Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30483a97-2b92-4b1f-9c49-b9a2a12afc05.roa
File:                     30483a97-2b92-4b1f-9c49-b9a2a12afc05.roa (raw, json)
Hash identifier:          4OtrSf2x8b50nkeabYAYT1jbFEZG0CYVwxGco6Z4UV0=
Subject key identifier:   C2:69:B7:DB:3C:B7:72:32:28:5A:85:9F:B9:B9:F1:90:45:DA:F0:BA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4EABE633B62121BB9B04C846BF1E26025FCFF61F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30483a97-2b92-4b1f-9c49-b9a2a12afc05.roa
Signing time:             Sun 19 Oct 2025 23:10:09 +0000
ROA not before:           Sun 19 Oct 2025 23:10:09 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.35.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ab:e6:33:b6:21:21:bb:9b:04:c8:46:bf:1e:26:02:5f:cf:f6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 23:10:09 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=392f93d68c9be2c5d0509c55c3ceb534daf425f4de543e91ca9bcdde62d845d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:e2:cf:2e:61:a8:71:9a:28:3a:04:fb:b6:
                    7f:ac:b6:98:d0:e9:48:82:58:48:5b:57:48:de:ca:
                    fd:fe:be:60:58:db:ed:24:38:26:d7:e7:e8:6a:5b:
                    7d:f0:66:3b:10:a0:35:43:92:8d:6d:2e:c1:3a:a7:
                    42:aa:ff:0c:e8:80:af:3b:4b:46:6d:fd:4a:c2:5b:
                    8b:ef:b9:a2:ce:c7:e6:87:92:ae:5f:64:6e:56:61:
                    4f:1c:b0:54:9c:4b:45:54:7d:36:c5:d0:4d:79:30:
                    d7:5c:33:be:2f:c1:ef:90:7b:63:08:53:9f:25:54:
                    70:79:2a:65:1b:1d:d2:fe:19:ff:ba:0f:20:d4:0f:
                    7f:37:88:0d:ce:f6:4f:89:d6:c9:86:3d:93:54:74:
                    6c:ee:cc:67:fb:bb:9a:4c:dd:ce:9e:74:73:91:a0:
                    ff:e5:5f:25:1b:1a:95:88:01:ad:20:cd:cf:88:7d:
                    36:46:06:23:36:24:c6:01:f2:09:52:0f:55:a8:72:
                    8c:34:4f:dc:f4:0b:af:cb:c3:04:a0:6f:08:1c:a3:
                    27:40:a1:ee:dd:8e:0a:24:59:d3:cc:52:96:32:3d:
                    b2:32:3f:94:06:a4:ca:07:d0:42:c1:2d:4b:32:a5:
                    bd:92:a9:63:be:5c:6e:69:56:6a:dc:e1:26:15:44:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:B7:DB:3C:B7:72:32:28:5A:85:9F:B9:B9:F1:90:45:DA:F0:BA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30483a97-2b92-4b1f-9c49-b9a2a12afc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.35.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:58:76:4f:77:89:b5:08:99:9e:3a:51:71:76:07:d4:43:
         79:88:cf:12:d3:d7:e7:b9:0f:33:e8:23:c0:3a:ef:05:9f:07:
         e7:39:a0:fb:e5:49:c9:53:f6:02:38:5a:07:b4:83:be:40:aa:
         4a:74:3a:3f:3f:20:5d:8e:4f:4c:9e:17:cf:7b:5a:1a:f7:44:
         33:dc:72:a5:cb:4f:4b:31:12:38:15:12:b3:4f:9a:ef:74:53:
         ae:50:1b:2f:a3:4b:64:c1:25:11:e0:35:88:ad:0c:e9:2d:fa:
         e0:18:cb:57:5b:02:1b:1b:39:28:93:f3:8a:ef:ec:f2:26:ac:
         11:26:5e:8f:bc:f8:bd:67:2c:9e:1f:da:11:a7:ee:a5:b0:27:
         d5:12:20:92:81:6e:23:49:db:b8:76:87:1a:19:e9:6c:44:d9:
         7d:ea:87:ed:74:73:9c:e4:65:2b:97:ea:17:41:32:0d:59:ba:
         58:33:1e:b9:09:da:09:bd:5f:84:34:13:a7:12:f3:54:81:70:
         72:e2:66:b9:51:30:0e:dd:61:a2:e6:5e:bd:eb:d8:01:91:3f:
         f7:98:d4:be:a2:9e:8e:95:cc:68:d1:4b:28:50:4a:f3:d4:2e:
         74:51:8c:10:5a:47:f2:5c:d1:e4:1e:ce:b4:61:74:28:e1:8d:
         cc:6a:b0:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTqvmM7YhIbubBMhGvx4mAl/P9h8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjMxMDA5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTJmOTNkNjhjOWJlMmM1ZDA1MDljNTVjM2NlYjUzNGRh
ZjQyNWY0ZGU1NDNlOTFjYTliY2RkZTYyZDg0NWQ1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwvOLPLmGocZooOgT7tn+stpjQ6UiCWEhbV0jeyv3+vmBY
2+0kOCbX5+hqW33wZjsQoDVDko1tLsE6p0Kq/wzogK87S0Zt/UrCW4vvuaLOx+aH
kq5fZG5WYU8csFScS0VUfTbF0E15MNdcM74vwe+Qe2MIU58lVHB5KmUbHdL+Gf+6
DyDUD383iA3O9k+J1smGPZNUdGzuzGf7u5pM3c6edHORoP/lXyUbGpWIAa0gzc+I
fTZGBiM2JMYB8glSD1Wocow0T9z0C6/LwwSgbwgcoydAoe7djgokWdPMUpYyPbIy
P5QGpMoH0ELBLUsypb2SqWO+XG5pVmrc4SYVROhfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwmm32zy3cjIoWoWfubnxkEXa8LowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMwNDgzYTk3LTJiOTItNGIxZi05YzQ5LWI5YTJhMTJhZmMwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNIzAwDQYJKoZIhvcNAQELBQADggEBADzvWHZPd4m1CJmeOlFxdgfUQ3mI
zxLT1+e5DzPoI8A67wWfB+c5oPvlSclT9gI4Wge0g75Aqkp0Oj8/IF2OT0yeF897
Whr3RDPccqXLT0sxEjgVErNPmu90U65QGy+jS2TBJRHgNYitDOkt+uAYy1dbAhsb
OSiT84rv7PImrBEmXo+8+L1nLJ4f2hGn7qWwJ9USIJKBbiNJ27h2hxoZ6WxE2X3q
h+10c5zkZSuX6hdBMg1ZulgzHrkJ2gm9X4Q0E6cS81SBcHLiZrlRMA7dYaLmXr3r
2AGRP/eY1L6ino6VzGjRSyhQSvPULnRRjBBaR/Jc0eQezrRhdCjhjcxqsI4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:17 2025 by rpki-client