Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa
File:                     e2f91278-8951-4ed9-bea5-7300ead84196.roa (raw, json)
Hash identifier:          F3+CtqutnVpiIM6yNz/7VX6j6OwALkmaNq912CWwU5Y=
Subject key identifier:   7B:6A:C8:7C:5E:77:49:BB:6A:A5:28:19:66:8D:27:42:D1:E8:0F:60
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6509FB977BA71A1ED127DF368FF18E6EE289AA1F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa
Signing time:             Fri 17 Oct 2025 22:31:47 +0000
ROA not before:           Fri 17 Oct 2025 22:31:47 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.204.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:09:fb:97:7b:a7:1a:1e:d1:27:df:36:8f:f1:8e:6e:e2:89:aa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 22:31:47 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=25403f8f13da497ed4b61970c09665d92ee4c4a70b9582069c3e92c3e22d9cb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:79:d9:75:72:77:34:c0:25:52:cc:e8:e9:
                    fa:1b:f3:a0:a2:60:8f:c9:09:b9:9a:45:12:75:19:
                    60:5e:c6:10:08:d7:6a:a9:96:1e:2a:92:b8:e1:51:
                    bb:db:52:a4:7e:b1:2f:b7:4c:ff:0b:e3:6f:1b:6f:
                    ae:93:20:b8:2a:ac:22:9f:a9:9a:4a:52:41:94:74:
                    ec:34:a7:bc:58:33:77:49:80:ce:08:54:d9:68:ed:
                    9b:3c:55:21:ea:3c:5f:62:2a:42:57:58:0b:ed:84:
                    5c:ad:5e:a9:a7:68:4f:11:ad:04:8a:a2:3f:70:43:
                    75:1a:c8:76:94:5b:26:b5:65:33:dc:ad:d7:c8:de:
                    f1:c9:44:94:0c:d9:18:a1:ca:0c:14:c1:24:1f:4c:
                    38:61:c3:09:14:d3:ec:25:e2:96:1f:9c:08:50:95:
                    b1:d0:68:44:f2:b7:74:05:8f:a8:11:f2:8d:0e:37:
                    40:7b:19:36:64:1e:4a:45:a0:38:f3:d7:3e:15:b5:
                    3a:30:8e:58:77:fd:bb:ab:09:46:2b:9d:c0:80:11:
                    bc:48:87:92:53:14:a1:7f:1e:79:ed:67:95:a3:3c:
                    52:3c:a7:93:90:89:14:0e:03:a0:00:fa:da:4e:07:
                    fc:54:44:3d:36:4b:b4:a7:1f:50:31:10:39:07:a8:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:C8:7C:5E:77:49:BB:6A:A5:28:19:66:8D:27:42:D1:E8:0F:60
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f91278-8951-4ed9-bea5-7300ead84196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.204.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:70:b3:03:c9:84:6c:97:e5:47:99:a3:2c:fd:62:46:ce:1b:
         65:80:fd:24:23:be:4e:6e:8f:a5:d9:09:01:fc:19:bc:d4:4b:
         86:54:06:61:26:95:e3:a6:b7:08:78:aa:c0:4e:dd:5f:00:68:
         a9:95:a2:b8:ec:01:be:69:18:cb:b9:8f:0a:50:32:21:0a:7f:
         af:d7:35:2d:21:5a:23:32:24:b4:16:f4:d4:7b:d8:24:5b:e9:
         16:bd:df:26:7d:eb:50:cd:9d:30:c1:14:9e:ac:b1:eb:5c:b1:
         91:83:b1:0d:71:19:72:58:ae:57:5f:17:89:5b:f3:28:43:e2:
         60:c3:d5:44:d4:3d:7f:c7:d1:85:bf:5c:08:a6:a2:02:1d:5e:
         99:4e:27:a9:8c:8f:a5:af:9e:73:9f:0c:9b:68:61:bf:5d:23:
         5f:cf:b8:a3:e3:2d:0d:56:28:1c:51:e4:db:f5:f4:9e:7b:e2:
         5a:50:2e:d6:bf:69:dc:0f:c4:5b:a1:34:9e:d6:c7:24:97:82:
         85:da:ad:eb:c6:99:71:86:67:b2:39:c5:77:0b:89:c0:17:06:
         de:02:1d:6f:2b:66:06:e1:6b:7b:78:09:ab:70:4e:6c:35:d1:
         09:27:ac:ed:e3:ee:b6:c1:72:01:9a:ea:ae:15:4a:a6:33:eb:
         af:cd:88:68
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZQn7l3unGh7RJ982j/GObuKJqh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIzMTQ3WhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTQwM2Y4ZjEzZGE0OTdlZDRiNjE5NzBjMDk2NjVkOTJl
ZTRjNGE3MGI5NTgyMDY5YzNlOTJjM2UyMmQ5Y2IxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAxHnZdXJ3NMAlUszo6fob86CiYI/JCbmaRRJ1GWBexhAI
12qplh4qkrjhUbvbUqR+sS+3TP8L428bb66TILgqrCKfqZpKUkGUdOw0p7xYM3dJ
gM4IVNlo7Zs8VSHqPF9iKkJXWAvthFytXqmnaE8RrQSKoj9wQ3UayHaUWya1ZTPc
rdfI3vHJRJQM2RihygwUwSQfTDhhwwkU0+wl4pYfnAhQlbHQaETyt3QFj6gR8o0O
N0B7GTZkHkpFoDjz1z4VtTowjlh3/burCUYrncCAEbxIh5JTFKF/HnntZ5WjPFI8
p5OQiRQOA6AA+tpOB/xURD02S7SnH1AxEDkHqITfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUe2rIfF53SbtqpSgZZo0nQtHoD2AwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UyZjkxMjc4LTg5NTEtNGVkOS1iZWE1LTczMDBlYWQ4NDE5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI2zDQwDQYJKoZIhvcNAQELBQADggEBAGlwswPJhGyX5UeZoyz9YkbOG2WA
/SQjvk5uj6XZCQH8GbzUS4ZUBmEmleOmtwh4qsBO3V8AaKmVorjsAb5pGMu5jwpQ
MiEKf6/XNS0hWiMyJLQW9NR72CRb6Ra93yZ961DNnTDBFJ6ssetcsZGDsQ1xGXJY
rldfF4lb8yhD4mDD1UTUPX/H0YW/XAimogIdXplOJ6mMj6WvnnOfDJtoYb9dI1/P
uKPjLQ1WKBxR5Nv19J574lpQLta/adwPxFuhNJ7WxySXgoXarevGmXGGZ7I5xXcL
icAXBt4CHW8rZgbha3t4CatwTmw10QknrO3j7rbBcgGa6q4VSqYz66/NiGg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:23 2025 by rpki-client