Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa
File:                     fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa (raw, json)
Hash identifier:          pHL8xHaIm7QZBG7YpbVRklj69cdf3DZS7uzHcBscY24=
Subject key identifier:   26:A1:97:88:F7:63:68:37:0F:67:37:E0:00:B7:E8:00:F0:80:40:74
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4CD8AD4910636174D393AD422FEA8DE617A989B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa
Signing time:             Mon 16 Jun 2025 17:31:15 +0000
ROA not before:           Mon 16 Jun 2025 17:31:15 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d8:ad:49:10:63:61:74:d3:93:ad:42:2f:ea:8d:e6:17:a9:89:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jun 16 17:31:15 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=2cbc9144ebb11752eeedfee9f48b34995b48f4c85b6abd74430868ca228797b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:bd:6a:66:63:bf:c7:ee:8c:78:8e:8c:bc:
                    e9:a2:49:18:8c:77:7a:bc:10:13:01:06:88:0e:2d:
                    f1:08:c3:73:98:4f:7f:8a:d8:d7:57:19:fd:45:a6:
                    32:b6:40:71:4e:e9:c9:5f:b0:ec:1f:82:c0:46:e9:
                    8a:1d:37:e7:f3:03:55:6c:ea:94:1c:b7:e7:01:c1:
                    43:84:1e:7a:6d:65:ec:83:77:4d:64:b0:07:40:aa:
                    5e:83:95:20:c2:de:5a:98:1d:33:40:4b:f6:50:a3:
                    a4:4d:48:40:a2:21:76:35:26:df:e5:3f:3f:40:cd:
                    77:6e:46:67:62:f3:4a:0e:e6:6a:34:de:3d:2c:a9:
                    be:39:15:cd:2d:4e:70:04:b8:b2:01:58:34:ea:f1:
                    59:45:e7:7a:6a:39:16:58:c8:98:09:15:2c:cd:f0:
                    2a:22:1e:e2:8d:37:00:00:50:67:90:8b:8f:2f:4d:
                    01:86:13:66:ad:16:49:2c:56:3d:c4:00:85:1e:2e:
                    78:1d:17:10:99:54:05:e9:c5:a0:fa:44:00:a8:a8:
                    fb:12:71:ac:91:57:b0:bc:33:e3:c4:38:de:fe:e8:
                    06:44:ef:f6:a7:8c:1a:19:93:ea:cb:ba:5a:e0:46:
                    2f:1e:6f:be:ae:f9:ff:57:70:c2:89:96:54:4c:1c:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:97:88:F7:63:68:37:0F:67:37:E0:00:B7:E8:00:F0:80:40:74
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcaa19e3-0f7e-492b-b3a8-786d208b56cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:8e:28:93:0c:22:ee:0e:61:35:6f:ae:f9:b3:ab:f9:bc:
         39:9a:e8:69:dd:0d:49:ba:89:4b:bc:12:69:2b:10:97:de:bb:
         7e:fd:c5:44:13:e5:d2:bb:df:5e:a9:fa:f2:6b:9c:0d:87:22:
         51:91:8d:3a:97:eb:45:a9:dc:73:3c:d9:01:a0:43:90:59:8b:
         38:a0:1d:a4:94:00:02:94:f6:1e:84:07:f2:7e:36:88:54:a9:
         18:4f:a0:ca:26:93:9c:fc:df:f5:d6:b8:1c:fe:1f:d3:ed:f8:
         64:82:82:bf:dc:4b:1d:fd:60:0e:e0:24:ea:22:1b:f4:c7:ba:
         68:34:dc:dc:a6:3b:5f:56:c4:c1:95:9c:f8:ac:77:f2:5d:40:
         67:08:96:91:fb:62:de:7f:01:fc:79:45:ce:db:ce:1f:0d:70:
         3f:77:c9:5f:f5:c2:bd:8d:00:e3:6a:83:80:4c:25:b1:ce:af:
         86:e8:0c:8c:17:2d:c9:92:96:a1:9b:54:4b:77:88:43:7f:46:
         0c:28:44:f5:64:3b:02:c1:c5:39:9f:8c:77:58:9e:18:df:ef:
         51:97:f7:87:cc:fa:d4:cf:72:e3:6a:d3:0c:d8:2d:93:c8:97:
         11:42:c5:bf:bd:43:b9:90:79:3a:e8:f4:97:2e:1d:31:bc:cb:
         e5:80:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:33:02 2025 by rpki-client