Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
File:                     77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa (raw, json)
Hash identifier:          UCx2XHiOxULfiBIiQ0A8wZHauNx5ZNZYfseOOEn0apE=
Subject key identifier:   7E:B1:E3:2A:92:F0:BF:74:57:38:30:46:7A:F0:2C:49:72:6B:BB:14
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       5E3C610664C30CC353927F4E6560AD030F760DFB
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
Signing time:             Sat 18 Oct 2025 00:00:23 +0000
ROA not before:           Sat 18 Oct 2025 00:00:23 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:61:06:64:c3:0c:c3:53:92:7f:4e:65:60:ad:03:0f:76:0d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Oct 18 00:00:23 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=cf1f0c2274375af4027a6ef1811dc58c3f2ad4ff75887dd2f9e3de68415f2d58, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:9c:6a:18:28:ca:f2:03:f6:8c:ce:d4:85:
                    3d:0c:69:2b:a1:cf:7b:02:01:bf:b9:d2:d2:45:4e:
                    4b:b5:ff:76:9c:c1:00:c0:c9:77:76:ce:5f:4e:a6:
                    a7:1a:c8:d7:3d:e1:00:ed:d2:b5:d2:71:1f:c4:c6:
                    3e:9e:86:1b:4f:16:4f:c6:29:61:9d:82:87:7f:f1:
                    7f:d5:ab:44:b6:da:b0:f2:66:63:38:64:e6:40:5e:
                    81:af:13:e6:94:23:32:1c:08:2e:6f:63:21:a4:e6:
                    2e:3f:31:76:9b:99:f3:b7:b1:a0:94:9e:5b:7d:c2:
                    38:50:16:ec:4d:54:8d:6f:bb:34:82:ec:d4:42:ef:
                    51:f5:b0:89:a8:7b:9c:3d:75:d1:03:54:39:d1:a7:
                    8e:4b:cb:13:35:4b:3f:b5:4d:54:53:e3:9d:23:94:
                    b3:9b:66:e8:70:40:1f:41:ca:94:f3:53:38:f9:cd:
                    6a:ef:8d:b7:03:ee:25:62:7c:f5:f4:15:2f:20:8a:
                    d4:2f:1f:81:e8:a4:87:89:9f:67:5a:f7:29:cb:fa:
                    39:4d:40:3b:05:42:03:d7:2b:58:ba:1e:68:a3:7b:
                    ad:26:88:61:7f:9d:d1:bd:0c:b9:d4:6f:70:28:2d:
                    4b:42:46:4e:6f:c2:37:4f:d6:1b:68:61:bb:79:9c:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:E3:2A:92:F0:BF:74:57:38:30:46:7A:F0:2C:49:72:6B:BB:14
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:44:28:29:ed:a3:42:9c:b0:d9:ff:59:bd:48:13:32:5e:f4:
         68:8a:dc:1c:8d:f2:13:38:14:d9:9b:5a:8c:c9:c0:54:0a:e1:
         fb:c7:e0:d6:78:54:2d:9d:f9:ed:c5:e8:86:82:be:a8:13:a9:
         3b:70:fd:2d:c6:c4:6b:0c:e7:5a:5f:02:dd:7c:2b:ce:17:3b:
         54:d9:7d:c5:05:5d:bb:97:fe:98:12:a1:cb:cb:b3:49:89:ac:
         e6:fc:40:58:90:87:84:c2:c8:a4:16:f5:26:bf:b0:79:d9:eb:
         66:44:8d:9f:2b:3a:9e:40:7c:e3:df:fe:80:39:56:f5:18:2c:
         2c:f0:7b:d7:1c:82:cf:ab:2c:68:52:fb:16:db:9c:c9:8d:7d:
         66:77:fb:bd:54:f6:b1:17:7c:12:8d:0b:06:39:d4:9f:b7:83:
         f5:08:23:4a:de:1b:a6:dd:e8:59:4a:b1:ca:bc:b4:f4:a3:9b:
         65:f3:91:b7:67:81:5d:8a:64:79:fe:88:ba:d2:d8:c3:ad:92:
         d9:ae:4a:f0:7f:d5:96:68:7e:9c:56:93:7b:57:5f:f2:20:d0:
         36:50:e5:d3:0f:c3:45:f9:73:80:dc:c9:fd:d1:85:8c:48:22:
         ff:f5:af:f3:19:52:7f:c6:ec:5d:f8:93:42:c5:62:3e:78:46:
         01:d3:54:23
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXjxhBmTDDMNTkn9OZWCtAw92DfswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy
MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMDE4MDAwMDIzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZjFmMGMyMjc0Mzc1YWY0MDI3YTZlZjE4MTFkYzU4YzNm
MmFkNGZmNzU4ODdkZDJmOWUzZGU2ODQxNWYyZDU4MS0wKwYDVQQDEyQ3MWMzODc2
ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCp7pxqGCjK8gP2jM7UhT0MaSuhz3sCAb+50tJFTku1/3ac
wQDAyXd2zl9OpqcayNc94QDt0rXScR/Exj6ehhtPFk/GKWGdgod/8X/Vq0S22rDy
ZmM4ZOZAXoGvE+aUIzIcCC5vYyGk5i4/MXabmfO3saCUnlt9wjhQFuxNVI1vuzSC
7NRC71H1sImoe5w9ddEDVDnRp45LyxM1Sz+1TVRT450jlLObZuhwQB9BypTzUzj5
zWrvjbcD7iVifPX0FS8gitQvH4HopIeJn2da9ynL+jlNQDsFQgPXK1i6Hmije60m
iGF/ndG9DLnUb3AoLUtCRk5vwjdP1htoYbt5nP9vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfrHjKpLwv3RXODBGevAsSXJruxQwHwYDVR0jBBgwFoAU/iLg9yLMTwYM
WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y
MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3
ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4
NmYwYjE1OTRjLzc3NTg5YjFiLWZmOWEtNDJiMi1iZWM3LWExNjUzZjA4Y2I0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm
LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS4qaAwDQYJKoZIhvcNAQELBQADggEBAIBEKCnto0KcsNn/Wb1IEzJe9GiK
3ByN8hM4FNmbWozJwFQK4fvH4NZ4VC2d+e3F6IaCvqgTqTtw/S3GxGsM51pfAt18
K84XO1TZfcUFXbuX/pgSocvLs0mJrOb8QFiQh4TCyKQW9Sa/sHnZ62ZEjZ8rOp5A
fOPf/oA5VvUYLCzwe9ccgs+rLGhS+xbbnMmNfWZ3+71U9rEXfBKNCwY51J+3g/UI
I0reG6bd6FlKscq8tPSjm2XzkbdngV2KZHn+iLrS2MOtktmuSvB/1ZZofpxWk3tX
X/Ig0DZQ5dMPw0X5c4Dcyf3RhYxIIv/1r/MZUn/G7F34k0LFYj54RgHTVCM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:50 2025 by rpki-client