Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb9f191-2295-46a9-8a41-8ad54cc8a6a1.roa
File:                     4eb9f191-2295-46a9-8a41-8ad54cc8a6a1.roa (raw, json)
Hash identifier:          c97lnLFG2ewnk37HE3Yt0WK2OnXlDBrB09hB4hy66+8=
Subject key identifier:   50:EE:B6:65:27:D4:41:21:0D:EA:73:81:17:74:7A:23:A2:77:6D:2D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5B6BF057088DE115F9EEDBCECD5218225CEA801E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb9f191-2295-46a9-8a41-8ad54cc8a6a1.roa
Signing time:             Sun 19 Oct 2025 17:40:08 +0000
ROA not before:           Sun 19 Oct 2025 17:40:08 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6b:f0:57:08:8d:e1:15:f9:ee:db:ce:cd:52:18:22:5c:ea:80:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 17:40:08 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=10c81b450308aa10104dc102a1595d00240130da41e2a9a529e351d912dd7e8b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:ad:c6:5c:d8:7a:2e:62:39:66:0f:a2:d8:
                    96:ae:ca:cf:ca:8b:39:e9:35:cc:3a:a7:a6:f8:ed:
                    69:0b:54:9a:f8:7e:0b:43:81:a2:f0:c3:5a:ff:c6:
                    7d:65:50:66:1a:4b:8d:00:5f:51:45:f8:ce:90:0e:
                    2a:ae:d3:8b:9f:d8:7f:70:19:2b:c1:df:46:34:d2:
                    5d:83:f7:c9:df:cd:cf:91:cc:ab:86:63:03:9f:0c:
                    1c:03:4b:38:fa:c7:82:86:a2:81:39:26:dd:7c:5e:
                    98:04:5b:34:01:70:66:76:f7:b5:c7:72:77:19:71:
                    41:a3:72:2c:04:d7:0a:f2:dc:ef:be:c3:e3:42:97:
                    96:9e:90:48:72:cd:53:25:7a:e9:2e:f4:3b:65:8f:
                    5b:ab:b2:2c:a5:de:5e:6c:a6:61:1b:4d:e3:be:42:
                    82:0a:38:61:00:74:c4:13:09:12:7d:80:5b:81:75:
                    1b:8a:b6:59:56:b8:2e:01:51:87:e6:07:e8:86:dd:
                    a1:1f:4f:74:b3:14:30:86:a7:d8:33:6e:ed:fb:71:
                    e6:62:28:7f:15:fb:e6:16:72:56:25:40:df:f9:5d:
                    af:61:f6:c9:89:6a:19:82:72:b4:46:2d:6e:dc:dc:
                    77:eb:66:e3:49:62:34:57:a5:d2:4a:ab:b4:b9:1a:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EE:B6:65:27:D4:41:21:0D:EA:73:81:17:74:7A:23:A2:77:6D:2D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb9f191-2295-46a9-8a41-8ad54cc8a6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:17:5f:49:05:c9:25:2b:0d:07:b9:c1:f5:c7:97:2b:d5:
         41:04:78:63:62:13:27:ac:b1:1d:79:ef:59:b9:3c:6c:3a:2a:
         56:af:72:86:6a:67:6f:7b:29:a3:a9:b4:da:7a:13:16:08:06:
         08:e6:50:b0:25:9d:30:4e:26:16:e7:90:8b:81:3d:22:7e:35:
         e7:7f:e5:45:9a:84:aa:a1:db:82:c0:7a:29:1c:c1:43:4b:83:
         6a:cd:b5:26:4b:56:d0:cd:44:95:38:e4:91:0d:cb:a3:2a:4c:
         ce:6b:17:52:65:29:b4:87:52:48:74:68:af:48:c7:02:34:d5:
         61:ce:1c:a1:ca:39:fa:12:23:b6:31:4f:96:00:16:de:a5:eb:
         2b:40:7a:0b:08:34:23:5a:8b:3c:c0:a1:de:b6:6d:78:5a:96:
         7b:7b:69:79:4e:7b:68:b9:5b:41:e2:bf:d3:da:c4:b5:b2:11:
         96:1a:96:b9:47:7f:81:d4:c8:4d:b6:eb:d3:e4:c8:c5:b2:1b:
         0b:ec:d4:4e:16:bf:d5:8c:f4:eb:26:49:76:c1:74:be:ef:c7:
         ba:5a:18:bf:3e:2f:be:fd:f7:88:13:10:12:9e:d9:2a:41:4c:
         48:03:7d:61:b5:5d:82:db:ce:98:3b:f6:41:29:85:1e:25:90:
         6a:f5:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:35 2025 by rpki-client