Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fb3f4a2-43fe-4eca-8e6a-ee88d83e77b9.roa
File:                     8fb3f4a2-43fe-4eca-8e6a-ee88d83e77b9.roa (raw, json)
Hash identifier:          9bJ6ExMCnGF/O1MYUkDUuwVgtXb3FzB1IdarNJPBj90=
Subject key identifier:   F0:DD:43:31:87:91:BF:E7:1B:8B:99:70:0F:7D:C6:F2:87:2E:A2:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7F103B6C64081946AFD1537D5B8865845B73B0B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fb3f4a2-43fe-4eca-8e6a-ee88d83e77b9.roa
Signing time:             Sun 19 Oct 2025 17:01:19 +0000
ROA not before:           Sun 19 Oct 2025 17:01:19 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:10:3b:6c:64:08:19:46:af:d1:53:7d:5b:88:65:84:5b:73:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 17:01:19 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=29fa9b422c5f914b63b1a6654f21db4f7d2d815f51475f82f7e3a274b17ed1ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2d:4f:57:38:ea:ab:00:c0:5a:e7:f7:18:d4:
                    b5:8d:27:16:89:e3:9f:cc:91:e2:38:b0:f6:c2:c6:
                    6a:a7:ef:86:76:ad:9c:ae:eb:f0:0a:80:f9:b7:7e:
                    85:78:bd:d0:b6:ce:1d:d9:7b:6f:39:80:76:c9:a5:
                    3d:3a:e6:d5:73:74:a2:f9:40:6f:93:9e:27:3a:11:
                    13:38:2c:60:fb:39:75:76:16:2c:be:39:fc:d0:16:
                    88:6a:c5:cb:c3:bc:3f:4a:10:41:72:2f:29:4e:cf:
                    d3:81:6c:27:86:dc:5e:0a:ae:ac:5c:79:08:04:87:
                    65:ea:2b:03:ef:34:34:f3:1a:98:56:0b:57:55:d5:
                    c9:28:23:c2:63:c2:82:e0:0f:c1:82:97:71:4d:4b:
                    f5:3c:1e:dd:ad:9a:9d:9d:67:50:d5:5d:37:3c:36:
                    51:e5:61:1a:a6:16:84:0e:7d:c1:74:bc:0e:fb:e2:
                    46:6d:de:67:8b:93:6b:c2:9f:6e:28:87:ea:6d:37:
                    70:f3:6d:5f:5f:77:d5:78:1f:71:0f:3c:8b:a0:93:
                    8d:89:0f:62:1d:11:d4:63:e1:09:51:07:e3:ee:d0:
                    b7:04:28:86:8f:96:b3:fb:a7:75:b5:51:ee:03:a0:
                    81:e0:65:9a:52:78:87:71:0a:8c:d4:86:12:79:85:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:43:31:87:91:BF:E7:1B:8B:99:70:0F:7D:C6:F2:87:2E:A2:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8fb3f4a2-43fe-4eca-8e6a-ee88d83e77b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:e5:bc:79:47:77:12:d2:44:70:53:56:87:87:87:d1:b6:
         2b:82:d8:87:4c:d9:a8:79:cf:0f:93:9e:c9:84:7c:89:1c:17:
         8a:f3:65:fb:27:f8:d0:28:4c:1b:11:ad:d4:e3:22:e4:f9:66:
         82:a4:d9:bd:b1:60:c7:50:cd:f9:3a:de:d2:e0:32:25:bb:a3:
         14:09:10:fd:90:d1:db:7f:98:f8:43:9d:18:a4:9e:bd:30:31:
         f8:7b:db:3f:a8:af:d7:37:94:72:38:9e:75:f8:b1:3d:d8:1e:
         37:71:11:c5:66:ea:d6:3c:e0:91:f8:8f:af:39:0d:c8:9e:34:
         a4:1e:d8:6c:ed:c0:19:13:b9:41:f3:a0:72:c8:3e:e0:4c:25:
         be:cd:ea:03:cf:d7:1d:1d:75:0b:f7:b5:c0:6f:e1:01:58:e3:
         8d:f5:dd:99:67:09:4b:f2:78:18:3b:82:5e:26:11:3d:2b:8f:
         2f:de:33:cd:5a:37:80:a5:33:f6:be:74:ae:79:fc:ba:fd:dd:
         c1:42:c0:05:61:5c:6f:ae:c1:fe:b9:ed:1e:31:d6:df:b7:1d:
         3e:95:d4:02:9a:75:73:02:4a:f5:d2:bb:37:5f:44:8f:92:c1:
         58:c4:3f:80:41:b4:54:f8:ef:66:a5:8d:fc:cc:5b:c7:65:af:
         1a:6a:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:04:46 2025 by rpki-client