Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ee61a67-225d-423f-98dc-db941f40023d.roa
File:                     5ee61a67-225d-423f-98dc-db941f40023d.roa (raw, json)
Hash identifier:          ovYwniMHIiTSz4D0pkKmnWc9PEPl3NXJ1TOx5JOdg+o=
Subject key identifier:   69:BD:05:96:F2:62:4A:72:54:4C:8D:15:A9:FE:B0:85:65:AE:F0:33
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D0C33402B857E150FBA5D008C1D84B92BE045
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ee61a67-225d-423f-98dc-db941f40023d.roa
Signing time:             Sun 19 Oct 2025 18:20:09 +0000
ROA not before:           Sun 19 Oct 2025 18:20:09 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0c:33:40:2b:85:7e:15:0f:ba:5d:00:8c:1d:84:b9:2b:e0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 18:20:09 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=145d53e44d3c9f837d1bca8386dc2b7f96785be56104eb8a92275149c274f8d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:31:c0:6d:94:88:e2:b2:e1:78:04:3c:84:
                    f8:13:84:2d:69:e8:27:cb:7b:7d:09:9d:40:92:74:
                    53:a9:73:46:65:40:03:3d:03:14:a2:f7:a6:f6:eb:
                    ae:ca:ee:2c:0e:41:6b:ef:76:2c:2b:50:00:2d:68:
                    38:c5:ca:ee:1b:03:a3:9a:99:d6:3a:62:ef:11:ff:
                    23:c9:6d:72:8b:9d:69:3c:67:cd:18:90:ce:d2:9a:
                    9b:ae:8a:f6:cf:32:7a:d0:ed:1d:89:f2:e1:76:07:
                    3c:2a:94:61:7e:c5:22:b4:cd:70:0a:6a:a5:57:b1:
                    7d:f8:a4:c7:d2:51:24:37:17:38:69:64:6c:86:2b:
                    a7:ae:5e:0f:e0:57:86:4b:78:6f:62:fa:8e:da:6f:
                    18:4c:b1:cd:65:23:f4:da:11:10:67:60:b1:81:89:
                    a1:f1:eb:53:50:5f:c7:a5:77:26:c7:bf:70:65:84:
                    6f:b3:84:35:59:42:cf:98:c0:4b:80:65:44:7e:f2:
                    af:53:7c:fd:fb:4a:47:75:b6:08:5c:98:64:06:1c:
                    f8:0b:0e:4d:e6:96:6a:05:34:f3:9a:57:b6:93:44:
                    e8:3c:48:e7:e6:bd:25:cd:25:3f:3c:4a:2b:3b:88:
                    66:45:3b:07:99:90:b4:b9:05:53:dd:fa:8d:de:61:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:05:96:F2:62:4A:72:54:4C:8D:15:A9:FE:B0:85:65:AE:F0:33
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ee61a67-225d-423f-98dc-db941f40023d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:8a:96:95:c1:aa:a6:9e:cd:2d:f8:db:51:dc:eb:18:b5:
         70:23:82:66:a3:b5:eb:d2:f0:5d:65:e6:c9:9e:6c:35:6b:4c:
         7e:9d:4a:ba:8d:59:21:38:d9:19:ec:e0:3c:35:d9:cf:10:7e:
         4b:a4:bd:da:d0:74:bc:bd:1a:d1:68:ba:d7:d0:41:59:e0:32:
         01:41:a9:e6:67:d4:d5:d4:7e:76:3c:1e:12:fa:ca:dc:6d:21:
         88:f2:dd:fb:d4:18:1a:bc:ef:77:e0:48:af:76:b7:3e:ca:fb:
         c6:c5:04:e2:39:97:44:ab:15:86:6f:07:0a:87:0a:dc:0d:34:
         e9:4a:ed:9e:9c:c1:52:2b:45:06:bf:a7:92:12:51:b6:95:7c:
         83:f7:c5:b5:4f:86:8f:a9:58:d9:cd:b8:67:29:56:f2:5a:d7:
         15:d4:8a:6f:9b:f8:cb:75:d2:d0:c6:46:d9:fe:a6:ed:46:a0:
         51:4d:a3:8e:5f:94:56:2e:b0:3f:d1:f4:41:d2:86:15:05:ee:
         d4:c6:30:52:d7:cb:34:b3:be:9b:62:20:92:5e:6f:24:af:c1:
         1f:8b:c7:6c:2b:fc:ba:98:0d:49:60:21:1a:ef:1b:5b:66:49:
         e4:f7:38:e7:6c:cd:98:65:19:1e:52:29:b5:a4:e6:73:a4:05:
         56:c6:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:21:00 2025 by rpki-client