Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30a17518-f0e6-4ea4-ada8-0a560e2ad8b1.roa
File:                     30a17518-f0e6-4ea4-ada8-0a560e2ad8b1.roa (raw, json)
Hash identifier:          Fq1H40AEG6ivyYEj2G+oHlQewMSpzlUGaFP6jJ/UKls=
Subject key identifier:   A7:21:A5:DB:58:FA:77:B9:E3:FE:B5:9B:6A:3A:31:8C:7D:6C:82:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       13FB4AEF03AEF31E407477A9EC577055AF6123A8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30a17518-f0e6-4ea4-ada8-0a560e2ad8b1.roa
Signing time:             Sat 18 Oct 2025 05:50:09 +0000
ROA not before:           Sat 18 Oct 2025 05:50:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fb:4a:ef:03:ae:f3:1e:40:74:77:a9:ec:57:70:55:af:61:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 05:50:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=c7575cf0f013ef9542e24a4aa665adbd882516f6ec64fa8ec85e61618df94241, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:5e:72:85:0e:30:e6:5d:37:0a:98:ed:2d:
                    f5:92:ad:2e:30:fd:da:e3:08:b8:ed:5f:ef:07:9e:
                    1f:50:df:84:a9:94:18:6f:e4:88:5e:9b:01:7b:e7:
                    28:11:63:89:c2:d5:0a:ef:a9:78:61:a1:6c:70:71:
                    37:a9:1f:8c:5f:14:eb:ea:2f:c5:68:70:71:88:8f:
                    27:31:23:cf:ae:16:40:17:e9:72:99:08:f8:ba:d0:
                    75:82:5f:44:43:66:27:e2:99:26:6c:f5:22:b4:9b:
                    82:21:fe:62:c2:c3:0a:d9:8d:67:37:06:0f:1a:08:
                    c1:6d:22:ea:82:39:79:bc:1b:21:c1:fb:38:f2:2d:
                    97:35:05:65:e8:93:a8:e2:fa:8a:85:f4:cf:5e:4e:
                    17:19:53:d9:81:fb:9b:4b:1f:a3:ed:7f:f9:97:84:
                    e4:37:a4:54:18:9e:29:6c:47:c9:49:5c:30:4d:3a:
                    6d:af:9a:65:82:6a:b7:7e:75:df:64:8a:99:4f:53:
                    4d:ad:c6:cf:c2:5a:c1:1a:f8:45:5b:e3:58:31:fe:
                    9e:46:56:e5:4f:23:bd:03:44:26:d0:2f:ce:58:b8:
                    6e:fd:af:ce:0c:ad:c7:7a:62:58:18:26:cb:d9:9a:
                    fc:a0:7e:42:da:11:e7:be:98:86:85:41:04:47:43:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:A5:DB:58:FA:77:B9:E3:FE:B5:9B:6A:3A:31:8C:7D:6C:82:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30a17518-f0e6-4ea4-ada8-0a560e2ad8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:d6:61:6a:01:a5:e7:e8:0d:3d:e7:d5:ef:d7:ef:32:5f:
         c4:37:58:dd:d2:33:15:a4:77:2a:3f:b8:da:c4:cf:cd:94:18:
         b7:8e:63:1d:5f:b4:69:06:12:c2:07:3d:53:56:b4:09:ea:3d:
         89:b6:37:03:eb:f2:76:3a:52:ce:88:a8:a3:80:0e:91:78:b2:
         5c:b1:8d:03:ab:22:7c:7c:3a:57:3b:35:6c:04:0c:72:03:72:
         45:a7:9e:7f:34:e1:53:ba:69:9b:2d:8f:f5:d5:d3:e9:7c:47:
         4c:64:35:93:29:c2:fc:1a:fe:80:74:fb:0b:f0:80:0e:dc:01:
         3a:81:1d:b1:a7:01:f8:dd:d7:68:ba:d0:98:aa:3a:09:3b:33:
         27:3e:92:d0:61:a7:bd:62:9b:c1:81:2f:09:09:46:7c:2a:5c:
         3a:25:9b:fa:1a:d5:b8:16:c8:ec:f9:52:ff:71:f1:02:b1:76:
         3d:94:c8:8d:1d:f8:10:69:c4:e6:e1:96:06:53:dc:4a:fa:d7:
         9f:e5:ea:62:06:df:29:99:aa:ad:4a:99:7d:f4:9f:ec:db:d4:
         69:72:bd:86:9b:46:f5:4b:20:8b:99:e2:fe:a8:28:f1:75:40:
         eb:f2:57:e1:38:9f:8f:e2:4c:7a:25:67:23:d2:ac:04:be:21:
         e0:b2:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:25 2025 by rpki-client