Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e654f3c9-4aa3-4430-8b1e-6c2c4e042a5d.roa
File:                     e654f3c9-4aa3-4430-8b1e-6c2c4e042a5d.roa (raw, json)
Hash identifier:          6XtQRMg8NrYR2eXo7Xq+z+L+/2+sgeAy2AhKpLf6Y/k=
Subject key identifier:   DF:0E:67:49:18:15:9B:59:63:A1:22:CD:07:07:19:13:FD:A8:F2:A3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1D9EF3ADA89308E343FEB70430DD271F66D901B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e654f3c9-4aa3-4430-8b1e-6c2c4e042a5d.roa
Signing time:             Wed 20 Aug 2025 00:41:45 +0000
ROA not before:           Wed 20 Aug 2025 00:41:45 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        150.222.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:f3:ad:a8:93:08:e3:43:fe:b7:04:30:dd:27:1f:66:d9:01:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 20 00:41:45 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=f61fd6851b19d48355e86f9f360d7af459be6eb20a4a80b8b13baa541c643dff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:5e:2d:fa:6b:63:45:37:45:d6:87:6c:9d:
                    0e:3c:31:9d:a9:ed:5c:e4:63:7d:74:18:71:c3:b3:
                    33:87:5d:d7:99:6e:95:90:c5:9d:fb:38:ef:c4:07:
                    da:39:d2:ed:45:f3:74:3a:a5:c8:d8:46:9e:6d:c5:
                    0c:bd:8e:d2:8f:89:86:0b:b8:72:ea:d2:02:84:f1:
                    1e:00:db:26:9b:0d:01:a7:30:fa:d4:ce:b5:ef:39:
                    66:4c:d4:cb:ac:4f:52:3e:6b:74:e9:70:a6:64:af:
                    6c:9e:dd:51:77:89:7a:4d:cf:ed:d7:62:cb:53:45:
                    97:af:86:d0:f4:7b:3b:93:6d:a2:6a:6b:0a:63:3f:
                    28:e0:45:e3:81:ee:00:27:0e:87:9f:15:24:44:99:
                    4f:03:a1:62:62:41:ec:c3:2f:15:e1:49:34:3f:ea:
                    a8:b4:64:0d:c4:b4:9b:06:ea:ed:ea:85:49:ba:9e:
                    94:c8:13:05:bf:03:91:63:02:e6:6a:ea:c9:41:ed:
                    35:dd:4b:8e:44:63:53:0f:72:4f:0b:95:7d:72:98:
                    71:cf:16:62:72:00:48:b0:a7:b6:44:66:7a:71:3a:
                    a2:68:91:09:75:21:dc:cb:1a:5d:ba:99:d1:8d:2a:
                    e2:b9:56:1b:41:4a:01:8e:be:1a:82:66:73:d3:e2:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0E:67:49:18:15:9B:59:63:A1:22:CD:07:07:19:13:FD:A8:F2:A3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e654f3c9-4aa3-4430-8b1e-6c2c4e042a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:3c:36:fc:03:07:c2:77:ab:a5:8c:4e:4e:34:17:30:4e:
         e1:9e:9c:b6:aa:30:aa:da:34:16:ff:b8:41:12:ec:dd:ea:05:
         ca:48:67:bf:2b:c5:09:b2:83:52:2f:67:58:be:86:5d:c7:67:
         72:16:b0:59:4d:54:cd:81:2e:90:29:3d:7c:c8:12:e2:21:49:
         f9:de:8c:20:0c:39:e0:dc:b7:c7:eb:49:1f:1b:08:5d:13:77:
         18:f5:60:ad:39:59:b6:c0:df:a9:e0:5b:7a:70:71:fb:79:14:
         76:40:91:1d:e6:d8:12:45:e1:4c:28:f3:13:33:59:74:99:be:
         7d:c6:36:72:aa:04:92:9d:9d:53:4f:67:dd:d1:e1:2f:78:0a:
         87:36:97:de:fb:0a:05:e1:8e:50:f6:5f:a1:8d:3f:d9:4b:46:
         b4:d0:a4:d0:e0:0f:a4:5d:ba:c3:55:5e:3d:c9:ae:42:da:89:
         20:d9:3e:5d:29:af:25:e5:71:b6:1b:f1:09:c0:d6:03:d6:87:
         22:08:0c:90:fb:e9:e3:5a:59:56:89:94:b4:93:c5:7d:f4:7f:
         3a:9c:4a:71:ca:94:dd:f4:a7:0e:4c:e7:4d:9b:13:a5:ca:ca:
         8a:b8:ea:a7:32:c3:aa:03:03:05:f9:51:8c:0c:b1:cd:c1:96:
         f6:9a:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:40 2025 by rpki-client