Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b723fff-1cab-462c-9ad3-dbb6d950a60f.roa
File:                     0b723fff-1cab-462c-9ad3-dbb6d950a60f.roa (raw, json)
Hash identifier:          Xx1j4HkHicpVKzW0cwdxIEw+bQQ00ROiw8lN0KUoW3c=
Subject key identifier:   EB:F0:11:F9:EB:F2:06:38:08:7B:3F:D2:5F:3D:3B:B0:B3:81:28:30
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E7636142D0E95714E4033EC558D9257F1D2697D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b723fff-1cab-462c-9ad3-dbb6d950a60f.roa
Signing time:             Sat 18 Oct 2025 05:42:23 +0000
ROA not before:           Sat 18 Oct 2025 05:42:23 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.243.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:76:36:14:2d:0e:95:71:4e:40:33:ec:55:8d:92:57:f1:d2:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 05:42:23 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=87973ac4dcdf4029bd996e9a86ffece63335090ba194804232b7971a8413b435, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:9e:9c:dc:73:d6:a1:8f:ad:f7:b3:8f:61:
                    cb:80:9d:09:7c:24:9a:01:e2:6b:30:dd:e0:4e:6f:
                    f6:74:85:05:63:48:24:8e:bb:b9:98:b1:f3:b1:9c:
                    9b:e5:e4:6e:57:f1:a6:89:95:79:a3:aa:d0:5f:c6:
                    a6:9d:ed:60:dd:e7:5e:bc:80:3e:17:d1:80:ea:b9:
                    3b:7a:12:f7:5c:35:83:8d:df:f3:b2:7d:48:a4:51:
                    82:18:fd:4c:c4:d9:fc:7b:1c:f8:49:11:ed:67:25:
                    24:30:e8:3f:3c:6e:2c:c9:c9:01:12:41:e6:22:8d:
                    f4:c0:3c:cf:6d:e3:7a:f9:d1:87:6a:1e:66:2b:4d:
                    0b:2f:57:fa:08:64:a3:37:bf:8d:2d:8c:11:4d:81:
                    ca:be:f5:36:cd:c3:f7:b8:7f:4a:44:6f:96:cc:fd:
                    f4:03:a2:92:8d:ed:17:45:f3:e6:8c:89:8e:d4:d7:
                    b3:fa:5a:35:ce:ca:58:d0:29:5d:73:74:a8:32:1f:
                    0c:0e:a2:41:85:32:95:48:03:c8:27:96:22:06:c1:
                    d0:77:85:8a:b1:67:69:31:4d:55:ac:c1:01:e7:08:
                    f9:30:4c:92:01:fa:2b:35:9a:3f:39:3a:7a:4f:76:
                    f0:c6:3b:ec:dd:da:c3:14:39:ca:2a:63:d5:5d:8d:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:11:F9:EB:F2:06:38:08:7B:3F:D2:5F:3D:3B:B0:B3:81:28:30
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b723fff-1cab-462c-9ad3-dbb6d950a60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.243.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:03:1d:e0:8e:14:51:0e:92:a7:1d:18:9c:34:91:40:d6:22:
         05:cd:81:2a:3a:bb:73:1c:fa:0c:c4:8e:d7:54:ea:c2:93:6a:
         ad:ec:46:cf:71:36:fa:8e:7a:4e:bb:95:9c:e2:18:2f:2a:b9:
         92:f3:63:aa:cd:16:a9:42:dd:bc:79:83:82:03:6e:41:44:0b:
         e2:74:fc:bc:ba:6f:6e:2e:eb:0e:25:ef:88:17:aa:a0:18:d0:
         c6:9f:de:a4:6d:fd:cf:90:16:39:a0:f8:5e:07:e3:c6:01:ef:
         20:6a:a7:db:3a:50:10:b4:fb:90:c3:01:d5:1c:dc:1f:33:58:
         15:26:7e:2c:c4:15:99:90:33:7f:4d:c0:98:b8:59:5f:e9:05:
         d1:bc:48:34:b0:41:e3:b6:10:ce:21:93:fe:83:7f:45:47:cd:
         af:e1:ba:21:c7:3a:67:23:3d:81:2d:a3:34:2d:b3:dc:f4:58:
         04:e0:aa:f8:79:66:2e:1e:68:c0:8c:85:37:f7:5c:6d:5d:11:
         19:b6:ae:0c:b6:72:17:e9:b0:85:66:f8:20:c8:19:65:d1:c3:
         f7:ed:ab:a8:35:3a:cf:47:86:48:62:21:fe:fb:bf:45:7a:e2:
         b7:d9:ed:4a:e4:e6:b2:d3:f1:5d:65:c0:6a:fb:5a:e4:6c:52:
         62:75:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:56 2025 by rpki-client