:1e:
                    e2:fc:cb:ff:fa:57:79:d6:67:fb:85:ac:75:c1:e8:
                    e6:60:df:c6:f9:a2:1d:3c:49:95:74:66:6c:f7:fa:
                    07:b3:21:90:cd:d2:0d:7c:42:57:c6:75:01:c8:11:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:A0:1F:FD:AD:2A:E8:67:5E:4B:18:58:C5:84:98:22:16:CD:0A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36dbc25-7f30-42c9-9655-13a4a2cc581c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:62:21:85:e2:26:7e:15:0e:b1:76:be:bd:7a:8c:0d:66:
         8b:53:9d:59:06:03:f1:1d:bf:88:e4:cd:aa:9e:a4:a9:5a:e8:
         a6:98:43:1a:a0:7d:34:c6:5d:2d:87:28:da:4d:13:7a:7f:1f:
         48:87:a1:38:89:31:e7:05:00:7b:13:05:9e:af:ea:d8:9d:2b:
         8d:30:49:8e:84:25:dc:1a:59:06:16:e7:f8:f1:c1:45:dc:d1:
         ea:a6:24:d1:0b:46:a8:64:e8:7e:66:59:4e:8a:7b:50:22:c4:
         14:06:39:c8:be:85:cf:95:19:dd:6b:27:32:c3:79:e5:19:0a:
         b8:a3:60:eb:05:bc:3e:95:9e:04:16:ae:ac:35:7b:2b:fd:62:
         08:c2:4a:cc:c2:b1:e4:d7:c4:23:7b:d2:24:e8:f2:17:ef:39:
         29:80:d9:c7:08:f4:23:48:24:35:dd:91:d3:0c:57:bc:d2:1a:
         f1:b5:4c:f6:13:88:d4:5f:08:76:36:cd:d9:a0:0a:0e:4d:86:
         95:b4:9b:87:2e:68:c5:19:05:4b:3b:68:a6:de:f8:9f:e4:74:
         3e:d5:1c:bd:81:b5:1d:e8:8f:ac:39:e8:24:f9:b4:9c:90:08:
         39:38:f0:ee:ef:7e:f1:ce:48:aa:52:73:5f:f2:a9:a1:67:8f:
         9d:a9:e0:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdVwF9TUnquCju8TgsVyQyC7XPS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTYzMDUyWhcNMjUwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjNkNmZjMzNlMjc1M2U3ZDNmYjk2ZjU2ODIwMjIyZmFj
NWU5NGFhOWRjMzBhMzRlODBiZDVmZjY4ZjNlZWY2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Do6uNwipGe4254G4kZ9kR5JZTx1041B2b0dUR8louOzC
wzI4B9Ei9kPVq1LakldDFY96E61cn4qTwjrBJ/D2QCE7WvGxUrnH+4jjMzDDALpt
DutNuje43olureVWBW626yAFITLflT+vACfOSs/NY67RUkG7ZfmEmX0u0+g6e/G4
TsmkJ0DMnqpKbZ8Lwiqj6mpNM4JH3Yw+Xr9M9jo/pL2NZkNx1E3jXjk8uKK8NMw9
94v7wzuzPKxIjGsKkiEO7b3yKXpZcStIrPmSrxAhHuL8y//6V3nWZ/uFrHXB6OZg
38b5oh08SZV0Zmz3+gezIZDN0g18QlfGdQHIEQVnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1OygH/2tKuhnXksYWMWEmCIWzQowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UzNmRiYzI1LTdmMzAtNDJjOS05NjU1LTEzYTRhMmNjNTgxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPwQEwDQYJKoZIhvcNAQELBQADggEBAAuwYiGF4iZ+FQ6xdr69eowNZotT
nVkGA/Edv4jkzaqepKla6KaYQxqgfTTGXS2HKNpNE3p/H0iHoTiJMecFAHsTBZ6v
6tidK40wSY6EJdwaWQYW5/jxwUXc0eqmJNELRqhk6H5mWU6Ke1AixBQGOci+hc+V
Gd1rJzLDeeUZCrijYOsFvD6VngQWrqw1eyv9YgjCSszCseTXxCN70iTo8hfvOSmA
2ccI9CNIJDXdkdMMV7zSGvG1TPYTiNRfCHY2zdmgCg5NhpW0m4cuaMUZBUs7aKbe
+J/kdD7VHL2BtR3oj6w56CT5tJyQCDk48O7vfvHOSKpSc1/yqaFnj52p4Fg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:35:03 2025 by rpki-client