Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a14bd8f4-7b8f-4cf2-bcc1-b7fc7f34a7b6.roa
File:                     a14bd8f4-7b8f-4cf2-bcc1-b7fc7f34a7b6.roa (raw, json)
Hash identifier:          xAqLuwvoUW7DmYP+urFdNuLhTylZymPMbGDYUfUQDKI=
Subject key identifier:   7E:69:33:2A:B2:97:98:B6:DF:12:97:22:FF:75:B4:5D:78:11:9C:AC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       271F01B2DDA29CF213E0F8280F923220617BFBC8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a14bd8f4-7b8f-4cf2-bcc1-b7fc7f34a7b6.roa
Signing time:             Mon 20 Oct 2025 12:00:06 +0000
ROA not before:           Mon 20 Oct 2025 12:00:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.163.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1f:01:b2:dd:a2:9c:f2:13:e0:f8:28:0f:92:32:20:61:7b:fb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 20 12:00:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=b17be71f394389a424ab3ac8cb891eff785ceec0da249d591c0dd856ae338333, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:a8:eb:89:58:93:58:0e:c3:cf:15:89:5e:
                    38:08:96:5e:9a:9c:da:75:de:28:8e:18:d3:d9:54:
                    f6:e4:30:63:aa:99:32:e7:14:13:65:50:d3:55:53:
                    1e:9c:d4:69:22:9a:bf:65:85:0b:24:2b:28:23:5b:
                    7c:03:4d:9b:3b:9b:af:88:b1:75:3d:87:14:bc:7d:
                    dd:7c:6f:ad:bf:6a:69:93:31:68:52:1e:83:ac:d9:
                    79:1a:50:f8:ca:da:12:07:bb:67:68:b7:1d:38:c0:
                    a4:20:c2:ee:9a:42:d1:11:94:1f:ee:71:07:99:14:
                    b4:4b:18:c3:de:c6:91:f4:ce:37:08:07:60:2e:08:
                    04:4c:51:88:cf:87:17:38:c7:73:ce:86:16:33:19:
                    19:4b:fd:39:53:01:b3:ec:25:2e:02:ec:83:cf:39:
                    54:7c:c7:9e:0d:53:44:03:23:31:55:97:46:9f:30:
                    e4:d4:97:16:81:f7:d3:a7:6d:60:53:64:a6:8d:2e:
                    30:be:75:f7:49:6d:79:60:76:27:75:3f:b5:ea:ad:
                    2c:8e:f8:64:e3:a0:f2:15:ce:08:24:7a:ab:0c:ca:
                    e9:28:16:a9:95:02:ae:d7:09:6e:3b:21:65:55:a1:
                    2d:e0:89:12:85:a5:0f:07:f5:e4:5f:0f:89:fa:53:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:33:2A:B2:97:98:B6:DF:12:97:22:FF:75:B4:5D:78:11:9C:AC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a14bd8f4-7b8f-4cf2-bcc1-b7fc7f34a7b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.163.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:1d:b6:ce:81:9c:a4:fa:72:f7:2a:d5:9f:21:b1:84:93:
         81:62:99:e1:b9:89:dd:a4:7a:d3:0a:62:c8:16:1f:1d:57:96:
         cd:15:b8:97:40:7b:83:1a:fc:2e:a5:7e:ae:65:0f:3b:57:9d:
         3e:1b:8d:05:61:bd:0b:2c:4a:da:a8:2d:32:69:ab:c6:ac:a2:
         b4:f3:28:60:97:39:25:8d:c1:44:02:76:e2:c6:8b:ba:9a:32:
         64:4e:24:c1:1a:2d:a5:8f:20:58:e4:53:8e:38:9e:6a:8f:41:
         3f:1c:dd:74:60:56:9f:dd:58:3f:59:22:e1:d1:ec:c6:7e:c9:
         08:0e:1b:03:fc:2f:13:d1:24:2d:21:47:4b:ea:97:0a:d4:d1:
         3c:de:a8:77:c8:9e:98:fd:28:66:1d:60:9d:30:dc:72:1d:35:
         c3:3d:7f:b7:52:be:ec:c4:f7:50:f1:15:bc:36:1e:21:a3:af:
         85:fe:7d:d5:d1:2e:ed:c7:eb:b3:27:c6:e5:58:6d:52:a3:d0:
         f7:cb:c3:8f:6c:e8:42:f3:03:30:02:a3:b3:9e:26:4e:97:2a:
         37:05:ee:16:c3:f3:f1:7b:76:93:d4:5b:ca:f6:4e:77:7e:f6:
         64:d3:bb:49:9f:52:07:09:42:7c:d8:0f:4b:6d:8f:c3:d9:a2:
         ad:90:ec:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJx8Bst2inPIT4PgoD5IyIGF7+8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTIwMDA2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMTdiZTcxZjM5NDM4OWE0MjRhYjNhYzhjYjg5MWVmZjc4
NWNlZWMwZGEyNDlkNTkxYzBkZDg1NmFlMzM4MzMzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2eqjriViTWA7DzxWJXjgIll6anNp13iiOGNPZVPbkMGOq
mTLnFBNlUNNVUx6c1Gkimr9lhQskKygjW3wDTZs7m6+IsXU9hxS8fd18b62/ammT
MWhSHoOs2XkaUPjK2hIHu2dotx04wKQgwu6aQtERlB/ucQeZFLRLGMPexpH0zjcI
B2AuCARMUYjPhxc4x3POhhYzGRlL/TlTAbPsJS4C7IPPOVR8x54NU0QDIzFVl0af
MOTUlxaB99OnbWBTZKaNLjC+dfdJbXlgdid1P7XqrSyO+GTjoPIVzggkeqsMyuko
FqmVAq7XCW47IWVVoS3giRKFpQ8H9eRfD4n6U2cJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfmkzKrKXmLbfEpci/3W0XXgRnKwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ExNGJkOGY0LTdiOGYtNGNmMi1iY2MxLWI3ZmM3ZjM0YTdiNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADo3IwDQYJKoZIhvcNAQELBQADggEBAEp1HbbOgZyk+nL3KtWfIbGEk4Fi
meG5id2ketMKYsgWHx1Xls0VuJdAe4Ma/C6lfq5lDztXnT4bjQVhvQssStqoLTJp
q8asorTzKGCXOSWNwUQCduLGi7qaMmROJMEaLaWPIFjkU444nmqPQT8c3XRgVp/d
WD9ZIuHR7MZ+yQgOGwP8LxPRJC0hR0vqlwrU0TzeqHfInpj9KGYdYJ0w3HIdNcM9
f7dSvuzE91DxFbw2HiGjr4X+fdXRLu3H67MnxuVYbVKj0PfLw49s6ELzAzACo7Oe
Jk6XKjcF7hbD8/F7dpPUW8r2Tnd+9mTTu0mfUgcJQnzYD0ttj8PZoq2Q7PQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:33:32 2025 by rpki-client