Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583b0710-7ef7-476b-87f4-73c422628aa2.roa
File:                     583b0710-7ef7-476b-87f4-73c422628aa2.roa (raw, json)
Hash identifier:          fb5sTqW21BFPVpKdVZptWJr2eyY0gKah+PcOkrhN98Y=
Subject key identifier:   8A:5D:B6:E3:8E:FB:16:E6:C6:3F:91:3D:6E:62:15:23:41:B9:35:B9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7E1FC05F2618ED3FDDB1216B3C80C28FE5D033EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583b0710-7ef7-476b-87f4-73c422628aa2.roa
Signing time:             Sun 19 Oct 2025 14:00:10 +0000
ROA not before:           Sun 19 Oct 2025 14:00:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1f:c0:5f:26:18:ed:3f:dd:b1:21:6b:3c:80:c2:8f:e5:d0:33:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 14:00:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e85b338392e0960805180d1411e1d129e5c77333cc3a87c9d39a808998ff5dde, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:66:30:29:f6:b4:34:c1:4f:d0:d5:97:c3:
                    44:55:88:bb:93:f7:36:e1:86:c7:02:a0:cb:59:d2:
                    0d:63:67:de:6f:39:01:4a:2f:76:e8:70:6d:55:0c:
                    0a:49:ff:fd:f0:84:34:de:88:86:fb:79:3d:30:e5:
                    8a:bb:be:7e:79:c9:8d:61:4c:54:68:c8:36:c4:00:
                    8a:7f:57:3b:1a:48:02:e2:6c:2a:93:5a:b5:62:2e:
                    0c:16:e3:32:3c:31:24:13:96:67:2e:40:ac:a3:b8:
                    b1:af:39:a5:3b:1f:f2:fc:db:57:25:19:6f:f5:94:
                    21:e7:64:b1:48:12:e6:f2:2f:69:9b:65:0a:8e:c4:
                    fe:3a:b1:e0:fb:41:8e:e7:ae:a7:cd:06:db:e0:12:
                    4c:b0:0d:12:40:a8:77:bc:b6:e2:f7:cf:e2:ea:d1:
                    ca:6d:af:90:89:d9:df:f9:d9:a1:3c:d5:77:35:95:
                    a3:60:d4:e6:49:e4:a0:f5:91:29:dc:9d:72:9a:4a:
                    ed:57:ba:f8:e3:7a:6a:38:cb:51:d8:20:a9:cd:c4:
                    83:1c:fb:3f:ec:1a:c5:85:77:ed:04:2f:c1:c5:62:
                    ac:36:fd:11:a3:b7:16:0c:a8:30:97:65:e9:4f:97:
                    93:20:e3:3d:a6:82:db:58:a6:62:77:7f:a9:bc:e3:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:B6:E3:8E:FB:16:E6:C6:3F:91:3D:6E:62:15:23:41:B9:35:B9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/583b0710-7ef7-476b-87f4-73c422628aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:d8:38:4e:0c:97:38:07:e8:ec:a0:e3:e0:2f:62:75:4a:
         ea:41:55:ab:74:48:d3:89:9f:f0:58:ec:33:19:7b:3c:82:73:
         f5:34:ca:51:05:53:1f:66:fe:92:d5:40:90:19:7f:1d:ce:8c:
         e4:57:8c:e5:6c:ff:db:73:c7:8b:2f:64:90:ca:16:c3:3c:57:
         d0:68:56:37:4d:2f:d4:8d:82:30:8e:22:6d:01:b6:d4:c7:42:
         88:0a:82:3a:a1:cd:df:de:2b:e5:c3:6f:58:ad:0e:70:83:49:
         b6:a8:03:e8:5d:9c:bc:23:ba:b6:b0:4e:3f:1b:b6:1e:67:fe:
         df:f4:09:06:1a:9e:30:3a:96:80:60:fd:a3:a3:c5:e6:90:11:
         d5:7f:3a:c0:31:fc:f8:7c:df:ac:15:d9:54:be:f1:a9:e4:47:
         c7:92:15:84:d0:ee:e1:f2:65:a1:8d:bd:86:4f:90:f1:a4:22:
         74:c3:9b:52:48:31:52:72:e1:69:1d:66:86:34:d8:ee:e2:79:
         6d:b7:8c:2b:e9:dc:e3:3d:0b:af:12:22:50:64:e7:f1:dc:9d:
         c9:69:95:cf:39:58:94:40:b4:4a:06:41:e0:2b:4d:f1:fc:bc:
         00:2c:3d:06:06:63:0d:22:43:80:c6:9f:c5:dd:f2:21:81:2e:
         b4:48:ec:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfh/AXyYY7T/dsSFrPIDCj+XQM+swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQwMDEwWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlODViMzM4MzkyZTA5NjA4MDUxODBkMTQxMWUxZDEyOWU1
Yzc3MzMzY2MzYTg3YzlkMzlhODA4OTk4ZmY1ZGRlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxpmYwKfa0NMFP0NWXw0RViLuT9zbhhscCoMtZ0g1jZ95v
OQFKL3bocG1VDApJ//3whDTeiIb7eT0w5Yq7vn55yY1hTFRoyDbEAIp/VzsaSALi
bCqTWrViLgwW4zI8MSQTlmcuQKyjuLGvOaU7H/L821clGW/1lCHnZLFIEubyL2mb
ZQqOxP46seD7QY7nrqfNBtvgEkywDRJAqHe8tuL3z+Lq0cptr5CJ2d/52aE81Xc1
laNg1OZJ5KD1kSncnXKaSu1Xuvjjemo4y1HYIKnNxIMc+z/sGsWFd+0EL8HFYqw2
/RGjtxYMqDCXZelPl5Mg4z2mgttYpmJ3f6m848kbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUil224477FubGP5E9bmIVI0G5NbkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU4M2IwNzEwLTdlZjctNDc2Yi04N2Y0LTczYzQyMjYyOGFhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN4VUwDQYJKoZIhvcNAQELBQADggEBAB/u2DhODJc4B+jsoOPgL2J1SupB
Vat0SNOJn/BY7DMZezyCc/U0ylEFUx9m/pLVQJAZfx3OjORXjOVs/9tzx4svZJDK
FsM8V9BoVjdNL9SNgjCOIm0BttTHQogKgjqhzd/eK+XDb1itDnCDSbaoA+hdnLwj
urawTj8bth5n/t/0CQYanjA6loBg/aOjxeaQEdV/OsAx/Ph836wV2VS+8ankR8eS
FYTQ7uHyZaGNvYZPkPGkInTDm1JIMVJy4WkdZoY02O7ieW23jCvp3OM9C68SIlBk
5/Hcnclplc85WJRAtEoGQeArTfH8vAAsPQYGYw0iQ4DGn8Xd8iGBLrRI7D8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:08:42 2025 by rpki-client