Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b225791d-09fb-41aa-87f5-115d965ec1f7.roa
File:                     b225791d-09fb-41aa-87f5-115d965ec1f7.roa (raw, json)
Hash identifier:          9mnyqjDOrYC67OLi3QPGtz69v8VHcrHf8KxWU6uEtZI=
Subject key identifier:   F3:2D:C3:29:15:A5:9A:8D:41:C6:5C:77:87:B6:D9:66:6E:31:CA:D0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       14DDFB31347E317BFDA5F33BC1C03A5EA4083F4E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b225791d-09fb-41aa-87f5-115d965ec1f7.roa
Signing time:             Sun 19 Oct 2025 09:20:11 +0000
ROA not before:           Sun 19 Oct 2025 09:20:11 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dd:fb:31:34:7e:31:7b:fd:a5:f3:3b:c1:c0:3a:5e:a4:08:3f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 09:20:11 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=435201c2a9ade3b3f2760b21da333b9e7d9622e139a2d571fef1ca9ad0dd2234, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:d8:b6:e0:ac:bd:82:2a:5c:0d:59:cb:8a:
                    cc:f9:b7:14:a8:88:16:45:27:37:b7:74:5c:f9:51:
                    7b:13:c7:10:14:2e:3e:ca:9f:0d:f3:01:bc:87:2d:
                    25:96:0d:df:44:61:5d:2c:d1:c7:1e:1e:a4:0a:d5:
                    1e:5e:93:16:e3:6d:f1:38:d2:05:ce:af:b5:99:95:
                    0b:5e:8e:96:2a:67:90:d9:38:6a:00:67:3e:cc:38:
                    87:1e:27:27:bc:7c:8d:dc:ac:94:49:f4:fa:73:cc:
                    62:05:1e:57:ad:50:f8:ca:89:15:3d:b4:f7:f6:f5:
                    5e:28:05:01:29:e8:cf:e6:fb:2d:9b:b0:a9:66:fe:
                    dd:83:4f:30:7b:03:0b:91:c2:27:97:27:d8:51:2d:
                    f6:29:35:a6:a9:50:73:f2:87:74:d8:dc:fe:fe:c0:
                    00:92:9b:54:1d:9b:f5:46:b2:83:05:5f:ff:f3:91:
                    6f:82:5e:37:2f:7b:d5:b9:84:b5:6a:55:3f:ff:16:
                    40:dc:87:93:47:dc:c1:20:40:b1:38:1a:85:fc:15:
                    2d:13:5b:42:d3:aa:ae:8c:27:6b:ea:01:f8:22:69:
                    66:0c:a2:e4:f4:05:24:31:5d:9f:3b:52:a5:9d:46:
                    41:70:4f:62:cb:61:35:1f:a4:be:83:a6:a0:c6:05:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2D:C3:29:15:A5:9A:8D:41:C6:5C:77:87:B6:D9:66:6E:31:CA:D0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b225791d-09fb-41aa-87f5-115d965ec1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:e5:a6:09:61:bd:14:1f:1f:e7:af:f5:59:72:76:0f:c2:
         bb:02:03:63:e4:a8:8a:7b:46:f3:00:c2:f9:35:84:49:41:6f:
         f0:d8:3f:15:00:3a:61:f5:2c:34:a9:b1:8b:09:1c:33:33:d8:
         2a:32:6c:de:c5:fb:e6:c6:06:c6:9d:2e:25:2b:0b:6f:ba:1b:
         24:50:88:d0:a0:3b:6c:f8:d0:86:e1:33:21:3c:40:25:40:66:
         0d:05:e7:9d:c8:a8:33:20:72:62:e1:44:b6:0a:6a:b7:0a:24:
         3e:7d:09:87:ee:a4:ce:cd:7a:3a:ec:4d:30:8d:c9:07:99:67:
         c7:32:66:8c:59:2e:86:71:5d:18:10:70:e9:2f:35:31:b1:4d:
         4e:14:36:46:51:e3:f5:6d:2a:06:11:7e:a2:63:e0:15:38:04:
         63:d9:11:92:8d:b4:07:80:47:5a:6d:e7:2f:b2:7f:63:d6:28:
         e3:e4:af:b7:e6:3a:0d:ca:c8:7d:eb:e6:00:d0:f9:86:9a:98:
         21:a4:4b:6b:02:60:20:a3:06:90:f4:96:80:85:1f:2e:85:67:
         5f:47:75:fa:92:99:39:cf:07:d4:b0:4f:0a:7b:fa:71:de:95:
         94:e2:6f:b6:77:9a:50:f5:f7:91:9b:50:b6:1f:21:c9:aa:19:
         e2:1b:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:55:54 2025 by rpki-client