Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc54bcf0-e7ff-4d21-9bad-95a2b468416d.roa
File:                     dc54bcf0-e7ff-4d21-9bad-95a2b468416d.roa (raw, json)
Hash identifier:          bYpk0eAg08Wj9jiGaPEaqm8k6MWVZ38JvYsT1xVEzyU=
Subject key identifier:   44:3D:10:3A:A9:1B:D1:2B:96:54:0F:B5:17:1E:68:C5:AA:BF:59:10
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2561C7E42633F2F9245644CB097A28D587EC7FBB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc54bcf0-e7ff-4d21-9bad-95a2b468416d.roa
Signing time:             Sun 19 Oct 2025 16:30:21 +0000
ROA not before:           Sun 19 Oct 2025 16:30:21 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.67.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:61:c7:e4:26:33:f2:f9:24:56:44:cb:09:7a:28:d5:87:ec:7f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 16:30:21 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=15554a88e0c04a638abbfd97ba8ad16c7f527522e555c4bcd9def47fa6fdf64a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:96:1a:cf:d0:a6:3d:1b:8d:ac:ed:f5:96:
                    6e:5f:f7:ab:85:29:a6:18:fe:b6:23:53:58:b7:95:
                    97:4a:b5:97:73:01:7c:83:68:91:41:6e:ea:e9:b7:
                    f5:5f:b6:30:3e:99:08:61:ff:f5:b7:c5:ef:89:9a:
                    98:a3:c0:0c:f4:89:f2:ff:80:0e:88:7f:7b:55:e7:
                    58:cf:c1:cc:11:02:ac:cc:72:fc:5c:fa:3b:3d:8b:
                    ed:9e:86:6c:ce:30:a3:17:75:0d:db:bf:41:70:7c:
                    89:ef:10:c2:28:c2:38:15:29:1e:53:c3:45:2c:2a:
                    4f:d6:0b:fb:3f:26:cc:2f:c6:03:81:49:bb:8b:3d:
                    cf:2a:e0:43:0e:fd:1e:ff:06:11:94:07:b1:81:9e:
                    09:df:88:ee:5f:e9:ba:2d:27:ca:b8:08:c3:5e:c5:
                    54:55:d1:92:7a:05:c2:b4:77:aa:66:30:89:75:a1:
                    37:9f:11:82:23:81:c4:73:73:b7:43:b7:6b:1e:d4:
                    3d:82:02:d9:a4:ed:10:d7:94:2a:79:cb:b3:a8:c2:
                    11:e9:8c:4d:fa:d5:09:88:67:da:bf:b6:e7:69:b7:
                    26:79:ae:e3:b2:9a:43:a1:2a:36:bc:10:18:a0:c0:
                    56:84:1f:56:35:6b:a5:4b:f7:ef:c1:58:85:e0:34:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:10:3A:A9:1B:D1:2B:96:54:0F:B5:17:1E:68:C5:AA:BF:59:10
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc54bcf0-e7ff-4d21-9bad-95a2b468416d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:e7:f6:3d:99:53:32:d3:3f:83:26:cd:db:c7:1d:3c:0f:
         52:97:f3:96:16:0d:68:a1:b5:17:05:00:c3:0c:ca:a5:d8:19:
         5c:55:16:46:7c:71:4d:0d:4e:34:a9:ee:80:6d:b5:c8:23:81:
         98:cc:06:21:3d:a6:fb:a1:1b:51:26:a7:a6:35:39:a0:9c:42:
         64:60:1d:c8:9c:0f:8a:f1:01:b6:91:dd:50:8b:45:6f:21:0f:
         0e:5c:62:27:7c:b1:ef:41:65:d3:98:ce:eb:79:e9:bd:f5:77:
         c1:e4:0a:5d:c1:6e:a3:23:60:e1:f3:64:5a:51:c0:ca:13:3d:
         b2:52:8e:a7:f5:8a:87:c2:30:6e:5c:09:d8:c3:d5:6c:ea:1f:
         b5:dd:83:25:34:68:d1:a8:16:a6:4b:c9:3f:f6:9b:3b:6b:5a:
         43:87:96:a1:1f:e6:05:e5:96:38:f9:89:e1:fd:98:70:ed:8e:
         67:27:55:2d:92:34:eb:62:fa:c4:ef:55:7e:27:72:5c:f3:7a:
         e5:71:3a:95:30:ff:05:d6:a8:2e:f0:f0:21:71:3f:b7:f1:5a:
         1a:e7:d7:02:ba:12:ec:55:c7:ee:22:e6:99:17:87:25:a2:0b:
         8d:77:a7:c9:65:c2:c2:94:e1:d4:e7:db:04:9c:8a:cf:38:f9:
         60:23:73:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJWHH5CYz8vkkVkTLCXoo1Yfsf7swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYzMDIxWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTU1NGE4OGUwYzA0YTYzOGFiYmZkOTdiYThhZDE2Yzdm
NTI3NTIyZTU1NWM0YmNkOWRlZjQ3ZmE2ZmRmNjRhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8+JYaz9CmPRuNrO31lm5f96uFKaYY/rYjU1i3lZdKtZdz
AXyDaJFBburpt/VftjA+mQhh//W3xe+JmpijwAz0ifL/gA6If3tV51jPwcwRAqzM
cvxc+js9i+2ehmzOMKMXdQ3bv0FwfInvEMIowjgVKR5Tw0UsKk/WC/s/JswvxgOB
SbuLPc8q4EMO/R7/BhGUB7GBngnfiO5f6botJ8q4CMNexVRV0ZJ6BcK0d6pmMIl1
oTefEYIjgcRzc7dDt2se1D2CAtmk7RDXlCp5y7OowhHpjE361QmIZ9q/tudptyZ5
ruOymkOhKja8EBigwFaEH1Y1a6VL9+/BWIXgNBqFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURD0QOqkb0SuWVA+1Fx5oxaq/WRAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RjNTRiY2YwLWU3ZmYtNGQyMS05YmFkLTk1YTJiNDY4NDE2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASQ6cwDQYJKoZIhvcNAQELBQADggEBADYM5/Y9mVMy0z+DJs3bxx08D1KX
85YWDWihtRcFAMMMyqXYGVxVFkZ8cU0NTjSp7oBttcgjgZjMBiE9pvuhG1Emp6Y1
OaCcQmRgHcicD4rxAbaR3VCLRW8hDw5cYid8se9BZdOYzut56b31d8HkCl3BbqMj
YOHzZFpRwMoTPbJSjqf1iofCMG5cCdjD1WzqH7XdgyU0aNGoFqZLyT/2mztrWkOH
lqEf5gXlljj5ieH9mHDtjmcnVS2SNOti+sTvVX4nclzzeuVxOpUw/wXWqC7w8CFx
P7fxWhrn1wK6EuxVx+4i5pkXhyWiC413p8llwsKU4dTn2wScis84+WAjc44=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:08:25 2025 by rpki-client