Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa
File:                     e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa (raw, json)
Hash identifier:          XVvX6JQJPnFP97itlq50NBjGCLei+8OC0rzTzwiwjEU=
Subject key identifier:   7B:D0:05:82:DA:C8:1C:80:FA:62:EA:27:30:8A:3E:46:C2:CD:79:BE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51564006E6F3321431CC105DD40BF9626227DE63
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa
Signing time:             Wed 16 Apr 2025 00:20:17 +0000
ROA not before:           Wed 16 Apr 2025 00:20:17 +0000
ROA not after:            Wed 21 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:56:40:06:e6:f3:32:14:31:cc:10:5d:d4:0b:f9:62:62:27:de:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 16 00:20:17 2025 GMT
            Not After : May 21 23:59:59 2025 GMT
        Subject: serialNumber=3d2c2e09135993b2e945bed33906593427d4f269e5b430674d36ae001fa0142c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:9f:36:13:61:ff:71:a2:cf:a3:c2:e6:4c:
                    de:07:e1:95:a0:2b:f6:75:14:3c:f4:10:14:83:4e:
                    d7:2c:2a:b2:c5:a4:8f:c7:53:de:71:3a:a5:ac:f1:
                    52:9b:48:d6:0c:8a:14:c8:08:3b:81:58:90:06:27:
                    fe:87:96:22:80:b0:c4:a0:cf:17:79:e7:5c:e9:9c:
                    07:4e:ab:b0:13:18:b1:3a:c4:05:15:92:ea:0f:1e:
                    61:da:bd:78:7e:bc:95:5b:75:79:ac:4c:66:1c:a8:
                    01:a3:8a:5c:b2:60:89:59:db:19:f6:c3:84:53:f5:
                    6b:a1:ad:88:6b:2e:e8:ad:80:17:ed:b7:57:38:12:
                    3f:cb:fb:09:90:ed:bd:45:29:8b:72:01:cf:e3:37:
                    4f:4c:36:4e:8e:c7:01:65:32:f7:3f:9c:aa:03:66:
                    39:fa:db:6a:37:1f:89:5a:61:38:1a:17:33:ec:e6:
                    87:6f:16:f8:6b:18:b5:df:00:10:51:1d:09:87:28:
                    40:73:af:5f:ea:9a:eb:0c:02:a0:90:7f:e5:1f:69:
                    1a:c7:ab:4f:6c:9b:7d:37:c2:e9:83:98:74:cd:75:
                    5d:a9:93:55:1c:49:be:20:4b:ef:8b:eb:62:a5:8b:
                    66:8e:71:57:4f:14:21:b3:49:5e:6a:24:23:3f:c5:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D0:05:82:DA:C8:1C:80:FA:62:EA:27:30:8A:3E:46:C2:CD:79:BE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:cc:b0:8e:37:ea:83:9f:79:0c:6e:01:68:84:bc:76:e4:
         8b:52:e6:f6:11:70:4e:89:d6:c8:bf:06:ee:dd:cc:2b:13:29:
         01:a2:9d:d2:c9:01:35:d2:b9:67:ec:94:f0:2a:06:de:9c:f0:
         26:63:a6:7a:f5:7a:c1:7a:ca:0a:88:de:9f:69:18:7b:c5:11:
         a0:b9:fd:03:32:3b:5c:6c:57:65:c5:d7:64:2b:c1:48:e8:a7:
         16:fe:61:49:e7:10:9c:8f:c8:c0:1e:e4:7f:1e:6d:14:49:02:
         4f:72:93:a2:bf:e9:e1:47:71:cb:33:b1:31:e3:2d:5e:27:7c:
         d9:b5:7a:bf:39:2b:9a:c9:86:a2:b0:05:1f:31:0c:7a:10:6d:
         45:4b:df:0a:a6:a9:c7:c0:f6:c9:cb:4d:8a:eb:6b:53:1a:37:
         8c:5d:8a:97:70:d2:ac:dc:f1:fa:58:76:b0:51:c1:6c:e8:5d:
         cd:45:32:2d:6f:f7:f9:62:96:18:9f:73:2b:e6:8d:9f:3b:de:
         5a:98:c0:e0:cc:05:10:8d:0e:30:47:88:53:f3:1a:f3:40:38:
         9a:da:13:44:bc:83:0c:f9:65:ef:28:69:35:3f:98:10:fd:af:
         7c:d5:06:d6:c1:31:e5:d8:6e:20:dd:bd:b0:85:8e:8e:ae:b3:
         92:b9:84:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:03 2025 by rpki-client