Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3e255dd-697d-4f1b-905b-4ebc54fd0b0e.roa
File:                     e3e255dd-697d-4f1b-905b-4ebc54fd0b0e.roa (raw, json)
Hash identifier:          ZdBew7OrIn9riPScMlQHQx5i2mphBqnSCVdAM2WMXSc=
Subject key identifier:   CA:60:6E:7C:B8:39:46:C3:04:63:DB:B0:4B:AE:DA:78:77:43:01:BB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2488B5ED6BC636D9972C7588916FCED678D03B02
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3e255dd-697d-4f1b-905b-4ebc54fd0b0e.roa
Signing time:             Thu 16 Oct 2025 23:36:47 +0000
ROA not before:           Thu 16 Oct 2025 23:36:47 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:88:b5:ed:6b:c6:36:d9:97:2c:75:88:91:6f:ce:d6:78:d0:3b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 23:36:47 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=b728ec1eee22ef0d8663551262211cf784ec879dc5bee192ca2a08f942270310, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:f6:e3:d8:c5:8e:f0:ba:54:ea:82:e2:d3:
                    bc:8f:98:b4:45:a3:85:5b:53:06:67:90:c7:ea:b0:
                    4b:ca:a9:af:8e:11:ba:2b:00:6c:72:ea:a6:3c:2e:
                    ef:fa:f9:e3:ed:cd:1b:83:2d:22:1d:d5:b4:11:9f:
                    a1:f4:92:2f:c8:7a:8f:aa:ef:cd:c2:32:ce:1b:31:
                    d0:fd:67:53:7c:d8:90:46:8f:ed:d8:4b:01:40:ac:
                    a1:74:9f:53:8d:5a:e3:41:62:51:a2:ba:a2:b8:f2:
                    2f:a8:97:ea:c7:9a:6f:22:21:1e:8f:b6:83:cb:08:
                    b1:49:3e:51:f9:38:c0:c4:88:e4:1d:3f:98:85:25:
                    d1:a8:e1:ea:81:09:cc:f0:b1:43:c7:02:87:7a:cd:
                    7e:d8:4e:74:de:9e:f4:de:c2:70:77:79:b1:cb:c5:
                    2f:34:99:8c:ed:71:34:55:38:69:2f:7a:03:ca:e2:
                    4c:11:54:30:eb:f4:ac:5d:39:11:92:13:e5:60:dd:
                    4c:19:bb:9a:8d:37:87:cd:90:bc:e2:68:fd:e4:0e:
                    ba:1c:b0:1c:1f:8d:a9:75:e6:e5:84:ae:4d:7d:d7:
                    1f:26:a6:2e:9b:a3:a4:ac:74:20:ac:38:3b:4c:09:
                    86:6a:05:c3:ba:fc:5c:50:99:9f:15:5b:c7:9e:63:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:60:6E:7C:B8:39:46:C3:04:63:DB:B0:4B:AE:DA:78:77:43:01:BB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3e255dd-697d-4f1b-905b-4ebc54fd0b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:ee:2a:eb:2b:29:3b:c4:f3:c1:22:6d:1f:b1:17:ed:27:
         2d:02:ae:cb:2e:c4:be:a7:23:36:66:04:c7:30:25:66:0b:a6:
         12:3d:79:24:56:81:aa:5a:bf:aa:1e:86:bf:1f:e2:51:61:fe:
         eb:d7:4f:44:73:ba:db:50:d1:59:65:f0:56:da:50:95:e0:ed:
         a7:e6:48:37:53:a5:96:c7:71:3f:a5:1f:46:d3:08:d0:37:3e:
         ad:38:c1:4d:96:c2:5b:41:d9:9c:1c:70:e6:e3:6b:2f:e8:4e:
         c0:4b:f0:8a:39:28:a4:ea:9d:d1:e0:01:d3:82:9f:24:5a:2f:
         0e:b9:81:fe:40:fa:75:11:b6:06:f4:0c:32:e1:f9:a0:75:d6:
         ae:77:0f:d6:97:b6:7f:f9:66:40:8b:ce:26:02:0f:e8:d7:64:
         fc:74:02:2f:2a:91:07:fd:89:ba:3d:d0:dd:ef:d2:45:eb:0f:
         ae:bb:d6:73:95:9c:a8:37:09:49:30:b1:77:2d:21:62:47:80:
         f9:7e:13:05:ec:c7:e3:a4:91:ce:f5:6f:13:a9:ab:3d:73:d9:
         cf:87:06:13:c9:2b:e5:11:e6:60:12:24:bf:da:fa:ab:a3:6a:
         98:f5:38:2d:e6:ae:37:96:c4:80:94:4c:71:d4:cb:55:c7:db:
         3f:ae:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:30:00 2025 by rpki-client