Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cdb30ec-0e05-451a-b452-fd3fb9eacd5a.roa
File:                     0cdb30ec-0e05-451a-b452-fd3fb9eacd5a.roa (raw, json)
Hash identifier:          BdlhQfE6gCYdtXico4y5VjWTT22/kmzbSik1gCOQ5C4=
Subject key identifier:   EC:19:B7:07:F7:9C:A6:34:9E:54:12:3C:B6:55:C6:C2:DE:A8:E7:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0A41D7BB84B1F0CD2065950CAF2585064F0645B4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cdb30ec-0e05-451a-b452-fd3fb9eacd5a.roa
Signing time:             Sun 19 Oct 2025 09:50:05 +0000
ROA not before:           Sun 19 Oct 2025 09:50:05 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:41:d7:bb:84:b1:f0:cd:20:65:95:0c:af:25:85:06:4f:06:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 09:50:05 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=768eb62ca21595a702763762c3bb32caf8e33e79005f528550e1ec5f950768bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:d5:90:d7:d2:2b:30:ea:aa:51:8b:65:40:
                    01:d6:63:d0:bf:83:40:bf:42:9d:ec:62:f3:48:58:
                    16:4f:78:d3:56:45:68:67:1c:f1:41:7e:c7:67:ab:
                    0d:54:41:0a:c7:a4:ca:13:c3:66:30:31:7c:cf:e0:
                    fb:c2:c5:a0:c2:83:06:78:6f:73:c7:95:4a:2a:de:
                    3c:2c:bb:10:8e:35:79:bd:71:fb:6b:ec:a6:c2:f9:
                    cb:2b:ad:e4:c4:85:7f:0c:ec:09:2d:40:ab:62:f1:
                    ed:16:d8:d0:5d:88:7e:3b:d0:79:fc:de:f1:e9:31:
                    fe:00:2f:ba:56:fa:27:8c:04:c4:27:b6:d0:c6:54:
                    1b:64:b6:12:4c:97:21:f2:46:ce:74:c3:09:4f:3a:
                    b7:1c:42:46:76:48:68:33:4a:11:38:5c:b1:fe:8f:
                    3c:08:a3:e4:da:5a:32:8c:cc:99:8f:12:97:24:5c:
                    e7:50:0f:39:0c:df:34:63:bb:16:09:31:17:67:ae:
                    31:8e:41:a2:ab:24:06:76:79:fd:b8:4c:90:bc:03:
                    16:3d:1c:8d:54:e4:94:79:88:07:ed:9f:40:53:87:
                    1a:84:8a:e4:bf:a7:55:b8:5a:75:b1:ab:00:1d:47:
                    e1:c3:8a:3a:54:04:69:93:b7:9d:04:3e:92:e8:9e:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:B7:07:F7:9C:A6:34:9E:54:12:3C:B6:55:C6:C2:DE:A8:E7:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cdb30ec-0e05-451a-b452-fd3fb9eacd5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:fa:93:52:a7:9f:52:20:34:9f:c1:46:14:f2:9a:8c:18:
         a3:db:51:48:cf:51:9a:7e:b1:b4:b7:58:96:55:3e:54:84:fb:
         64:b1:d0:74:45:bd:ff:8e:93:57:b1:7a:1b:dd:1a:03:8f:f0:
         5f:ca:e2:d7:49:0a:ae:11:05:c0:b4:a1:6b:c5:f3:6c:40:20:
         2b:0b:a4:b4:94:1c:b8:a3:ef:c6:d8:16:bc:1a:4b:92:94:fd:
         04:f8:b6:db:b9:92:20:9e:e7:4f:07:93:78:65:55:55:0d:a5:
         13:78:b4:4c:1c:ca:90:80:72:a4:ee:b0:29:4a:dd:28:0b:4a:
         08:3a:7f:93:0e:a4:c6:7b:9a:80:b2:df:f5:2c:e6:9a:8d:ec:
         82:46:f6:b6:a5:be:ba:e2:01:81:c5:fd:a1:bf:ab:95:a0:45:
         27:83:b1:f6:25:2c:44:e0:16:45:bf:b4:b3:fd:17:9b:d4:fd:
         cd:ea:73:60:1a:1e:dc:fc:99:f5:05:df:51:59:8f:61:36:ee:
         15:69:06:17:0e:32:30:95:05:0a:fa:dd:92:e7:88:a2:7a:50:
         8b:f4:25:2c:72:63:df:00:f2:a1:98:9c:d7:7a:1a:06:05:23:
         37:be:68:67:e3:da:b4:a5:02:b8:1d:1a:a5:28:1d:0f:44:73:
         e1:01:9f:03
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCkHXu4Sx8M0gZZUMryWFBk8GRbQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDk1MDA1WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjhlYjYyY2EyMTU5NWE3MDI3NjM3NjJjM2JiMzJjYWY4
ZTMzZTc5MDA1ZjUyODU1MGUxZWM1Zjk1MDc2OGJmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtMNWQ19IrMOqqUYtlQAHWY9C/g0C/Qp3sYvNIWBZPeNNW
RWhnHPFBfsdnqw1UQQrHpMoTw2YwMXzP4PvCxaDCgwZ4b3PHlUoq3jwsuxCONXm9
cftr7KbC+csrreTEhX8M7AktQKti8e0W2NBdiH470Hn83vHpMf4AL7pW+ieMBMQn
ttDGVBtkthJMlyHyRs50wwlPOrccQkZ2SGgzShE4XLH+jzwIo+TaWjKMzJmPEpck
XOdQDzkM3zRjuxYJMRdnrjGOQaKrJAZ2ef24TJC8AxY9HI1U5JR5iAftn0BThxqE
iuS/p1W4WnWxqwAdR+HDijpUBGmTt50EPpLonrX9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7Bm3B/ecpjSeVBI8tlXGwt6o5xswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBjZGIzMGVjLTBlMDUtNDUxYS1iNDUyLWZkM2ZiOWVhY2Q1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEN4JgwDQYJKoZIhvcNAQELBQADggEBAH2v+pNSp59SIDSfwUYU8pqMGKPb
UUjPUZp+sbS3WJZVPlSE+2Sx0HRFvf+Ok1exehvdGgOP8F/K4tdJCq4RBcC0oWvF
82xAICsLpLSUHLij78bYFrwaS5KU/QT4ttu5kiCe508Hk3hlVVUNpRN4tEwcypCA
cqTusClK3SgLSgg6f5MOpMZ7moCy3/Us5pqN7IJG9ralvrriAYHF/aG/q5WgRSeD
sfYlLETgFkW/tLP9F5vU/c3qc2AaHtz8mfUF31FZj2E27hVpBhcOMjCVBQr63ZLn
iKJ6UIv0JSxyY98A8qGYnNd6GgYFIze+aGfj2rSlArgdGqUoHQ9Ec+EBnwM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:58:30 2025 by rpki-client