Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a06a620-bd2f-40dd-a8ba-52bb0aeee844.roa
File:                     5a06a620-bd2f-40dd-a8ba-52bb0aeee844.roa (raw, json)
Hash identifier:          SDpLFJlmJvGE+oJxwFB4IkNMU+AcI8mTJlm1ANjQJe0=
Subject key identifier:   78:16:19:0B:A9:26:06:D1:9E:7C:67:E4:2B:33:E0:52:7D:23:80:A5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       39823F46A4481087936AD8F52B79481955F6EDE8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a06a620-bd2f-40dd-a8ba-52bb0aeee844.roa
Signing time:             Sun 19 Oct 2025 12:41:28 +0000
ROA not before:           Sun 19 Oct 2025 12:41:28 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:3f:46:a4:48:10:87:93:6a:d8:f5:2b:79:48:19:55:f6:ed:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 12:41:28 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=93d5e729c4d1b3357d7e451facf6206a0f97d664726f9baa9f50bd822b246e30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:78:7a:71:72:78:2a:89:4a:82:1a:a7:47:
                    54:81:97:a1:9c:a3:20:9a:59:15:44:f9:c0:f0:9a:
                    6e:c9:0a:d9:9b:c9:0e:b5:23:26:79:e2:df:41:1b:
                    bf:73:78:10:fb:e7:e1:55:74:6a:d3:1b:e9:a3:2f:
                    79:06:26:2f:a4:f5:9a:06:82:49:ef:d7:73:16:da:
                    bc:31:c0:46:53:a5:4a:b9:a2:66:b8:2b:10:21:84:
                    ed:00:79:69:1a:b9:8b:69:e9:f5:9d:68:5d:25:83:
                    ce:68:1a:e6:43:24:89:b5:2a:bf:2b:28:63:21:29:
                    d4:21:5c:82:03:ad:30:c4:03:1d:78:fb:8f:c0:37:
                    cb:25:4c:66:a1:da:3d:6a:b3:ea:1d:9b:55:d5:6b:
                    3e:55:da:2c:26:0f:65:d0:7e:01:8d:3b:93:bf:77:
                    71:ab:f7:16:5a:74:88:a2:cd:4d:6c:f7:89:c8:4b:
                    ed:8f:07:e6:df:77:e4:4e:3f:f6:c2:67:fd:63:f8:
                    c4:52:2b:15:08:c6:49:a7:5b:6c:d7:65:2e:3c:62:
                    c6:a6:47:57:bd:5f:69:3a:c0:34:12:d6:5f:a2:37:
                    54:b3:1c:bb:67:b3:80:35:a0:1f:c8:44:51:63:63:
                    34:73:48:ca:fd:31:16:1d:5f:56:df:8e:ed:b8:6b:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:16:19:0B:A9:26:06:D1:9E:7C:67:E4:2B:33:E0:52:7D:23:80:A5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a06a620-bd2f-40dd-a8ba-52bb0aeee844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:ff:41:58:2c:da:18:d7:bf:53:00:ab:ba:31:4e:cb:c0:
         12:35:e5:f4:e6:ee:a5:8b:3e:80:83:2c:84:9a:f6:57:62:c0:
         c2:f8:86:92:00:13:4a:47:8b:0b:da:d8:15:3d:ef:d7:ab:3b:
         0b:21:35:51:be:62:b6:b1:24:07:38:cf:78:68:89:57:01:2b:
         10:ea:80:ac:50:8a:c1:3f:b5:6f:88:fe:86:26:27:66:00:7e:
         89:09:3d:50:25:d3:b4:2f:8f:8e:78:99:d4:7a:68:bf:fd:b3:
         05:46:b9:ca:cd:4d:d1:ae:e4:6d:d0:44:fe:0b:bb:49:84:bc:
         3e:50:69:aa:f6:0d:1d:06:64:12:34:f8:85:c3:7a:ea:31:2c:
         9d:d7:8c:29:2c:18:f0:b9:1f:bc:c2:ec:79:6a:91:7d:30:e0:
         f9:8d:f8:30:69:a5:c6:82:bc:cd:0e:d0:7d:fa:8a:35:13:e4:
         1a:ab:9c:bf:b3:a5:f4:95:98:0c:e6:d5:76:6b:1f:70:66:e8:
         d3:3b:32:f5:e4:ff:c9:97:49:0c:94:93:df:a7:b5:38:86:79:
         61:62:ec:44:b4:b4:1d:c5:8e:3c:17:5d:3c:b8:f8:f8:2c:ef:
         a5:3f:06:af:c2:7e:d8:18:92:58:dc:fa:05:81:e6:2e:a2:01:
         27:b8:a1:60
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOYI/RqRIEIeTatj1K3lIGVX27egwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTI0MTI4WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2Q1ZTcyOWM0ZDFiMzM1N2Q3ZTQ1MWZhY2Y2MjA2YTBm
OTdkNjY0NzI2ZjliYWE5ZjUwYmQ4MjJiMjQ2ZTMwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGiHh6cXJ4KolKghqnR1SBl6GcoyCaWRVE+cDwmm7JCtmb
yQ61IyZ54t9BG79zeBD75+FVdGrTG+mjL3kGJi+k9ZoGgknv13MW2rwxwEZTpUq5
oma4KxAhhO0AeWkauYtp6fWdaF0lg85oGuZDJIm1Kr8rKGMhKdQhXIIDrTDEAx14
+4/AN8slTGah2j1qs+odm1XVaz5V2iwmD2XQfgGNO5O/d3Gr9xZadIiizU1s94nI
S+2PB+bfd+ROP/bCZ/1j+MRSKxUIxkmnW2zXZS48YsamR1e9X2k6wDQS1l+iN1Sz
HLtns4A1oB/IRFFjYzRzSMr9MRYdX1bfju24a3UdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeBYZC6kmBtGefGfkKzPgUn0jgKUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVhMDZhNjIwLWJkMmYtNDBkZC1hOGJhLTUyYmIwYWVlZTg0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN48UwDQYJKoZIhvcNAQELBQADggEBAD25/0FYLNoY179TAKu6MU7LwBI1
5fTm7qWLPoCDLISa9ldiwML4hpIAE0pHiwva2BU979erOwshNVG+YraxJAc4z3ho
iVcBKxDqgKxQisE/tW+I/oYmJ2YAfokJPVAl07Qvj454mdR6aL/9swVGucrNTdGu
5G3QRP4Lu0mEvD5Qaar2DR0GZBI0+IXDeuoxLJ3XjCksGPC5H7zC7HlqkX0w4PmN
+DBppcaCvM0O0H36ijUT5BqrnL+zpfSVmAzm1XZrH3Bm6NM7MvXk/8mXSQyUk9+n
tTiGeWFi7ES0tB3FjjwXXTy4+Pgs76U/Bq/CftgYkljc+gWB5i6iASe4oWA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:02:04 2025 by rpki-client