Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa
File:                     2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa (raw, json)
Hash identifier:          zt2Hyf3ZW/eyFkGn7j3esEG0l0rdjY+pK5ozii3SHRg=
Subject key identifier:   33:4E:B8:F5:48:72:01:A0:1D:69:64:75:62:18:E1:7C:FE:66:D1:B3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3FE62757E104EDF991695E300FC8DCDEDED477FF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa
Signing time:             Mon 16 Jun 2025 16:10:57 +0000
ROA not before:           Mon 16 Jun 2025 16:10:57 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e6:27:57:e1:04:ed:f9:91:69:5e:30:0f:c8:dc:de:de:d4:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 16:10:57 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=608bb8292ceea08f7f0096f74f2b3b4e2563aac40ed22133fed90f48b079440a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:0c:22:af:7f:22:cf:3f:dd:f1:f0:66:11:
                    0b:af:e7:d6:6d:01:78:33:c4:96:ca:a4:f8:f5:c8:
                    71:0a:0d:22:ca:ff:18:25:35:cb:25:4a:f8:96:19:
                    b1:ff:96:cd:71:30:f4:56:ef:ba:53:88:91:ec:56:
                    3a:81:b8:91:fb:46:6c:a7:51:99:47:26:a5:6d:10:
                    3f:5f:b5:35:9c:29:1e:73:ad:cb:d3:49:bc:1e:e1:
                    db:23:bc:32:2a:f5:f5:3f:e5:6c:14:5a:91:32:72:
                    3e:3c:cf:a7:e8:bc:82:42:a2:e0:11:b8:f1:81:29:
                    71:1b:63:6e:e7:20:13:66:15:03:4b:20:b3:1c:d2:
                    8b:1a:b1:70:3b:e9:44:a2:e3:2d:9b:70:a2:00:eb:
                    ea:79:0c:8e:79:8d:b6:63:68:16:fd:ef:22:9c:d4:
                    f0:3f:02:76:56:7c:c2:53:d3:a3:72:e3:49:de:98:
                    b3:4a:cf:88:37:bb:8c:21:c4:de:05:a0:92:0c:ae:
                    bc:5e:56:5f:c0:44:fd:4c:7e:a1:f3:18:2e:40:26:
                    2f:c8:22:bd:8b:34:12:5c:96:cf:cc:70:1b:c6:b3:
                    2d:96:0e:ea:50:d6:8d:d5:e0:9b:b3:61:76:ed:af:
                    81:e4:4b:6b:78:34:90:8a:a9:8f:73:80:0b:d2:d5:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4E:B8:F5:48:72:01:A0:1D:69:64:75:62:18:E1:7C:FE:66:D1:B3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c7618fa-8c2c-44d2-a193-ec13ad938a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:f1:38:f2:f6:e5:7e:34:23:d8:8b:c2:95:36:04:0d:9a:
         26:99:cc:31:03:bc:9f:0f:3a:47:46:f9:9a:b8:e6:3c:dc:db:
         8a:3d:ee:1c:c4:2f:40:86:a1:df:1e:19:83:e6:24:a1:a1:93:
         81:2d:84:9a:b8:9e:dd:62:96:ca:12:9d:f4:39:e3:64:43:ec:
         2e:81:81:11:d1:fe:f6:f8:36:0f:4d:62:9a:e2:9d:44:1e:fb:
         35:05:97:40:ba:b1:a5:ee:ef:23:8c:8f:64:1c:91:81:d8:4d:
         9c:fc:99:28:7b:a6:0c:fb:78:ee:74:d9:15:6c:9d:98:ea:e0:
         63:e0:e0:4c:0b:be:3b:f8:50:d9:42:68:bf:2b:34:66:e1:63:
         25:a7:0c:9d:dc:61:75:0c:9d:82:eb:a7:1a:1d:24:67:60:f8:
         65:8a:81:41:52:31:db:56:a7:79:16:e5:52:55:03:c7:6a:95:
         14:c4:be:69:27:d9:ca:4b:f5:2c:66:41:df:92:21:9c:be:19:
         8b:c2:72:4d:e0:47:56:d7:de:19:c5:57:32:9c:34:0f:16:7f:
         30:30:57:66:d8:fb:5f:1b:a7:ec:3c:08:3a:76:ac:97:01:b7:
         ca:c3:d0:aa:76:17:2c:35:eb:45:06:44:60:aa:8e:bc:a7:4b:
         da:8f:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:39:29 2025 by rpki-client