Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee330e9-bbd7-4308-966f-e120a4b7ce5e.roa
File:                     eee330e9-bbd7-4308-966f-e120a4b7ce5e.roa (raw, json)
Hash identifier:          +asz7NN97rlQ4R8aOrO73k+OdZhQ+CNGANmSkiewcfQ=
Subject key identifier:   F4:9A:9B:96:CD:87:5D:EE:3B:7A:65:01:36:04:3A:34:3A:04:6B:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       305892E35C7F3891A2D59BCACE92CD0B9965F7BE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee330e9-bbd7-4308-966f-e120a4b7ce5e.roa
Signing time:             Sun 19 Oct 2025 19:21:27 +0000
ROA not before:           Sun 19 Oct 2025 19:21:27 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:92:e3:5c:7f:38:91:a2:d5:9b:ca:ce:92:cd:0b:99:65:f7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 19:21:27 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d24abc839fb0d4888c6e72c80d8be0d5d866c58f46b19d780470c0461e652d69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:8d:6d:f9:70:2c:e3:b1:a7:2a:ea:c3:85:
                    0c:10:d5:47:14:3d:b5:07:c9:6a:b2:6a:ae:35:f8:
                    1f:48:93:cc:bf:c2:1d:f3:6e:2a:0c:cc:bb:b2:48:
                    14:27:af:d1:06:98:91:82:66:7c:e4:d2:cf:04:55:
                    dd:86:e6:e5:20:06:22:c6:8a:e2:33:47:3a:6d:27:
                    6c:e0:3f:05:ff:09:7d:eb:d1:ae:bd:64:23:cf:8b:
                    b5:5d:30:04:85:25:61:70:da:c7:bf:8b:71:4e:b8:
                    ce:8a:cf:3e:20:6c:33:d1:4f:a5:1c:7b:3b:34:d9:
                    70:45:e8:46:a6:23:fa:5d:04:f1:25:59:9e:3f:a5:
                    2b:7b:60:1a:37:cb:e4:56:7c:1f:c0:ec:ab:cb:ad:
                    6a:ca:5d:af:07:56:6d:c6:4d:08:67:e9:4f:72:6a:
                    10:98:c7:64:0d:78:f9:0e:31:64:35:b3:14:d3:24:
                    3e:67:05:be:57:a1:78:9c:83:22:bd:b7:f0:ff:c0:
                    be:d8:50:d3:ff:67:18:fd:d7:0c:2f:11:90:15:94:
                    ba:a0:d4:4f:79:a3:0b:41:ac:ec:03:40:d4:4c:3d:
                    46:56:9a:cb:2a:44:12:fd:4b:b0:36:ab:a2:63:6c:
                    6b:4a:01:1e:7d:40:72:34:b7:fe:df:5e:c9:25:b5:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:9B:96:CD:87:5D:EE:3B:7A:65:01:36:04:3A:34:3A:04:6B:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eee330e9-bbd7-4308-966f-e120a4b7ce5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:39:a9:76:aa:0a:fc:e7:51:a2:62:af:22:13:95:70:71:
         83:16:fa:3b:71:37:83:c9:5c:82:bd:c8:b3:37:c6:7b:a0:e5:
         e0:88:cd:bc:91:f1:80:40:2e:ac:26:a5:8c:2c:d0:27:9b:fa:
         20:31:07:01:ad:2b:ed:8d:31:07:f3:a1:77:dd:80:56:ff:57:
         9f:83:65:db:87:9a:eb:f5:e9:f5:83:e4:71:4e:d1:b9:56:13:
         7b:51:9f:aa:a7:b5:e0:fc:e1:2a:3c:8f:c7:85:db:e8:95:21:
         37:1b:e2:de:1f:06:ba:25:84:6b:29:ab:98:62:04:e7:f9:e0:
         2e:84:40:47:89:d0:6e:c1:71:77:af:64:43:ed:68:2e:fd:77:
         6a:cb:f9:65:f2:01:69:13:e0:a5:a0:eb:64:09:6c:fc:19:18:
         13:cf:0a:51:de:39:7d:63:09:12:96:66:fd:f4:b3:8c:e0:c0:
         dd:9c:41:4c:aa:77:50:5b:05:21:ef:7a:35:80:a3:b6:e5:d1:
         fb:0c:66:8c:71:73:85:64:9e:29:c0:2e:7b:94:15:69:a9:ac:
         97:46:35:f8:34:ef:b2:d2:85:a3:9c:32:a6:05:a2:d7:1f:10:
         4a:2a:d2:ae:cb:5c:ac:2e:fb:51:26:05:68:2c:e8:1d:fd:2b:
         16:e9:4a:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMFiS41x/OJGi1ZvKzpLNC5ll974wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkyMTI3WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjRhYmM4MzlmYjBkNDg4OGM2ZTcyYzgwZDhiZTBkNWQ4
NjZjNThmNDZiMTlkNzgwNDcwYzA0NjFlNjUyZDY5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5aI1t+XAs47GnKurDhQwQ1UcUPbUHyWqyaq41+B9Ik8y/
wh3zbioMzLuySBQnr9EGmJGCZnzk0s8EVd2G5uUgBiLGiuIzRzptJ2zgPwX/CX3r
0a69ZCPPi7VdMASFJWFw2se/i3FOuM6Kzz4gbDPRT6Ucezs02XBF6EamI/pdBPEl
WZ4/pSt7YBo3y+RWfB/A7KvLrWrKXa8HVm3GTQhn6U9yahCYx2QNePkOMWQ1sxTT
JD5nBb5XoXicgyK9t/D/wL7YUNP/Zxj91wwvEZAVlLqg1E95owtBrOwDQNRMPUZW
mssqRBL9S7A2q6JjbGtKAR59QHI0t/7fXskltSnZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9Jqbls2HXe47emUBNgQ6NDoEa1wwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2VlZTMzMGU5LWJiZDctNDMwOC05NjZmLWUxMjBhNGI3Y2U1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN4V0wDQYJKoZIhvcNAQELBQADggEBAAMcOal2qgr851GiYq8iE5VwcYMW
+jtxN4PJXIK9yLM3xnug5eCIzbyR8YBALqwmpYws0Ceb+iAxBwGtK+2NMQfzoXfd
gFb/V5+DZduHmuv16fWD5HFO0blWE3tRn6qnteD84So8j8eF2+iVITcb4t4fBrol
hGspq5hiBOf54C6EQEeJ0G7BcXevZEPtaC79d2rL+WXyAWkT4KWg62QJbPwZGBPP
ClHeOX1jCRKWZv30s4zgwN2cQUyqd1BbBSHvejWAo7bl0fsMZoxxc4VkninALnuU
FWmprJdGNfg077LShaOcMqYFotcfEEoq0q7LXKwu+1EmBWgs6B39KxbpSpI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:02:47 2025 by rpki-client