Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
File:                     938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa (raw, json)
Hash identifier:          GC6x9iTD7bs+xw/US3/HZSOSNaCxCY9et/8aEsFc1EU=
Subject key identifier:   F1:77:1E:A8:E9:94:D4:7F:F8:B9:4E:21:31:1C:65:11:59:18:85:DD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E41AE573B209F7A6ACFC09F36FD2C00B3735147
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
Signing time:             Fri 17 Oct 2025 22:51:32 +0000
ROA not before:           Fri 17 Oct 2025 22:51:32 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.194.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:41:ae:57:3b:20:9f:7a:6a:cf:c0:9f:36:fd:2c:00:b3:73:51:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 22:51:32 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=74d662bb20e127c58cb2f60d15ff6bdb6023772e19796db4c3c38b04668a1ab2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:93:90:84:6b:f4:5f:bc:15:88:9a:72:78:
                    0a:0e:a5:ae:f4:8e:e5:4a:d5:a2:eb:a0:11:62:ff:
                    42:97:c8:94:db:43:97:9a:83:f3:72:fc:35:a5:3a:
                    24:42:62:f4:a1:1c:2d:f2:e0:6c:2d:d1:85:9d:bf:
                    df:44:a6:b9:ed:61:56:2c:2f:20:fe:25:3e:ac:f1:
                    25:b6:82:e1:5d:d7:62:16:a4:0b:b6:fe:11:4c:81:
                    f0:96:da:4c:dd:49:d9:a5:d4:5d:48:ff:23:5e:19:
                    be:c4:a2:7f:b0:6f:bc:36:9e:4e:f1:be:76:de:6d:
                    e5:2a:da:40:cc:81:77:fd:05:39:bd:96:66:48:8e:
                    eb:d5:cf:d9:e6:57:31:49:30:c4:0b:47:33:c4:ff:
                    09:7a:fd:33:88:d5:50:75:d1:83:95:b2:89:2b:ef:
                    48:d6:42:29:67:c8:45:3c:99:cc:48:a4:e4:7b:5d:
                    5c:50:1e:3c:3f:f8:ce:8a:ba:af:9d:16:c6:0c:39:
                    2e:f4:20:bf:59:ec:75:a1:75:a5:0e:f2:ad:c5:d5:
                    92:59:3c:b6:a1:13:d5:97:5e:21:63:8e:46:6d:7e:
                    c5:9d:c4:82:ac:9f:56:eb:89:9c:ff:16:eb:16:ce:
                    6e:96:c9:13:ec:40:20:88:c6:35:f0:42:f3:9c:df:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:1E:A8:E9:94:D4:7F:F8:B9:4E:21:31:1C:65:11:59:18:85:DD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         04:17:69:db:bb:a4:69:94:8a:4b:d4:5d:9a:ba:25:75:03:e9:
         ac:41:eb:63:52:ec:81:a4:ed:d0:0e:cf:df:10:56:39:9f:9b:
         ff:e1:4f:76:22:5e:d5:2a:b4:ce:e6:fc:aa:aa:ec:36:66:25:
         30:71:82:7d:bc:cc:ef:3b:7e:fa:01:3b:96:9f:a0:8d:f0:b1:
         9f:91:66:0e:55:f1:d6:94:2e:80:02:89:dd:7a:98:4e:ae:92:
         65:78:ed:5b:d7:18:71:f3:10:7b:7b:b2:87:52:38:e7:07:ef:
         8b:9f:7a:f9:1a:84:ef:7e:2e:e1:0f:24:29:85:00:bc:83:eb:
         79:31:f1:68:02:d1:42:62:6c:e2:3d:7c:94:c5:bb:1a:44:87:
         c2:52:79:16:30:3e:42:b7:a1:0e:57:fe:e1:9e:2f:c8:b1:c4:
         cb:8e:cf:a2:44:7d:4d:36:d0:cb:63:15:e0:6f:92:4f:ec:8f:
         9c:08:14:ef:70:7e:cb:b7:b2:db:c1:58:2d:ea:d3:4c:23:64:
         98:aa:db:50:68:f9:9a:d5:f9:d5:20:9f:12:49:f5:38:e6:61:
         8d:15:e8:95:d0:fe:ff:50:1c:83:dc:27:36:0a:e0:e7:9c:ee:
         50:ed:c4:05:63:64:72:28:22:fa:36:8c:ed:d7:d1:a8:45:14:
         ab:c0:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:34 2025 by rpki-client