Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa
File:                     ebad4984-8328-4120-af6c-4583760d0aca.roa (raw, json)
Hash identifier:          aE3zYLZhu7jBZk73ZaNxQvKWYDf/+8Pa4dEXXjjKgRs=
Subject key identifier:   AC:88:F2:C5:7F:46:D1:F9:82:C8:53:39:6F:3C:AA:65:05:29:D4:3A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       36930EF2554D1ADFA34597EAAF3D42AD27C57081
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa
Signing time:             Fri 11 Jul 2025 15:41:12 +0000
ROA not before:           Fri 11 Jul 2025 15:41:12 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.184.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:93:0e:f2:55:4d:1a:df:a3:45:97:ea:af:3d:42:ad:27:c5:70:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 11 15:41:12 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=627dca4035ce107a933c53b0c143f764c09aba73538438273a245bb588d06272, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:77:c5:cc:b0:47:73:db:de:eb:e6:99:d5:
                    a1:b0:cc:36:9d:51:3e:7c:1d:e5:aa:0e:c2:86:c9:
                    70:d4:9f:43:7b:f4:0b:f1:e2:bd:b5:02:e0:23:b7:
                    17:2d:36:ae:86:22:47:7a:43:25:ce:3f:9a:11:98:
                    6e:9a:f3:f3:33:65:4c:91:66:b3:30:91:29:26:c2:
                    9a:ad:07:e0:e8:35:b9:93:f8:3f:02:e7:7c:cf:b9:
                    3e:3a:d6:af:33:f3:6d:12:70:62:d6:a8:36:64:db:
                    1f:58:94:ce:af:5c:31:4a:f8:ba:12:d9:47:c1:9b:
                    3b:b6:e1:c2:0a:0f:d5:ab:8f:fa:0e:6e:b4:fa:2e:
                    82:85:bf:08:3e:9b:51:81:a9:02:1c:21:2f:0c:f3:
                    13:6d:b4:8f:dc:2e:db:53:7e:fc:b4:1e:57:f1:8c:
                    6a:80:f4:13:3f:c3:a8:7f:94:83:7e:30:1a:a1:34:
                    71:ea:c6:db:f8:ca:6e:89:b9:e8:92:ba:fd:de:e4:
                    91:ca:26:8c:07:63:f6:ec:a1:ae:70:92:72:40:9f:
                    81:19:38:60:af:c2:94:1d:2d:88:45:26:f7:6e:21:
                    a6:86:5c:e4:b0:df:9b:99:9f:cf:55:f1:e3:5e:10:
                    42:1e:6a:73:9f:27:f0:6e:3b:a5:61:ae:a0:dc:65:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:88:F2:C5:7F:46:D1:F9:82:C8:53:39:6F:3C:AA:65:05:29:D4:3A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:84:f4:0a:81:17:40:09:c6:47:e2:b6:02:96:98:76:a5:
         ec:4d:bd:67:46:55:09:7f:a6:62:40:67:29:28:6a:ea:33:89:
         de:3a:d7:59:2e:78:54:06:8a:0c:08:b1:c3:19:77:01:f7:af:
         e8:97:0e:22:a8:16:9f:ff:06:4a:85:06:96:75:e6:28:61:47:
         47:a2:53:5a:56:fd:35:de:5b:a7:1d:fc:47:6a:f8:36:0c:34:
         49:3c:46:b2:af:b9:0e:06:82:5a:1e:d8:06:89:d2:5b:38:d8:
         1d:4a:c4:e4:4a:31:a1:80:c3:19:6c:f7:16:8e:4e:3c:83:ab:
         be:ff:d8:64:d2:62:56:18:f4:ba:f3:5e:52:0d:81:ee:9e:f7:
         3d:12:cb:79:c4:53:1f:04:2a:00:ea:1d:41:0c:3d:4e:77:c4:
         fe:8c:0d:cc:2e:7a:f8:48:f2:dd:27:ba:10:b6:fc:16:36:28:
         de:7f:d1:cf:12:db:1b:1c:6f:ff:9c:f1:f1:a3:09:f3:28:9c:
         7b:44:97:ac:63:88:f5:89:73:df:e9:32:9b:f7:61:e8:3d:52:
         da:ae:5f:b3:27:8f:d0:b8:34:15:36:42:14:ce:0c:6b:f1:9a:
         b8:ce:13:da:67:b9:d3:fc:9e:9f:3b:a9:f8:6b:e5:16:48:6d:
         e2:68:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:39:32 2025 by rpki-client