Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc84292e-f51b-4c84-b94b-47ca57a98fdd.roa
File:                     bc84292e-f51b-4c84-b94b-47ca57a98fdd.roa (raw, json)
Hash identifier:          yigm/6aE4V3VbKSGUaESfLJ51WnFKzD57FWzwIOyzrY=
Subject key identifier:   C3:AA:FB:06:A5:D3:F4:23:98:30:83:80:0F:49:B5:8D:34:F3:3A:5A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7F43C927D4F3B068CEC26D4ED376C93A36707929
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc84292e-f51b-4c84-b94b-47ca57a98fdd.roa
Signing time:             Sat 18 Oct 2025 05:52:33 +0000
ROA not before:           Sat 18 Oct 2025 05:52:33 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:43:c9:27:d4:f3:b0:68:ce:c2:6d:4e:d3:76:c9:3a:36:70:79:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 05:52:33 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=92a4e123a5601aa3bf6ae1e8f2624f1551ba01f232146e4224b43bd43d6ff576, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:73:c5:0f:c2:40:09:ef:02:a2:ac:76:a2:
                    c8:9e:07:2c:a1:95:b5:72:89:eb:aa:20:51:4a:55:
                    d5:3c:6a:50:d5:dc:ec:9b:ec:10:7f:e5:50:82:0c:
                    6b:f2:5b:66:4a:75:02:26:f8:46:84:99:a2:10:67:
                    dd:9e:3f:38:86:56:94:1d:7a:a6:ff:dc:86:9d:6a:
                    ee:3b:19:10:ac:9c:1b:11:f2:cd:17:8d:0f:01:30:
                    e3:c4:86:21:77:2f:0f:77:3e:08:2f:72:a3:8f:67:
                    89:c5:c3:62:eb:9c:34:ec:d6:b4:70:a5:33:54:58:
                    34:50:66:8d:95:2e:10:f8:9e:a0:60:a3:49:cd:45:
                    f8:35:21:f1:60:fc:c9:67:46:47:73:42:7a:5a:84:
                    86:26:dd:27:73:56:e1:68:e6:14:b6:98:cf:b9:71:
                    77:6f:28:1d:e7:e9:f0:0e:d5:b9:ae:41:17:3d:de:
                    61:7e:b8:75:9c:e6:c6:8e:c9:64:7c:ac:54:f7:48:
                    c8:34:c4:25:9c:5d:5b:c6:79:40:41:38:a9:45:86:
                    e8:47:1f:6a:96:d6:8b:81:5e:32:00:0a:40:e3:95:
                    bc:c3:c8:0b:3e:9f:ec:f9:ed:8a:3d:fa:9d:58:a0:
                    b9:df:56:00:34:ed:3d:8b:86:b5:56:82:40:1a:57:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:FB:06:A5:D3:F4:23:98:30:83:80:0F:49:B5:8D:34:F3:3A:5A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc84292e-f51b-4c84-b94b-47ca57a98fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:80:7d:f7:8c:a8:b2:b1:fe:ce:ca:3c:82:62:6b:99:d4:
         be:13:d1:91:88:d0:38:96:88:f6:24:2d:5b:f4:ec:07:6a:e8:
         a0:dc:40:2d:9e:39:37:b1:14:9a:d4:a1:84:41:c0:8b:48:38:
         6f:b4:ea:ca:9a:6e:c3:6b:d1:ce:df:e4:27:e0:92:b8:9f:a5:
         31:28:f4:be:9d:35:26:fd:32:e6:36:a7:6f:0a:f9:58:09:32:
         34:67:b2:34:fa:8e:28:29:67:9f:c2:8c:a0:bc:b9:c5:a5:8a:
         5f:d3:b0:73:df:26:4b:bb:7e:8c:55:44:de:80:2e:f1:f4:46:
         54:c1:15:9a:01:25:4b:f5:25:38:2b:59:3a:0a:2c:97:b6:f5:
         53:ff:26:52:3e:6e:ab:3a:4c:3b:f9:0a:ca:43:a1:71:15:4f:
         8a:2e:9e:3b:58:a9:bd:4a:67:58:39:3b:37:e0:ac:9d:82:26:
         60:a5:7a:8d:46:ac:3b:ee:fe:66:8c:33:ea:ef:57:d3:31:3d:
         9a:d9:ff:9c:48:74:4b:8f:6c:36:55:3e:f9:88:50:7f:81:51:
         33:43:9f:7b:6c:44:d0:47:2e:02:cf:1f:44:3d:92:41:46:f1:
         47:cf:1d:f0:37:67:65:a1:9c:8a:e8:a9:d9:16:a4:81:2d:34:
         12:cd:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:59:44 2025 by rpki-client