Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4683958c-f57d-4dff-bcc9-4e9be4158336.roa
File:                     4683958c-f57d-4dff-bcc9-4e9be4158336.roa (raw, json)
Hash identifier:          DNaYqVAkhrcppyC6ZIxCYQDn86WRPv4FdhOHC57RR9w=
Subject key identifier:   59:EF:20:FF:06:C3:31:4F:AA:21:EA:6B:19:D6:B7:90:F2:68:CD:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C61CD8439306326AC3E5E5C225327548DF35E4E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4683958c-f57d-4dff-bcc9-4e9be4158336.roa
Signing time:             Sun 19 Oct 2025 20:11:20 +0000
ROA not before:           Sun 19 Oct 2025 20:11:20 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:61:cd:84:39:30:63:26:ac:3e:5e:5c:22:53:27:54:8d:f3:5e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 20:11:20 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=9c0c91de61cfbbf57268ae53e27748f1df269c888b6e6b7eb6983698669c5194, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:42:03:95:82:9e:4e:86:6d:24:b9:bd:61:
                    dc:2f:6c:73:46:57:e4:41:39:0b:2b:8a:eb:35:57:
                    ed:b7:70:23:6f:96:aa:7f:25:97:0c:1b:e6:9c:66:
                    39:95:3e:6a:79:cc:a9:66:b1:46:50:a0:60:a6:e1:
                    8a:67:b0:e5:f8:6d:75:99:a7:e3:4a:d9:90:00:a7:
                    ab:20:40:65:7f:40:9d:8d:38:c6:a9:cf:63:4a:ce:
                    b1:a4:81:88:14:2d:38:bc:46:82:10:ff:e9:a1:70:
                    d9:c1:cd:4f:31:9e:87:7e:79:8a:69:b4:37:a4:c5:
                    14:e5:d2:c3:be:c0:fc:5e:29:56:0d:ad:29:eb:38:
                    b3:6a:0f:7a:87:14:88:86:4e:99:49:54:c9:ed:51:
                    12:43:5d:ab:61:8c:f9:54:a6:ad:1d:2a:86:25:1c:
                    27:a0:ee:fd:4a:42:68:33:c1:f5:f9:16:18:60:3f:
                    11:9e:30:2e:1f:b8:4d:c1:28:84:84:7a:ae:6e:c8:
                    7f:77:1c:62:ca:28:e3:a0:fa:43:35:5a:3a:62:ea:
                    9e:b1:ca:13:1d:d0:fe:76:bd:8b:ad:ae:18:7d:8a:
                    00:80:07:c4:69:c1:e1:98:bd:a9:dc:95:50:89:21:
                    c4:b9:8c:1c:aa:42:d9:9b:9f:81:99:cd:2a:ca:c3:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:20:FF:06:C3:31:4F:AA:21:EA:6B:19:D6:B7:90:F2:68:CD:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4683958c-f57d-4dff-bcc9-4e9be4158336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:4f:97:64:fa:68:be:67:16:72:82:7b:6b:61:25:63:b1:
         c8:bb:d5:58:b7:f4:32:76:9c:4e:4f:4c:a6:ba:49:87:c0:95:
         b2:83:7f:65:6f:b8:2e:a6:0a:e8:98:13:ab:f9:45:c1:3c:66:
         4a:f6:84:6e:4c:bb:50:c3:43:81:e6:dd:88:40:ca:a1:cf:49:
         f0:f2:68:ad:c0:91:69:1a:14:e6:d2:5d:20:ea:d8:d8:5d:10:
         11:84:78:64:07:0e:7e:86:93:42:40:be:27:48:67:6c:df:f0:
         de:81:96:ba:52:af:3d:f2:74:bb:fb:40:3d:cd:cc:e0:6c:da:
         3e:a5:da:41:ff:75:6a:14:eb:e5:e0:55:4f:4f:40:08:41:0d:
         36:49:0e:6f:d8:0d:86:05:fd:42:4d:18:e8:60:5d:53:fa:71:
         62:b7:98:fb:98:65:69:7a:d0:e2:bf:4a:ab:eb:83:dd:22:64:
         10:2a:d6:cf:6f:b6:4b:39:70:8d:cc:2d:b5:a5:8d:bd:c7:b4:
         30:11:dc:15:1c:54:ae:ae:dd:ad:ab:62:26:aa:33:d3:26:8e:
         8f:c5:b7:80:64:69:9e:f4:f4:be:d7:e6:f5:97:8a:3e:4a:c4:
         8b:73:6b:c4:43:a9:cb:30:29:c9:ba:64:5e:92:0f:71:13:39:
         64:39:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:03:02 2025 by rpki-client