Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e3b9d6b-3644-43c8-a170-7a499aef445d.roa
File:                     3e3b9d6b-3644-43c8-a170-7a499aef445d.roa (raw, json)
Hash identifier:          zRtdyZcC9SyuA8sZ4od68b1WwMuRTMDB2TaWroRvgM4=
Subject key identifier:   EB:D7:96:A5:84:D5:0D:60:26:29:E0:F5:81:81:4E:B2:B2:08:6F:1C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       145034B0E5931EF5A9247750D924072E6B781285
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e3b9d6b-3644-43c8-a170-7a499aef445d.roa
Signing time:             Mon 15 Sep 2025 17:01:19 +0000
ROA not before:           Mon 15 Sep 2025 17:01:19 +0000
ROA not after:            Mon 20 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.163.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:34:b0:e5:93:1e:f5:a9:24:77:50:d9:24:07:2e:6b:78:12:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 15 17:01:19 2025 GMT
            Not After : Oct 20 23:59:59 2025 GMT
        Subject: serialNumber=2c9188d77e6ff593d9e2e4018742a6006e90a488f146abd9a1acf92d9eeffaec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:cf:17:a3:c1:3b:83:4a:87:b8:ae:c3:58:
                    36:e7:14:50:a2:42:7d:1a:f2:86:1f:89:03:cb:2e:
                    f1:5e:66:32:55:8d:e4:9b:b0:e5:c5:55:6f:79:4c:
                    cd:98:0e:ac:c8:cb:5e:79:5b:86:bc:52:88:30:b3:
                    c9:68:e2:f0:41:b0:a7:b1:a2:dc:6b:fe:bf:ab:f7:
                    b3:9b:0e:fd:f8:39:54:4e:ec:9e:c6:94:39:2f:76:
                    16:fe:d8:6b:da:2d:e7:90:eb:6a:f6:ba:d3:2d:d8:
                    c0:a9:0c:cc:67:92:09:53:7c:2c:5d:3f:92:89:74:
                    e0:0c:ed:34:41:96:2c:ed:99:9b:71:94:15:dd:4d:
                    5e:04:57:5a:2d:12:e4:19:4b:7f:eb:e6:39:83:5d:
                    df:a3:47:bd:05:14:fb:fb:26:8a:8f:e6:4a:a3:8d:
                    89:92:40:f3:cf:80:c5:21:be:87:3b:b8:f4:da:73:
                    a0:15:ea:67:b4:1f:40:6e:17:85:bb:8b:1d:5a:d0:
                    1b:99:21:5e:bc:0e:43:74:94:79:d5:70:52:d6:e1:
                    fe:64:f0:dd:5b:c5:e4:4a:ac:75:15:32:90:92:c1:
                    25:e4:59:fd:ca:8f:c9:64:d6:c4:a1:d0:8f:ad:69:
                    13:bf:f6:0b:c1:47:16:d4:d4:f7:af:66:8f:c7:d9:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:96:A5:84:D5:0D:60:26:29:E0:F5:81:81:4E:B2:B2:08:6F:1C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e3b9d6b-3644-43c8-a170-7a499aef445d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.163.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:08:57:2b:f8:aa:ad:2a:8c:fc:2f:44:c3:4d:0e:b1:37:10:
         8b:4f:4b:19:9b:40:e9:e5:1e:8c:d3:58:38:b9:67:ea:f8:12:
         2a:09:a5:b0:10:e3:39:f3:fd:db:09:c7:2c:c5:1a:8b:68:61:
         24:d8:0c:fc:f0:7e:7b:d8:af:dc:d6:10:8a:51:2a:65:8b:6f:
         ea:1e:6c:a2:f3:cd:aa:32:a0:f6:b6:a1:82:94:1b:2d:8f:70:
         c4:7c:1d:0e:5e:23:43:9e:0b:8c:2e:26:78:f3:a7:21:c7:5c:
         48:f8:c7:f4:b0:b3:13:a6:22:09:a8:65:bd:3c:7c:1b:bb:6d:
         e9:d5:45:96:26:60:3e:17:0e:a2:37:05:ac:ed:e6:05:d8:59:
         cd:6f:53:6d:27:7a:ec:ad:aa:5b:7c:19:fc:25:ca:31:78:3a:
         aa:0e:8c:4e:0e:8e:a5:ef:f0:ee:0b:5b:bd:a3:42:db:65:49:
         74:d0:90:a1:b0:14:5a:cb:34:82:c1:70:24:b5:81:54:fb:cd:
         e2:cf:7e:7f:56:41:61:56:f8:ea:40:77:e5:9b:81:b1:f2:fd:
         89:65:ba:f3:1e:03:68:c5:af:fb:9d:66:09:92:13:9b:08:cd:
         f8:1f:0a:d8:ed:37:d4:da:64:26:d6:b5:ea:b6:ff:f1:c4:47:
         2a:26:f3:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFFA0sOWTHvWpJHdQ2SQHLmt4EoUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTcwMTE5WhcNMjUxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzkxODhkNzdlNmZmNTkzZDllMmU0MDE4NzQyYTYwMDZl
OTBhNDg4ZjE0NmFiZDlhMWFjZjkyZDllZWZmYWVjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1d88Xo8E7g0qHuK7DWDbnFFCiQn0a8oYfiQPLLvFeZjJV
jeSbsOXFVW95TM2YDqzIy155W4a8Uogws8lo4vBBsKexotxr/r+r97ObDv34OVRO
7J7GlDkvdhb+2GvaLeeQ62r2utMt2MCpDMxnkglTfCxdP5KJdOAM7TRBliztmZtx
lBXdTV4EV1otEuQZS3/r5jmDXd+jR70FFPv7JoqP5kqjjYmSQPPPgMUhvoc7uPTa
c6AV6me0H0BuF4W7ix1a0BuZIV68DkN0lHnVcFLW4f5k8N1bxeRKrHUVMpCSwSXk
Wf3Kj8lk1sSh0I+taRO/9gvBRxbU1PevZo/H2es5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU69eWpYTVDWAmKeD1gYFOsrIIbxwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzNlM2I5ZDZiLTM2NDQtNDNjOC1hMTcwLTdhNDk5YWVmNDQ1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2o+AwDQYJKoZIhvcNAQELBQADggEBALQIVyv4qq0qjPwvRMNNDrE3EItP
SxmbQOnlHozTWDi5Z+r4EioJpbAQ4znz/dsJxyzFGotoYSTYDPzwfnvYr9zWEIpR
KmWLb+oebKLzzaoyoPa2oYKUGy2PcMR8HQ5eI0OeC4wuJnjzpyHHXEj4x/SwsxOm
IgmoZb08fBu7benVRZYmYD4XDqI3Bazt5gXYWc1vU20neuytqlt8GfwlyjF4OqoO
jE4OjqXv8O4LW72jQttlSXTQkKGwFFrLNILBcCS1gVT7zeLPfn9WQWFW+OpAd+Wb
gbHy/YlluvMeA2jFr/udZgmSE5sIzfgfCtjtN9TaZCbWteq2//HERyom8zs=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:21 2025 by rpki-client