Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6033780-f58e-4e3c-83fd-7ed7556a2330.roa
File:                     c6033780-f58e-4e3c-83fd-7ed7556a2330.roa (raw, json)
Hash identifier:          Xu43d506Y33EjuYrMzQCApB94Yb4lafKwZzrcrmB/qQ=
Subject key identifier:   5F:28:1A:F7:CC:39:C0:75:EA:61:09:47:40:56:08:81:D1:82:B7:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       44234903A4C11C9515106F72608CDCA88B3D5474
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6033780-f58e-4e3c-83fd-7ed7556a2330.roa
Signing time:             Fri 10 Oct 2025 16:21:37 +0000
ROA not before:           Fri 10 Oct 2025 16:21:37 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.160.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:23:49:03:a4:c1:1c:95:15:10:6f:72:60:8c:dc:a8:8b:3d:54:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 16:21:37 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=b27b7aea50a3bf5cd350dad95168633ea8c8c88d7535525c8ebcca463b11253b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:99:53:8e:4b:40:2b:bf:7a:17:1e:2f:24:
                    59:c4:14:8d:1c:38:3d:b0:2f:cc:d1:96:2e:60:e8:
                    57:ac:68:c9:d4:10:d9:5c:fc:02:36:46:74:62:a5:
                    fa:9c:99:72:08:b0:93:b3:d7:d9:7c:7c:c5:91:71:
                    bd:31:1f:bb:22:8d:e8:a0:69:e3:64:ec:5a:bb:1e:
                    3c:12:05:22:bd:7b:ce:5c:59:6f:63:df:bf:26:6a:
                    16:b0:88:14:ff:b0:fa:4d:fb:28:e7:55:8d:e1:22:
                    d3:ff:f7:62:8a:58:9c:54:ad:25:7e:83:4c:cd:ed:
                    b0:1d:74:56:b1:9c:20:e4:1a:26:39:e7:b9:1c:43:
                    f9:a6:73:e7:4b:02:2f:fd:4e:81:3f:60:8f:e5:d2:
                    e2:bb:35:5c:b2:6a:8d:cd:79:bf:58:60:04:15:e3:
                    90:6c:86:6e:8b:1d:2a:37:5a:41:62:87:92:d2:53:
                    25:9a:bb:f3:1c:20:49:41:fd:0d:34:30:cc:e9:41:
                    a2:48:c0:9d:86:31:9a:b4:99:d0:00:92:c1:d4:7f:
                    24:2e:d3:ab:70:78:92:1a:4c:81:0d:2f:3e:dd:64:
                    fd:e8:f9:25:a9:5e:9b:01:ba:61:b1:84:09:11:58:
                    ba:50:d9:4b:e5:3c:16:cd:ec:37:01:15:f8:26:4e:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:28:1A:F7:CC:39:C0:75:EA:61:09:47:40:56:08:81:D1:82:B7:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6033780-f58e-4e3c-83fd-7ed7556a2330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:84:e0:94:1b:11:df:7e:54:e4:91:7e:03:af:24:80:18:
         d4:a3:75:dd:f3:43:da:ec:21:b4:7f:a2:55:d1:7d:f9:eb:13:
         ed:c4:bc:59:c0:e6:80:47:23:00:3a:4e:98:d9:0d:d7:ca:25:
         ea:ed:e6:90:b3:a5:37:a0:4d:11:da:f6:f8:4e:c1:51:e3:a4:
         d9:70:fb:d8:9e:d6:89:26:71:3c:5c:d4:8d:51:d8:e0:e6:cc:
         e8:74:fb:58:76:fc:53:68:fb:17:6f:4b:c6:41:36:c9:9a:da:
         6d:d8:af:1a:84:75:81:ae:1d:7f:72:1e:40:fe:ab:e9:be:0d:
         00:95:8e:6a:a0:91:eb:3e:1b:1f:10:bc:df:dd:23:0a:70:6d:
         c9:04:04:e7:45:e9:1e:9d:3c:9f:16:0f:fe:da:d4:60:d5:de:
         ab:6c:e2:06:80:cd:2e:bc:62:75:30:2e:8a:49:c7:52:60:27:
         4d:5c:be:03:16:91:f3:ad:dc:1b:49:02:08:3c:8d:1b:17:d0:
         1c:7a:f6:3b:e7:f3:63:84:3b:c3:79:a9:fb:07:15:ab:be:10:
         4d:ff:87:c8:80:36:29:02:a1:4e:e9:aa:c7:be:dc:31:85:59:
         00:74:3e:14:ae:19:e0:83:95:e9:9f:26:9a:d4:10:b5:04:9b:
         71:bc:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:04:56 2025 by rpki-client