Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
File:                     4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa (raw, json)
Hash identifier:          JxQv8/uZM6fJWpI9vWpjZSZdQG0M+A84Gf8x1yhjtYQ=
Subject key identifier:   95:81:49:37:B8:EA:D5:13:07:FD:57:C2:25:5F:C1:F8:C4:71:2D:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5CEA7BBF99ED69BC17A3F6E9689911EE18876BC9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
Signing time:             Sat 23 Aug 2025 00:51:31 +0000
ROA not before:           Sat 23 Aug 2025 00:51:31 +0000
ROA not after:            Sat 27 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.157.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ea:7b:bf:99:ed:69:bc:17:a3:f6:e9:68:99:11:ee:18:87:6b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 23 00:51:31 2025 GMT
            Not After : Sep 27 23:59:59 2025 GMT
        Subject: serialNumber=228142c5d053f5f0f0acd11f5007f2fd91e710b1279529826040b2d57e8f4e42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:9e:3a:cc:02:2b:01:61:12:b9:93:bd:46:
                    56:cc:b2:b8:b1:fb:e2:51:a3:da:70:91:95:08:7d:
                    3e:6c:56:5f:51:c1:37:0f:2d:eb:66:b0:57:ff:1a:
                    82:21:1d:65:ef:41:74:3a:e8:e5:23:05:3f:c1:eb:
                    0d:ce:7d:81:02:bd:89:45:55:a7:14:25:87:f4:6c:
                    d3:57:16:0b:f3:04:57:80:41:88:b2:39:e3:ae:20:
                    5b:d6:3c:55:de:53:5c:29:d1:6b:6d:28:df:6f:83:
                    16:88:da:02:f2:f9:56:dd:9a:b2:74:43:25:71:64:
                    aa:88:e5:8e:41:e2:96:31:70:35:46:19:5e:e8:8d:
                    ae:2f:b5:9e:ed:52:db:c2:7a:0a:1d:4c:82:a0:f2:
                    31:6f:ef:13:f0:47:90:7c:3e:6e:b0:89:19:09:b9:
                    9c:fa:a2:fe:85:be:6a:ff:0a:2b:28:a9:de:4e:ac:
                    a7:d9:44:a5:ee:29:71:93:48:af:b7:d9:25:99:38:
                    7c:da:6e:f2:95:07:8f:ef:c8:f0:04:0e:a1:18:c7:
                    71:d0:bc:53:21:1e:8b:87:92:5b:64:65:5c:3f:65:
                    ab:b2:4b:53:b0:c6:f3:59:ec:43:43:a8:86:e4:00:
                    08:96:bc:e5:d2:fe:a5:bc:4c:5f:29:b2:e9:a4:52:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:49:37:B8:EA:D5:13:07:FD:57:C2:25:5F:C1:F8:C4:71:2D:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.157.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:18:45:76:1b:04:55:15:d0:81:6f:c5:49:0c:d8:92:1b:
         9e:4a:d1:5f:07:cc:be:48:09:21:3a:94:cd:de:53:7f:1d:ba:
         ee:63:b5:81:3c:52:71:38:bf:fb:3b:95:e2:5d:0c:ec:48:d9:
         9d:49:3c:3a:c4:57:56:39:dd:03:07:8c:be:ce:79:f3:49:b5:
         69:47:b4:ee:e8:68:89:b8:b2:e6:75:ed:3a:27:e3:cc:63:9f:
         e7:df:61:6a:90:12:49:0d:cd:ce:a9:d4:12:dd:1d:be:66:a0:
         29:9e:78:38:27:5b:74:ce:71:fe:e1:9d:99:7e:aa:96:2f:1f:
         3f:0d:e7:3d:0e:d9:0e:f3:ef:8d:f0:78:f9:8a:ee:95:c3:80:
         a2:7e:32:a1:f3:03:8b:dd:4f:53:ed:d4:30:3a:0c:59:c8:b1:
         6a:b0:eb:2c:9f:d0:7d:47:2a:f7:58:0f:6f:fe:93:d5:81:e6:
         47:bf:39:34:e1:b4:d8:92:e9:c4:7a:4d:52:bf:d2:e4:47:0b:
         0f:84:e1:99:0f:6c:43:85:ee:a3:7a:13:22:5f:d0:fa:91:e5:
         33:d6:60:89:51:e8:94:0d:75:37:00:f6:73:05:26:48:00:6a:
         d1:ef:1c:f2:49:03:43:88:06:4a:a9:09:0d:78:e0:82:17:45:
         34:7c:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:41 2025 by rpki-client