Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3c7b4f6-1d1c-4a94-8ec5-47b326ae565d.roa
File:                     f3c7b4f6-1d1c-4a94-8ec5-47b326ae565d.roa (raw, json)
Hash identifier:          j/rfo5o6GJv/hSSWFEdGlCeyiLNq41er18VUIFgKPwo=
Subject key identifier:   06:44:EF:20:2A:8F:E0:FB:BA:C8:CE:11:80:1F:AD:F4:9D:14:2C:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D99A05859F27FB5D0B284BBE2EBD7507FDDC8DB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3c7b4f6-1d1c-4a94-8ec5-47b326ae565d.roa
Signing time:             Wed 15 Oct 2025 23:06:08 +0000
ROA not before:           Wed 15 Oct 2025 23:06:08 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        143.204.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:99:a0:58:59:f2:7f:b5:d0:b2:84:bb:e2:eb:d7:50:7f:dd:c8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 23:06:08 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=1ead4595af533613531c6c0c7be76bc39be4c05f2a1994bab81b5a5da7f9384a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:2e:ae:56:2c:47:9b:99:30:3f:2c:d0:2d:
                    63:5a:48:1a:86:3e:d0:58:d4:aa:80:4f:8f:92:6f:
                    62:b3:fa:7f:5f:6c:6b:28:8f:63:f4:07:82:90:aa:
                    55:8b:0b:fc:87:17:ac:b7:5b:ee:4d:e4:29:07:60:
                    60:d9:c9:c8:57:92:8e:7d:df:5f:2c:c9:f4:27:a3:
                    7d:fe:18:f9:47:0f:ec:44:97:56:aa:cd:8e:01:fb:
                    05:bd:ac:83:7b:1b:d1:93:fc:61:47:20:f6:dd:3e:
                    c2:23:18:23:1a:b7:d8:b1:6e:20:38:b2:8c:f2:be:
                    1b:f9:9f:f5:6b:15:3f:d3:57:aa:a6:6c:7e:41:2d:
                    ef:ea:5e:91:88:c4:c0:25:22:de:d0:90:5f:1e:0a:
                    3b:0c:ab:e7:22:89:af:3f:ac:94:a7:23:58:c4:3b:
                    b6:e0:0a:e5:2b:f9:29:27:db:69:49:7e:2d:fa:d4:
                    44:97:dd:2c:7c:ae:ce:c3:a7:7e:18:ef:7f:f2:10:
                    6f:19:a0:10:82:80:76:b3:02:84:72:d0:70:ea:6b:
                    3d:38:1e:f3:58:45:8f:a2:80:b1:e4:e5:04:b5:2c:
                    35:c4:06:b8:21:2d:df:c7:6e:83:9d:5d:94:ab:cc:
                    59:fd:10:3e:1a:40:7d:ca:c2:22:78:bd:51:97:d4:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:EF:20:2A:8F:E0:FB:BA:C8:CE:11:80:1F:AD:F4:9D:14:2C:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3c7b4f6-1d1c-4a94-8ec5-47b326ae565d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:21:3e:5f:93:09:e7:42:fc:5e:af:71:9a:db:d3:c5:fa:24:
         b7:71:18:ae:f2:2d:d3:c2:af:3f:b0:d4:d4:a5:e0:69:72:63:
         c8:f8:2e:f9:e7:6e:a5:81:b5:f8:36:12:ef:4b:ef:c2:50:18:
         8e:34:e2:dd:e6:db:25:d7:71:c2:1d:56:be:ae:b4:44:f2:3c:
         e7:ee:a6:74:ad:ec:79:0f:57:a0:48:8b:ea:77:eb:00:11:8d:
         7a:54:60:7d:d4:70:02:ad:54:74:34:d5:86:3a:f8:e4:6a:2e:
         8f:d0:91:4a:18:7c:d1:78:fe:de:13:eb:a0:7a:f9:ac:ff:89:
         3b:a9:17:36:f1:38:ef:c8:9c:a1:8a:4d:20:20:a6:a3:6d:04:
         ef:73:fc:dc:5c:26:09:0e:04:19:4b:6c:52:c7:7e:f7:05:b4:
         32:e0:33:78:dd:f0:41:bf:a1:fa:ec:5e:05:2d:5a:9f:a7:8b:
         42:62:5e:1f:22:89:48:22:1a:25:52:15:0c:7b:dc:5a:03:a2:
         91:0c:c5:c2:0a:57:5a:9f:6f:1b:c2:13:92:14:19:b9:84:85:
         c7:e1:e8:7a:27:42:6c:e6:e7:7c:41:f2:f0:05:08:e0:a6:0b:
         c7:45:3d:be:1f:c8:7c:81:16:8e:a8:30:99:aa:e5:46:ec:53:
         ab:ab:66:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbZmgWFnyf7XQsoS74uvXUH/dyNswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjMwNjA4WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWFkNDU5NWFmNTMzNjEzNTMxYzZjMGM3YmU3NmJjMzli
ZTRjMDVmMmExOTk0YmFiODFiNWE1ZGE3ZjkzODRhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChpy6uVixHm5kwPyzQLWNaSBqGPtBY1KqAT4+Sb2Kz+n9f
bGsoj2P0B4KQqlWLC/yHF6y3W+5N5CkHYGDZychXko59318syfQno33+GPlHD+xE
l1aqzY4B+wW9rIN7G9GT/GFHIPbdPsIjGCMat9ixbiA4sozyvhv5n/VrFT/TV6qm
bH5BLe/qXpGIxMAlIt7QkF8eCjsMq+ciia8/rJSnI1jEO7bgCuUr+Skn22lJfi36
1ESX3Sx8rs7Dp34Y73/yEG8ZoBCCgHazAoRy0HDqaz04HvNYRY+igLHk5QS1LDXE
BrghLd/HboOdXZSrzFn9ED4aQH3KwiJ4vVGX1F4dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBkTvICqP4Pu6yM4RgB+t9J0ULJwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2YzYzdiNGY2LTFkMWMtNGE5NC04ZWM1LTQ3YjMyNmFlNTY1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACPzHYwDQYJKoZIhvcNAQELBQADggEBAFEhPl+TCedC/F6vcZrb08X6JLdx
GK7yLdPCrz+w1NSl4GlyY8j4LvnnbqWBtfg2Eu9L78JQGI404t3m2yXXccIdVr6u
tETyPOfupnSt7HkPV6BIi+p36wARjXpUYH3UcAKtVHQ01YY6+ORqLo/QkUoYfNF4
/t4T66B6+az/iTupFzbxOO/InKGKTSAgpqNtBO9z/NxcJgkOBBlLbFLHfvcFtDLg
M3jd8EG/ofrsXgUtWp+ni0JiXh8iiUgiGiVSFQx73FoDopEMxcIKV1qfbxvCE5IU
GbmEhcfh6HonQmzm53xB8vAFCOCmC8dFPb4fyHyBFo6oMJmq5UbsU6urZgc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:02 2025 by rpki-client