Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0343867-b911-4b35-b99b-b2c121f792d2.roa
File:                     f0343867-b911-4b35-b99b-b2c121f792d2.roa (raw, json)
Hash identifier:          3XKwbZve3y5Va9Czikrp22/J10eidTPw0qVgfxz+I4E=
Subject key identifier:   21:4F:E5:C2:E6:52:EA:B0:B6:55:17:0A:77:78:1B:AB:B1:E6:8D:DD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BDD3CFA05F312328AD4971D366DED568D504A24
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0343867-b911-4b35-b99b-b2c121f792d2.roa
Signing time:             Fri 10 Oct 2025 16:47:46 +0000
ROA not before:           Fri 10 Oct 2025 16:47:46 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.188.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dd:3c:fa:05:f3:12:32:8a:d4:97:1d:36:6d:ed:56:8d:50:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 16:47:46 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=f0179c54293583175176f06739e909b0d96e161f5fe835dc0d3b3450521317db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:ef:bc:18:9a:8d:4c:49:20:7e:ee:2f:10:
                    ca:4d:40:42:d0:48:21:79:ea:52:dd:34:61:c4:06:
                    df:a2:9c:43:ce:9a:3e:15:59:86:e0:2a:00:5a:67:
                    5d:de:52:7a:79:d8:0b:96:81:0b:f4:02:9d:88:e7:
                    6b:e4:84:33:23:dd:ab:56:ff:78:b2:99:ca:51:93:
                    63:3c:e6:37:82:eb:2a:7b:e8:1e:47:f5:1c:91:db:
                    b9:32:99:8c:6e:c3:4d:7a:72:ca:3c:90:61:cd:58:
                    22:e2:cd:c3:4f:03:3b:7e:9f:a3:98:ec:df:bd:cf:
                    19:bb:63:b3:d8:b8:e1:c4:00:3c:b6:26:fc:7b:3b:
                    02:46:4f:6e:05:f7:1e:5b:44:b4:49:cd:3e:ff:69:
                    6c:89:d0:2f:4a:98:9e:10:65:f4:6c:89:44:bb:09:
                    71:a7:ef:5d:60:4a:6b:29:81:ed:8b:1a:33:29:ad:
                    3a:2e:7f:9b:6a:c1:62:44:3c:37:e9:72:a9:22:cb:
                    25:8b:ad:c5:81:ba:42:ec:51:4a:30:3f:78:90:a8:
                    35:13:73:20:b0:b5:f3:ac:a0:27:f5:d3:96:a9:07:
                    35:22:15:0e:28:69:0b:84:27:ce:9c:a0:73:29:ab:
                    b0:25:a1:29:56:a9:5b:3e:7d:48:5c:39:07:dc:8c:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:E5:C2:E6:52:EA:B0:B6:55:17:0A:77:78:1B:AB:B1:E6:8D:DD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0343867-b911-4b35-b99b-b2c121f792d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         28:20:1d:06:a8:b1:73:cc:af:a5:0e:18:33:e7:1a:e3:72:93:
         49:2b:f1:3a:79:e5:38:41:3d:1a:11:80:71:b3:6e:10:3d:fa:
         f8:27:0c:3c:f3:48:5f:15:a5:d1:8b:d0:f4:51:f8:e1:aa:ac:
         e3:08:dc:eb:8b:f8:42:35:57:55:31:1e:7a:2a:17:9f:0a:3a:
         9f:82:af:a8:31:c9:eb:68:6b:a6:c2:55:59:7e:dc:7c:b4:26:
         a2:ea:cb:8d:fa:eb:95:d0:33:b3:23:6d:92:70:20:e4:44:01:
         ee:11:b7:f0:7e:14:df:ef:5e:30:1b:20:65:0e:fe:1f:d2:37:
         c6:f9:89:d1:2b:bc:f2:0f:32:fb:7f:b3:38:e5:d9:3c:cb:72:
         9e:19:ea:ed:50:c5:f2:bb:c1:d0:bd:45:07:26:9a:6e:f1:83:
         3b:f1:ce:f3:46:5c:f1:57:47:ab:e4:85:5d:b3:f8:3b:59:b6:
         43:8f:2a:a4:72:fc:70:1e:be:27:f8:bf:7e:91:75:f2:53:2e:
         2c:00:12:e6:33:6b:7a:ad:85:bd:20:6b:58:d5:96:54:b9:e3:
         46:dd:9a:99:d2:54:89:29:36:d2:56:62:42:1e:33:45:82:9e:
         d7:0e:fd:91:63:02:8f:c4:4c:d4:15:ca:35:2d:b2:c4:72:c4:
         49:66:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:28 2025 by rpki-client