Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa
File:                     f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa (raw, json)
Hash identifier:          76HhiVhgAZExT7wdV3lvcoWHwzaqD9kL4ma23Fq/qNA=
Subject key identifier:   F5:1C:D0:80:46:34:3C:E7:E6:49:56:EE:39:C5:47:11:DB:D5:D9:BE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       684CAE60CCC0229712F8A380F452C333B9D5BC40
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa
Signing time:             Fri 26 Sep 2025 16:51:38 +0000
ROA not before:           Fri 26 Sep 2025 16:51:38 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.152.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4c:ae:60:cc:c0:22:97:12:f8:a3:80:f4:52:c3:33:b9:d5:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 16:51:38 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=386558ffc0bb69b914131ae3251032e965958639d41379a98fa90a835b6dda39, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:2c:39:9f:29:e9:4d:1c:07:6b:f0:ae:18:
                    ad:fa:81:dc:0c:45:8b:4d:b8:46:04:04:ba:b1:21:
                    03:fc:91:cd:c2:17:e4:69:a9:6d:0f:48:1b:2f:6e:
                    5d:12:6f:87:35:d4:71:15:a6:cd:89:5c:59:e1:21:
                    85:94:24:6e:2b:8f:fd:e2:ee:dc:5e:33:13:f2:95:
                    1e:3a:d5:a3:32:c1:77:bd:12:47:96:e5:40:04:9e:
                    a6:48:84:a6:68:f7:9b:27:28:7d:a2:f4:16:67:ed:
                    00:46:8c:2b:ec:23:cc:bc:b8:a2:14:11:91:44:cf:
                    a4:5a:82:42:d9:ef:b5:ab:65:9a:76:c4:39:35:d8:
                    09:97:81:80:20:61:ca:eb:17:c3:42:d1:a3:a9:40:
                    3c:45:8d:2e:aa:7a:42:0b:82:29:91:2f:2e:5a:15:
                    10:93:5a:8c:d9:67:a4:3a:ac:3d:2c:e4:1a:e7:70:
                    12:c3:9b:cc:73:e2:18:ae:a8:b1:43:53:a0:3a:9a:
                    c9:35:6e:8c:cf:ac:ce:9c:f7:b9:a7:55:51:d1:74:
                    25:14:5e:e8:17:0b:2a:7c:c6:dc:67:99:ea:0a:c2:
                    13:3c:7e:e3:30:e9:fd:93:22:c9:74:7d:47:b7:13:
                    f1:e5:83:5f:07:60:79:1f:dc:66:b9:0a:6d:c4:cb:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:D0:80:46:34:3C:E7:E6:49:56:EE:39:C5:47:11:DB:D5:D9:BE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.152.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:ca:bc:05:27:90:0d:75:d6:9e:e2:a4:31:77:d1:9f:f2:ab:
         99:ee:af:97:97:a1:4d:47:39:3f:f8:58:0d:4b:f2:ac:53:70:
         5b:4c:9a:dc:47:8e:2e:8e:05:19:e4:fb:4e:8e:0a:a5:36:82:
         5c:5b:e4:a3:45:d3:03:c3:45:9b:48:ca:df:a4:a3:1d:0a:39:
         42:20:7d:4b:b9:0f:a4:52:52:39:82:94:e4:3e:62:df:c9:dd:
         4e:8a:ec:c7:59:18:5c:cd:6f:a9:2c:03:8a:66:02:76:3c:fc:
         fa:93:6f:07:87:1e:33:0a:31:9b:7b:a5:a1:d8:fd:ff:c0:3a:
         ad:01:14:38:8b:57:01:e1:85:c5:25:8c:05:3a:cc:3c:82:75:
         52:da:9b:5d:52:91:91:32:71:da:71:44:67:06:a8:f0:66:c0:
         26:ac:63:46:b9:53:5b:ae:ab:5f:05:e8:24:be:a3:31:73:fd:
         c2:8e:bc:e6:cc:93:4b:36:b2:ae:ce:72:73:67:2d:3b:69:93:
         98:61:81:64:b0:42:a4:90:76:e3:ca:ca:e0:1d:f6:0c:83:f8:
         e6:7f:23:3f:69:65:e1:d3:bf:75:35:fa:b3:5b:ce:3f:ca:97:
         40:a7:e6:f1:ed:23:6e:a0:09:ad:fd:ae:53:4f:33:aa:46:19:
         69:6b:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:36 2025 by rpki-client