Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1dc64e1-da80-4fa9-87ee-1821966ab9e1.roa
File:                     f1dc64e1-da80-4fa9-87ee-1821966ab9e1.roa (raw, json)
Hash identifier:          mtByTjOesLLvDbczzQik83K8bzJIdVA2w5B9gDl27no=
Subject key identifier:   08:DD:A9:90:78:08:A3:D7:C7:58:4F:61:0B:A2:3F:94:5F:99:99:BF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1D0A47D9ECFFB2F9FEB7A010ED895D05AE3BCC55
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1dc64e1-da80-4fa9-87ee-1821966ab9e1.roa
Signing time:             Fri 10 Oct 2025 16:29:25 +0000
ROA not before:           Fri 10 Oct 2025 16:29:25 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.180.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:47:d9:ec:ff:b2:f9:fe:b7:a0:10:ed:89:5d:05:ae:3b:cc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 16:29:25 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=ca7ae999366e29eb6232c434e8462962b47521db8c03d1078c01b4a2f314e05a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:ee:0c:23:f6:cf:0b:95:89:d8:03:31:5a:
                    63:82:0f:85:76:2a:6b:7b:a4:94:ad:eb:82:5f:6d:
                    20:79:00:4e:86:7e:19:19:83:3c:e8:c9:6b:bc:c4:
                    80:da:a2:9e:9d:9a:d3:f6:67:55:ca:8e:e7:e2:f8:
                    59:48:4c:ef:ee:67:ce:7b:a9:29:5c:2f:3e:c6:f6:
                    d4:89:7f:8c:c8:75:17:4b:53:d7:fe:cd:07:28:fa:
                    65:76:8f:af:c7:c5:d4:97:bd:30:45:ce:77:e2:ed:
                    19:dd:d4:5d:49:8a:e2:c3:6c:91:a0:00:b4:88:fb:
                    8d:f2:24:cb:e5:53:1d:51:eb:42:25:89:c7:b8:21:
                    6e:59:3f:5e:d7:41:2e:69:24:d7:02:e6:33:dc:13:
                    9f:87:0d:b1:d1:38:c2:f3:34:73:43:2e:1c:06:2f:
                    bc:1e:0a:b2:94:1e:50:6c:48:ce:61:a3:c5:c0:3f:
                    bb:94:ff:7a:6d:3d:03:04:3a:dd:dd:c7:be:5e:4c:
                    61:cd:82:23:29:f5:e9:c7:8d:51:71:ee:03:05:74:
                    b8:db:90:b9:f3:8d:7d:85:27:20:5c:0c:88:75:d3:
                    73:2e:7b:a0:8d:3a:7e:68:1f:ce:35:2b:22:2e:bc:
                    28:f1:fe:2c:55:b0:69:6b:8b:b1:a2:f0:a0:23:79:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:A9:90:78:08:A3:D7:C7:58:4F:61:0B:A2:3F:94:5F:99:99:BF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1dc64e1-da80-4fa9-87ee-1821966ab9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.180.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:27:61:93:ba:1d:66:9f:7e:92:48:e0:22:60:4d:ff:24:15:
         0a:75:a0:3b:be:48:3d:37:1d:da:21:be:7c:d0:e0:d5:f1:85:
         5b:de:58:8d:43:2e:98:5a:21:39:29:6b:4e:57:ae:fc:d5:99:
         9f:50:4a:53:bf:d5:d7:7b:4e:a3:44:43:4d:f3:d9:2f:96:e0:
         a0:5b:9e:ee:f6:94:1a:8d:c8:ea:c5:06:f6:16:5a:35:1e:34:
         59:0e:e6:03:bf:db:b7:c0:21:5f:54:fa:b9:fd:5d:b1:a0:0d:
         0c:ba:23:5b:25:93:89:82:65:e1:72:36:5d:dd:8b:8b:2b:84:
         27:d6:ee:7c:8d:54:07:7e:66:32:52:f2:2b:7b:a0:4d:47:88:
         96:62:34:7c:b6:a5:b3:a9:1c:69:56:ec:bd:2a:db:c3:cc:f9:
         d9:6a:a4:bf:85:5a:6c:bf:98:c6:76:d3:20:20:55:67:5f:30:
         33:20:5c:a9:51:9d:33:ac:47:2d:20:af:e3:82:37:90:ed:62:
         46:05:37:b7:1e:2b:65:04:26:70:03:3e:08:40:53:f7:57:74:
         3e:35:86:3f:73:7f:0e:3c:e9:17:37:c8:c4:9c:02:4f:19:01:
         03:40:58:99:3b:46:2d:4e:bd:66:07:9e:32:6c:9e:0a:85:e9:
         16:33:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:02 2025 by rpki-client