Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc7547b1-0d9d-4f73-b9ab-2b78cd7efb01.roa
File:                     fc7547b1-0d9d-4f73-b9ab-2b78cd7efb01.roa (raw, json)
Hash identifier:          YQZL7ixmqnPtJBeYdLhXYyD/rrEaGci15aASNYYI8t4=
Subject key identifier:   6F:0D:55:A2:D0:A4:C6:7A:F6:3A:C6:BD:76:D3:BD:08:D1:CD:F7:93
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       669AA104338FFF57CD5EC4A4E70C4C470AF9C822
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc7547b1-0d9d-4f73-b9ab-2b78cd7efb01.roa
Signing time:             Sun 19 Oct 2025 12:26:15 +0000
ROA not before:           Sun 19 Oct 2025 12:26:15 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:a1:04:33:8f:ff:57:cd:5e:c4:a4:e7:0c:4c:47:0a:f9:c8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 12:26:15 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=747f9c757331539c2e16011cd8a0510a1d7503763c769bc659ba839e3e3898d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:a2:2f:2e:36:5b:45:0d:b3:6f:07:7a:dc:
                    4c:b1:12:e2:7a:30:d5:73:ff:01:29:21:ab:0a:c6:
                    3c:c4:4b:63:98:20:6f:13:c2:de:d8:de:54:02:f8:
                    7f:91:5e:6f:72:82:c2:97:a4:83:9c:5b:e1:18:eb:
                    4f:e8:e2:f3:c0:96:05:f3:18:b5:15:f0:2e:83:1a:
                    47:ff:8f:8c:c4:f9:e2:06:97:f5:58:92:7a:15:d8:
                    f3:ba:ea:22:35:08:6a:27:57:b9:b4:d0:4e:11:c6:
                    44:67:b8:a6:d2:89:88:4a:92:a9:c2:24:2b:2a:61:
                    4e:75:ae:b6:95:78:d4:1f:db:19:a8:cc:b6:f1:0a:
                    d5:f0:d3:e0:e4:54:ed:39:2d:0b:24:f3:f1:ad:63:
                    b9:7a:94:da:ed:6e:12:b1:8e:01:61:e6:31:5e:91:
                    b3:7a:25:b1:3e:02:67:f3:ba:d3:cb:59:b2:8d:5e:
                    ce:5a:94:54:9a:ca:83:15:1e:e9:59:37:8c:d2:ff:
                    18:23:2c:0b:69:00:9c:5b:94:7a:a9:af:b5:40:75:
                    e0:db:95:f6:fe:ab:ae:fc:a1:6f:d6:e5:be:34:24:
                    01:03:0b:20:21:33:f1:49:47:42:a7:ee:18:5c:bb:
                    53:a3:12:2d:e8:f2:b6:56:35:75:ff:77:84:8f:86:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:55:A2:D0:A4:C6:7A:F6:3A:C6:BD:76:D3:BD:08:D1:CD:F7:93
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc7547b1-0d9d-4f73-b9ab-2b78cd7efb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:2b:9d:c5:02:c9:1f:a5:3d:2b:eb:6e:43:50:5c:4e:06:
         79:34:38:a0:ea:68:a2:2f:86:c1:91:a7:3b:ef:b9:86:63:fc:
         79:50:a2:db:01:b2:a0:8e:b9:54:ba:3b:ac:2d:4c:71:c1:e5:
         2f:58:4d:36:bc:31:ee:ec:9a:ee:40:40:77:20:bd:c6:be:73:
         e2:be:21:fb:5f:e1:04:fe:b1:03:12:75:3b:cf:0b:0f:4f:69:
         d8:93:ae:fa:be:fe:05:81:aa:5a:dd:b3:e6:3d:b2:7c:0a:f0:
         b4:e0:53:c9:ab:03:3b:d4:7c:22:24:8a:6d:ea:ae:ae:d1:4d:
         10:ec:3a:e2:a9:81:dc:ec:1a:db:1e:ec:ca:4a:6c:24:db:7d:
         1e:fb:53:d3:ca:1c:48:1f:81:c3:e7:45:f6:f6:86:51:1c:a5:
         de:8a:97:5e:ae:93:de:6b:03:44:bd:0f:59:63:e7:69:2a:9e:
         1b:d9:2f:b2:fc:20:4e:14:aa:cd:e4:da:47:51:57:42:17:c6:
         6e:42:35:61:72:fa:af:93:f3:f4:86:a7:6f:d3:ff:bb:48:eb:
         0f:f0:a0:68:9b:1a:26:1c:e5:32:3c:1e:a2:59:d5:b5:c7:a3:
         0a:90:f8:7c:6a:45:b4:da:5b:e0:6a:5b:da:56:0c:74:29:0e:
         f5:91:d2:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZpqhBDOP/1fNXsSk5wxMRwr5yCIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIyNjE1WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDdmOWM3NTczMzE1MzljMmUxNjAxMWNkOGEwNTEwYTFk
NzUwMzc2M2M3NjliYzY1OWJhODM5ZTNlMzg5OGQxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3paIvLjZbRQ2zbwd63EyxEuJ6MNVz/wEpIasKxjzES2OY
IG8Twt7Y3lQC+H+RXm9ygsKXpIOcW+EY60/o4vPAlgXzGLUV8C6DGkf/j4zE+eIG
l/VYknoV2PO66iI1CGonV7m00E4RxkRnuKbSiYhKkqnCJCsqYU51rraVeNQf2xmo
zLbxCtXw0+DkVO05LQsk8/GtY7l6lNrtbhKxjgFh5jFekbN6JbE+AmfzutPLWbKN
Xs5alFSayoMVHulZN4zS/xgjLAtpAJxblHqpr7VAdeDblfb+q678oW/W5b40JAED
CyAhM/FJR0Kn7hhcu1OjEi3o8rZWNXX/d4SPho89AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbw1VotCkxnr2Osa9dtO9CNHN95MwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ZjNzU0N2IxLTBkOWQtNGY3My1iOWFiLTJiNzhjZDdlZmIwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEN4xYwDQYJKoZIhvcNAQELBQADggEBALGZK53FAskfpT0r625DUFxOBnk0
OKDqaKIvhsGRpzvvuYZj/HlQotsBsqCOuVS6O6wtTHHB5S9YTTa8Me7smu5AQHcg
vca+c+K+Iftf4QT+sQMSdTvPCw9PadiTrvq+/gWBqlrds+Y9snwK8LTgU8mrAzvU
fCIkim3qrq7RTRDsOuKpgdzsGtse7MpKbCTbfR77U9PKHEgfgcPnRfb2hlEcpd6K
l16uk95rA0S9D1lj52kqnhvZL7L8IE4Uqs3k2kdRV0IXxm5CNWFy+q+T8/SGp2/T
/7tI6w/woGibGiYc5TI8HqJZ1bXHowqQ+HxqRbTaW+BqW9pWDHQpDvWR0rI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:45:54 2025 by rpki-client