Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585978ce-45f1-4fdd-a133-8eaf3b69fcb4.roa
File:                     585978ce-45f1-4fdd-a133-8eaf3b69fcb4.roa (raw, json)
Hash identifier:          tqktbOmN+BZragJysoyVxe2ARm/R+wynrTl7yrByz7s=
Subject key identifier:   93:E8:DE:71:AD:EA:EB:6F:29:F1:9F:C1:68:F2:61:8A:CA:69:A6:43
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1B59690D23D37457A7DF7422410681AB9CA275D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585978ce-45f1-4fdd-a133-8eaf3b69fcb4.roa
Signing time:             Sun 19 Oct 2025 14:27:56 +0000
ROA not before:           Sun 19 Oct 2025 14:27:56 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:59:69:0d:23:d3:74:57:a7:df:74:22:41:06:81:ab:9c:a2:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 14:27:56 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=9fddef538d1a2b75acc8d89ee09fb0b5f7c3610a509eb54dd40d6d6dc0f3e642, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:42:2f:c1:0d:80:74:7f:9d:d0:23:4b:5a:
                    f4:ca:7a:54:c7:1a:d2:ea:b0:7b:ee:38:49:69:55:
                    19:54:b0:f0:15:91:96:be:2f:3e:d3:96:0b:96:af:
                    3e:4e:5a:83:d8:1d:ea:c7:5a:d1:d9:5c:9f:08:c9:
                    34:54:54:44:97:5c:f0:c7:de:59:9e:5a:d2:26:e3:
                    05:74:3c:42:da:9a:82:c4:60:cb:0d:99:26:4d:91:
                    32:6a:99:31:8c:c0:2b:72:36:b7:e2:9e:49:4f:a2:
                    35:23:d6:32:35:08:ef:78:72:47:b6:96:06:c5:56:
                    fa:9b:52:81:fe:c6:1e:9d:01:c1:52:dc:ec:3d:c1:
                    97:5d:1e:b8:3c:8e:e2:16:f0:78:3c:e9:d0:7f:eb:
                    29:15:88:68:a0:b9:51:fc:74:82:0c:3c:0c:71:1f:
                    fe:89:b1:28:74:cf:bc:9e:fe:4e:97:81:23:8b:82:
                    67:f0:d8:6d:9a:9c:9f:a3:c7:bd:54:11:1e:bc:07:
                    e6:5f:50:49:e0:3d:60:7a:b2:6f:e7:55:76:64:ef:
                    82:09:00:3a:35:28:1f:ea:91:21:1a:a1:e4:b9:d1:
                    15:86:4c:e2:39:6c:5d:54:42:50:bd:a0:bc:fa:52:
                    18:cf:bf:1a:24:1c:59:ee:50:b4:24:9b:51:31:01:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:DE:71:AD:EA:EB:6F:29:F1:9F:C1:68:F2:61:8A:CA:69:A6:43
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/585978ce-45f1-4fdd-a133-8eaf3b69fcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:c3:b2:f8:e3:80:72:96:8b:e9:d4:6a:b2:4c:84:f3:c5:
         4e:d9:d6:44:18:be:f5:ab:93:c7:2f:e8:0b:f6:09:b1:c6:1e:
         35:51:d8:5e:84:cf:f0:ed:a3:23:cd:2d:bf:6f:ca:76:3a:d5:
         82:11:cb:57:d9:e7:8a:4f:24:7e:50:cb:f8:a7:33:03:7e:3b:
         43:ee:d2:02:c6:4e:44:b8:11:e2:4f:82:d3:dc:f7:db:35:6d:
         af:55:78:4f:5e:6d:04:50:28:82:e4:0c:f6:f9:99:14:65:5b:
         6d:5a:1d:6a:dd:a1:dd:74:54:fe:69:ff:31:ee:6c:c5:e4:7f:
         1c:54:b5:40:c9:7e:29:dd:52:27:e7:fe:5e:cf:1b:9f:46:02:
         ea:5a:81:a1:04:ed:d5:da:05:50:c2:2a:d5:d9:36:d0:03:11:
         9f:d6:f8:9b:07:61:d1:2e:aa:37:dc:b2:bc:cc:3b:a5:d8:1d:
         3a:d7:53:4e:2f:d8:be:66:86:e1:4a:c0:a2:40:f8:52:c8:3a:
         67:39:cb:2c:2c:5c:f4:75:87:93:f8:4f:69:cd:88:3b:ba:ad:
         ac:bf:90:6a:b0:5c:09:be:20:a7:c2:81:4e:03:81:75:aa:8e:
         88:4c:47:cb:9f:5f:bb:46:91:ee:f6:00:45:95:44:f4:c9:7c:
         d6:30:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:03:50 2025 by rpki-client