Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
File:                     393be035-f403-42bb-8667-f8b643af501c.roa (raw, json)
Hash identifier:          SGZMLhjHpkX/VyVgVUKg/L9/0M71xkd9c8ZOJ6fXC9k=
Subject key identifier:   EE:99:CA:E2:7F:37:A4:73:C6:F1:5A:DA:9E:86:7B:2C:3A:6C:41:5D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       789CEBB650F56756EC608C26027CAD245D5CCD2D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
Signing time:             Fri 19 Sep 2025 16:40:30 +0000
ROA not before:           Fri 19 Sep 2025 16:40:30 +0000
ROA not after:            Fri 24 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.226.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9c:eb:b6:50:f5:67:56:ec:60:8c:26:02:7c:ad:24:5d:5c:cd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 19 16:40:30 2025 GMT
            Not After : Oct 24 23:59:59 2025 GMT
        Subject: serialNumber=c852a92ba426c794d718bbfb22cc069677da7ae3b8b29ef1f32b887173dc6e6c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:af:b8:40:0e:10:c2:8d:62:83:d6:9d:04:
                    6f:fa:d6:91:07:ed:7a:38:24:6b:1f:87:72:28:6c:
                    a1:4a:02:b5:95:74:83:f0:7a:13:17:0d:d7:e8:89:
                    11:89:30:d1:02:a4:18:8d:50:fe:d4:89:29:75:f9:
                    ad:ca:a8:e9:52:4b:33:4a:7c:14:8a:42:7e:99:22:
                    d4:3c:5b:ec:1f:55:fb:34:6f:50:f1:3d:8c:c8:7b:
                    9c:45:57:0e:93:59:96:82:51:94:ee:0f:a8:93:81:
                    3d:c9:28:4c:6b:da:a6:4e:8c:bd:6c:a1:08:23:9a:
                    d0:0c:93:cf:cb:7b:7a:94:39:bd:0f:78:61:44:6b:
                    9a:69:3a:83:d3:42:91:da:6d:b0:fd:ff:5b:be:e8:
                    43:23:7b:5d:95:7a:4c:90:12:47:54:a7:3e:dd:c6:
                    b5:e0:b7:a7:93:10:17:4f:af:10:44:70:ab:5f:7b:
                    e9:4e:19:1a:b4:c6:71:55:67:e4:a1:97:89:9b:5b:
                    28:f0:f0:f5:26:25:c4:11:74:41:bb:30:e4:60:36:
                    18:14:ea:df:c7:ef:7c:07:16:7a:a3:cd:1f:a3:a8:
                    2d:94:ad:69:9f:a1:89:c0:3e:04:ab:79:da:68:57:
                    38:de:7e:53:5a:33:97:4d:c6:22:3d:d3:a5:c3:37:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:99:CA:E2:7F:37:A4:73:C6:F1:5A:DA:9E:86:7B:2C:3A:6C:41:5D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         43:24:ff:67:b8:2f:a6:e1:06:69:cf:0b:79:78:be:31:1c:27:
         be:a6:10:64:6f:9b:35:ed:b0:d6:f7:97:43:22:ba:7f:81:57:
         9c:aa:f7:87:44:4b:01:c4:37:21:5e:e4:42:1e:12:f0:a8:24:
         1c:cb:fb:dd:44:0a:2f:27:fe:b9:de:dd:d5:6e:03:0b:84:d9:
         7b:8f:c5:8e:7c:51:62:82:7d:03:04:3a:dd:b3:c5:df:e2:0b:
         36:da:fb:bd:52:75:15:b7:39:9d:d3:0b:55:c7:30:db:af:6b:
         11:c4:ac:08:44:8f:06:57:43:83:60:c9:8a:f6:f2:bb:d6:c1:
         e9:56:29:7d:51:ef:cd:ac:9f:26:4b:6a:da:d9:6b:9f:26:7e:
         4b:84:bd:41:de:02:21:7e:2c:45:a0:f5:01:95:50:f5:d7:51:
         75:2f:5a:2a:2f:1c:d5:e3:93:a5:38:8e:92:30:23:02:95:d0:
         7d:0f:06:db:a8:b9:15:51:6a:27:82:a6:93:5f:d0:e7:5f:4f:
         8b:1b:5f:39:66:47:fa:28:15:c3:d7:7f:a3:a1:ea:ea:00:22:
         19:01:1f:a4:77:b6:5d:b9:2f:ed:0b:d5:5b:29:8e:00:31:aa:
         ea:a9:be:33:c3:b4:e9:a7:9d:b3:0d:24:b4:fc:0d:f0:62:27:
         d8:ec:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:07 2025 by rpki-client