Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e479fc7-10ec-4bb1-ab9b-aa66f182d779.roa
File:                     3e479fc7-10ec-4bb1-ab9b-aa66f182d779.roa (raw, json)
Hash identifier:          r632cEKQAmabtmthqnyeLkhRAMUyl5wA6VUjyIuIqt8=
Subject key identifier:   BC:70:7F:D7:B1:A5:B5:41:85:D0:5A:C5:C6:1C:F2:D6:64:52:0F:54
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2A6774DD447E3142DCB5C2D12E00D5DB4667A7A9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e479fc7-10ec-4bb1-ab9b-aa66f182d779.roa
Signing time:             Mon 16 Jun 2025 16:10:15 +0000
ROA not before:           Mon 16 Jun 2025 16:10:15 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:74:dd:44:7e:31:42:dc:b5:c2:d1:2e:00:d5:db:46:67:a7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 16:10:15 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=fa27ff71b764ace1751b2c4210fe6c385132bb50c74a5e92e12c7f4309cfd214, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:d7:ac:e0:27:28:9b:65:ea:ad:a0:4d:44:
                    48:66:bf:76:a6:2a:49:09:72:1a:10:b2:b9:22:48:
                    7a:66:38:13:55:45:e6:56:5c:1a:ce:63:a7:28:24:
                    73:ea:ab:c5:9c:10:96:6d:a9:f7:e5:b0:00:a0:4d:
                    1e:03:ba:87:11:56:aa:da:90:67:82:8b:a3:20:f5:
                    51:17:47:99:61:9c:ab:d2:4a:ae:21:52:72:87:20:
                    89:f8:07:98:a6:bc:fc:32:1e:c4:06:ba:99:4f:70:
                    be:07:d5:3e:9b:3b:6c:96:05:61:65:1a:67:95:57:
                    da:a2:98:b6:42:d0:38:ef:e9:90:ab:32:20:3c:45:
                    1d:bc:75:26:35:27:84:bd:18:d5:1c:13:ed:dd:9c:
                    77:a6:bf:7f:bc:16:2d:b5:65:1d:9c:02:f9:be:c8:
                    40:77:65:5f:37:b7:6d:e9:5c:f6:5b:a8:ca:7a:27:
                    77:91:55:58:46:9c:5e:22:49:dc:28:c5:f6:26:6a:
                    68:f1:54:17:ad:87:50:f4:7e:91:ca:90:e7:5b:22:
                    6e:eb:d0:3a:0e:8d:4a:d1:e0:e5:21:1f:e0:4b:0a:
                    b4:03:cb:be:04:30:c0:dc:28:9f:dc:23:5f:b9:7d:
                    32:02:6f:85:f6:1e:75:b5:96:f6:a6:0d:8b:a2:ac:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:7F:D7:B1:A5:B5:41:85:D0:5A:C5:C6:1C:F2:D6:64:52:0F:54
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e479fc7-10ec-4bb1-ab9b-aa66f182d779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:02:a1:fd:aa:67:2b:04:27:eb:3d:a2:74:be:01:d3:27:78:
         a8:89:a5:da:82:98:fe:d5:11:76:e8:95:1f:9f:f8:21:59:61:
         70:62:18:8d:3d:be:52:c4:cd:a3:6b:80:89:d2:bf:97:8b:09:
         40:99:c8:9a:b5:c5:eb:59:f3:12:47:06:39:70:d9:a2:3f:00:
         82:c7:e0:b1:f5:d0:de:ae:a1:48:cf:e8:3d:19:14:6a:57:48:
         46:bc:9b:6b:b1:81:80:08:c4:ba:43:c6:cd:25:ef:06:7b:e2:
         fe:a1:05:40:dc:38:55:aa:7a:8a:75:a7:ca:e7:58:e7:61:03:
         6e:82:b5:01:e8:a5:d6:65:c9:60:f0:a3:87:9a:58:6b:46:24:
         ed:49:d4:57:70:3e:88:ca:5e:db:83:4e:74:43:9e:10:97:28:
         36:75:73:76:b1:b1:ff:62:67:c9:cb:47:0e:09:19:e8:0f:b2:
         0f:9a:a9:c8:a5:cc:c4:84:68:96:25:99:bf:e4:96:08:5b:53:
         20:6a:26:5a:83:a2:0d:c9:c2:25:41:68:24:c6:15:7d:b5:bf:
         83:c6:25:9e:90:21:73:10:28:62:c3:50:02:f3:96:06:57:0e:
         e2:f6:26:78:5f:98:52:27:0b:28:44:eb:4b:8e:ff:8a:80:bf:
         11:08:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:57:57 2025 by rpki-client