Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0623f14b-9478-4ef8-8f8a-ad4187997f8a.roa
File:                     0623f14b-9478-4ef8-8f8a-ad4187997f8a.roa (raw, json)
Hash identifier:          /MXwjUwGiLoj8DT3BXSdE2TxZOUJRz+bLOZ711ClGXs=
Subject key identifier:   7B:0D:38:ED:C2:08:31:75:EA:DC:3D:A8:E0:7A:E1:D3:6C:95:9E:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0C1DAE0C6DC231E991817E67670E31F8ED9FBA9C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0623f14b-9478-4ef8-8f8a-ad4187997f8a.roa
Signing time:             Wed 24 Sep 2025 20:49:08 +0000
ROA not before:           Wed 24 Sep 2025 20:49:08 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1d:ae:0c:6d:c2:31:e9:91:81:7e:67:67:0e:31:f8:ed:9f:ba:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:49:08 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=62d516b2f0e4e08847038a394f80320bc717e330856969d8a855fa4f6dc55c75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:6d:89:25:64:39:f0:37:0a:46:64:e3:dd:
                    19:d6:b0:0f:e3:32:42:e1:03:e5:bb:25:cc:4b:f6:
                    f8:56:c8:88:31:08:97:b7:47:7e:e6:99:c9:34:6a:
                    57:d9:7a:43:ad:bf:85:22:7e:51:51:67:91:68:3f:
                    53:79:92:15:dd:9a:55:7b:ad:17:5a:cb:bd:38:f8:
                    88:2b:80:b6:f6:cf:17:45:74:2c:5e:19:ec:bf:1a:
                    b6:80:cb:b5:f4:99:90:f9:5c:cf:76:29:0f:7b:5f:
                    b7:84:ee:2c:eb:70:ec:22:37:b7:e1:77:ef:b7:c7:
                    1b:47:cd:a7:91:08:33:48:4d:04:72:c7:cc:7e:8e:
                    af:44:ed:b2:fb:1e:71:ce:e8:84:66:44:6d:af:d4:
                    0f:06:e1:0f:a1:8c:10:31:6d:2c:21:ad:7d:f8:89:
                    47:2d:32:3d:77:c2:d5:d0:5b:42:50:b7:fe:93:00:
                    27:d0:d6:e4:e6:d0:56:ed:60:7b:5e:88:eb:5f:2e:
                    a5:9c:64:ab:bf:db:54:2c:1b:70:fd:b6:c5:0f:ee:
                    95:8c:69:6b:f3:09:b1:ff:e9:7b:96:ca:94:9a:d3:
                    35:56:be:0f:58:0c:6c:4c:3a:90:ae:86:f3:7b:2e:
                    ae:95:31:38:14:8c:e3:ec:e7:cb:55:42:63:a9:86:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0D:38:ED:C2:08:31:75:EA:DC:3D:A8:E0:7A:E1:D3:6C:95:9E:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0623f14b-9478-4ef8-8f8a-ad4187997f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:73:60:3c:a5:99:a6:0b:cb:e1:c2:4b:7c:cc:b0:98:c8:e5:
         42:a0:aa:5c:fa:29:0b:03:ec:42:b4:84:94:a2:b5:1d:f2:07:
         39:ea:ef:79:62:6f:81:ca:5e:f8:55:a4:7c:6c:7a:20:68:e2:
         94:2e:0b:be:71:67:ad:82:13:cf:22:4f:e4:30:c0:30:4c:40:
         a9:ce:91:86:e8:4c:1f:32:aa:5c:a4:b3:62:98:17:d5:2a:fc:
         f4:a3:ff:74:17:30:be:8e:fb:e6:2f:db:2d:ae:85:a3:7b:f5:
         24:40:14:aa:9f:89:b6:32:18:2a:66:05:22:c0:15:60:ae:39:
         0c:44:8f:15:61:02:b9:32:c1:d5:5e:e2:ee:b6:f5:eb:5e:8d:
         9a:5e:85:ca:3c:6b:b8:95:d5:05:15:59:3a:3d:e9:75:09:0d:
         35:f8:62:36:3f:dc:d2:a1:88:b5:0a:f0:72:0c:d2:86:32:ab:
         ff:33:7a:33:84:68:4d:16:b4:16:a5:a1:35:8b:65:ed:8b:cc:
         97:87:79:7d:c4:63:61:61:8c:3f:e5:89:c3:bd:b9:14:8c:3f:
         0e:85:9b:b8:ba:04:cd:57:33:fe:75:79:13:0c:5d:b2:ba:9b:
         f6:4f:87:40:4c:60:ab:ef:fe:da:9f:cc:c6:03:4e:32:34:0a:
         46:b2:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:31 2025 by rpki-client