Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f274598b-32df-4ac0-9d83-d33a92fe3d34.roa
File:                     f274598b-32df-4ac0-9d83-d33a92fe3d34.roa (raw, json)
Hash identifier:          zqelaRU0FEOImzjMtSSEoNHhLVFUEvxAp11J8eF92t8=
Subject key identifier:   BD:AC:E8:0A:B2:F6:9E:C6:1E:75:30:E4:5F:23:C2:C4:A0:E7:97:63
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       020122EEE7B36BE6567AA92040D3117F82792B73
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f274598b-32df-4ac0-9d83-d33a92fe3d34.roa
Signing time:             Tue 20 May 2025 15:41:29 +0000
ROA not before:           Tue 20 May 2025 15:41:29 +0000
ROA not after:            Tue 24 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        146.78.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:01:22:ee:e7:b3:6b:e6:56:7a:a9:20:40:d3:11:7f:82:79:2b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 20 15:41:29 2025 GMT
            Not After : Jun 24 23:59:59 2025 GMT
        Subject: serialNumber=1000768a340b2cb66c16a8fa9d9ae7b39dab4ed059916c0921ee25b69c477a22, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:66:9e:b7:cb:d7:70:ed:4f:25:87:0d:50:
                    c5:ad:11:b7:c0:70:f8:5e:c9:09:71:f1:17:84:5e:
                    9c:0e:c2:14:5d:6c:8f:8d:f2:19:53:a2:7e:a0:4a:
                    fe:a7:c4:91:1d:95:08:be:4c:89:46:ba:32:5a:5e:
                    d3:83:77:57:27:69:45:bd:a8:8c:2d:c2:30:35:1e:
                    84:3e:ad:02:12:db:07:da:87:5d:85:57:2a:ff:48:
                    c8:1f:b6:b1:ee:42:dc:0e:73:c2:87:0f:52:d9:b5:
                    1f:34:43:ac:48:7a:f2:0a:f5:59:40:b6:6f:cc:12:
                    06:8d:d4:5e:25:78:5d:e3:e2:81:b9:d2:25:1d:0d:
                    2c:ed:60:bc:e8:61:0b:fa:8d:0f:5a:c4:1b:c3:84:
                    f2:6b:db:8e:24:b1:c7:e7:cf:aa:de:c0:7f:c0:0c:
                    02:e9:dd:6e:12:8f:1c:17:30:0e:ff:7e:56:76:28:
                    e2:af:3f:f9:10:3d:e6:1a:c9:1e:51:67:86:03:5d:
                    9d:4d:ab:21:29:77:b3:d0:3f:3a:6f:95:1f:54:bd:
                    f7:6a:9a:23:78:90:fd:6a:5a:9c:1c:a0:c6:75:7d:
                    73:fb:7a:cb:1b:18:51:db:e6:2e:07:83:df:3f:6f:
                    b0:45:cb:c6:a4:9d:2c:bd:ae:91:57:5c:ab:fd:88:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:E8:0A:B2:F6:9E:C6:1E:75:30:E4:5F:23:C2:C4:A0:E7:97:63
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f274598b-32df-4ac0-9d83-d33a92fe3d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:18:ba:94:a9:94:cf:9f:92:52:7f:40:be:dc:a9:85:88:
         63:43:fe:d2:d5:6a:35:37:40:3b:7f:fa:33:53:82:5c:cb:8f:
         5c:36:84:cc:f3:0c:a5:13:76:77:77:da:e4:59:44:c5:52:19:
         b9:0f:a9:8c:c9:0b:13:9d:f3:9e:4f:85:a3:1b:f8:89:4b:b8:
         71:b6:68:54:bd:3d:b7:86:7c:4b:d2:bb:06:c3:f7:85:0f:ab:
         6f:b7:06:9f:0e:1c:58:a0:94:56:6c:d0:e1:60:8a:84:ce:02:
         9d:8e:d7:6b:39:8c:9e:bb:a1:23:e8:8f:c9:98:72:ba:f3:a5:
         a7:13:ec:55:18:40:91:d4:19:4b:33:a5:1f:94:48:9c:dd:56:
         ab:d5:a5:93:8c:67:77:e5:37:bc:7a:dc:61:4f:99:41:d5:cb:
         e5:e0:c8:8b:fe:49:08:0c:8e:82:1c:4e:cc:e7:4f:62:75:5c:
         27:91:be:3a:5c:dc:1b:6b:55:74:b3:36:f7:18:18:b1:e6:3c:
         9e:72:f3:c8:f6:7a:a8:75:c7:bb:dc:80:a7:bd:bd:43:5d:97:
         76:68:85:80:29:c8:a3:a9:26:2c:a5:ee:83:e7:2e:7d:a7:a0:
         cc:f3:d5:d8:c3:60:f8:54:57:80:01:a8:67:e4:46:44:69:79:
         ed:01:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:54:58 2025 by rpki-client