Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63e65b6a-f6be-4d33-a6d8-e69cf7bee16f.roa
File:                     63e65b6a-f6be-4d33-a6d8-e69cf7bee16f.roa (raw, json)
Hash identifier:          xPvZ9U45ZygqRSJ3Xy2j4o7QAkHMkxsX9HDtK6FaXwQ=
Subject key identifier:   91:33:CE:BA:4E:53:1F:64:76:16:61:86:C2:4D:5C:BA:AE:12:F5:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       58B7068E28CF7DDA2C793FC1772DA9C136189856
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63e65b6a-f6be-4d33-a6d8-e69cf7bee16f.roa
Signing time:             Sat 18 Oct 2025 22:31:34 +0000
ROA not before:           Sat 18 Oct 2025 22:31:34 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.239.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b7:06:8e:28:cf:7d:da:2c:79:3f:c1:77:2d:a9:c1:36:18:98:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 22:31:34 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=62ada71d385a63d26c65bb6d4490d57cf5ed37b9c67e2fdbdd7225479652334f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:23:e1:03:e2:34:fb:13:fe:f9:f6:41:dd:75:
                    c5:93:60:4e:6b:17:7d:a5:08:13:3b:bc:76:60:d2:
                    e2:63:d9:10:42:c4:f0:1e:e2:fb:9d:69:0f:b5:85:
                    db:7f:4e:96:f5:99:2c:a1:19:80:3e:c8:fe:30:de:
                    57:66:32:18:9a:9e:88:34:63:82:45:69:20:6c:4c:
                    f3:6c:22:2c:c3:6c:df:e2:ba:25:a3:76:f4:fe:1e:
                    a9:be:53:16:97:b7:20:90:41:8d:9b:c9:16:ee:45:
                    e9:38:98:5f:8a:f8:95:84:db:23:f8:cd:74:ac:9a:
                    b9:a8:7a:e1:84:2c:c3:c5:32:24:1a:12:7a:db:3a:
                    76:38:73:ed:0c:13:57:a7:51:60:d3:84:74:a9:7d:
                    8d:95:73:73:0b:18:92:db:ad:61:77:8a:8b:ba:d7:
                    33:d2:e0:35:e5:7b:e8:1e:a9:14:d7:98:64:6a:83:
                    07:f3:c4:7e:53:17:3d:25:37:95:4e:03:80:02:60:
                    22:87:09:f4:78:b0:5c:53:79:49:c7:62:cb:04:ae:
                    8a:ff:ce:56:33:41:87:6d:0b:32:b5:19:da:fa:f7:
                    36:a6:aa:9c:e5:25:3c:19:c6:37:81:bb:4d:24:a8:
                    0d:b3:cf:db:63:d3:f2:43:c5:4e:eb:fd:54:4a:00:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:CE:BA:4E:53:1F:64:76:16:61:86:C2:4D:5C:BA:AE:12:F5:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63e65b6a-f6be-4d33-a6d8-e69cf7bee16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.239.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:19:b7:fe:3f:e5:88:47:63:0d:b0:ab:10:13:5c:67:86:d9:
         a0:ab:4a:01:cf:55:f3:f9:b8:d9:a1:e9:95:cd:81:8c:ed:df:
         be:ab:7e:0c:0b:47:37:96:01:6e:ab:54:56:29:83:11:cf:23:
         c5:ca:e7:36:3c:74:8d:a6:e4:22:ac:a6:8f:d8:e0:6a:d4:09:
         35:82:78:c3:6d:f7:ce:62:94:4d:d2:a2:b3:63:fd:23:78:53:
         b8:dd:48:fb:71:2d:9a:05:91:52:65:c6:6f:bc:28:fd:e8:45:
         6f:ae:50:7a:c9:54:35:a9:fd:70:9e:ca:c8:a1:15:30:8d:df:
         60:31:0a:b5:62:72:b7:79:2e:30:85:8f:3a:93:05:98:2c:a7:
         d2:de:80:51:f8:1d:e2:de:c7:cf:9e:4f:76:06:c7:b5:fd:c1:
         6e:b0:21:26:a4:23:22:fc:85:dc:81:34:59:7e:13:c7:2b:d4:
         d7:cc:ec:22:0c:cb:26:0a:b1:9a:87:05:f1:da:f3:43:8e:ac:
         dc:82:7c:e3:8e:ef:11:6d:20:07:8f:86:74:14:ad:65:09:73:
         57:3a:e5:ae:e9:55:a8:e9:83:5e:48:f7:d8:b9:28:c8:19:45:
         2d:a2:de:ef:b8:84:03:b5:a0:62:ec:06:55:d4:ee:ab:e2:f8:
         0e:df:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:29:37 2025 by rpki-client