Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06dd4bb2-ec7a-4e34-a97a-bc3273359d01.roa
File:                     06dd4bb2-ec7a-4e34-a97a-bc3273359d01.roa (raw, json)
Hash identifier:          iaYOZ7Co2nHTODi5w2pvfwf52j8Fq/PdpmYLDDuCF00=
Subject key identifier:   40:97:C5:39:41:3B:8A:A2:13:73:E5:3F:CE:7B:44:68:88:33:4B:DD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4906AD030F14613696AD7C1A63CEF13D3FE25D9B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06dd4bb2-ec7a-4e34-a97a-bc3273359d01.roa
Signing time:             Mon 22 Sep 2025 23:32:02 +0000
ROA not before:           Mon 22 Sep 2025 23:32:02 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.244.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:ad:03:0f:14:61:36:96:ad:7c:1a:63:ce:f1:3d:3f:e2:5d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 23:32:02 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=848f56b754163c0886f2096970a7e7bdf77c3c4944f164ada692702777df9f56, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:7b:dc:e6:d0:bf:ac:6b:79:31:37:52:d3:
                    ad:a5:f7:63:cd:3f:36:a3:10:f6:7e:bc:c8:07:83:
                    6d:70:20:05:e3:2c:0b:2c:3b:c3:6f:89:3f:6a:16:
                    63:95:80:ab:3a:73:dd:ad:f5:80:2b:2d:8e:db:5b:
                    ca:ec:7d:0a:3b:07:cf:91:47:95:45:a4:36:3e:7a:
                    b0:de:3c:00:7a:44:2b:8d:5c:ae:a4:e7:ff:7f:e9:
                    24:5a:77:24:30:9c:1e:e2:c7:bb:1e:74:03:bc:9f:
                    f3:a8:dc:85:ae:37:1f:41:86:69:ff:a2:df:0b:29:
                    54:56:82:aa:a0:04:95:a7:f4:16:24:03:5c:11:eb:
                    69:5f:ce:fe:b9:7b:e5:68:9c:6b:1f:fb:a7:b3:60:
                    5d:98:16:82:05:3e:a2:b0:d7:5c:ea:3c:af:a9:e7:
                    2a:45:82:5f:62:fd:fd:a7:58:fb:be:75:b0:f9:7c:
                    64:62:4e:8e:ef:c5:dc:85:ef:36:ef:38:74:f8:94:
                    4b:b7:be:11:cf:61:89:6e:f8:f2:14:ec:38:8e:8e:
                    35:1a:39:4d:17:ec:b8:02:12:12:67:fa:ca:80:07:
                    86:d5:71:7e:1a:57:28:4f:3b:c1:d0:73:7e:e8:07:
                    99:08:92:ea:06:9b:d2:be:b7:ce:63:ed:22:91:26:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:97:C5:39:41:3B:8A:A2:13:73:E5:3F:CE:7B:44:68:88:33:4B:DD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06dd4bb2-ec7a-4e34-a97a-bc3273359d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.244.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:fb:6d:89:41:b7:81:b5:c2:72:ae:1a:e3:ce:80:33:df:
         d9:ea:bb:f5:10:09:a5:9d:ad:95:66:e0:80:ce:c0:d0:68:6e:
         d2:ae:78:fd:d0:16:bb:ab:30:53:7c:a3:64:c7:1e:7a:00:31:
         cc:99:0f:9f:7e:da:b8:0d:19:88:1a:b1:0e:08:6f:8c:30:c1:
         5c:e6:13:2d:c8:a5:b6:7b:3d:1b:a8:ff:eb:9f:2e:a2:3a:48:
         58:d6:10:f8:34:3b:c4:42:47:c5:73:20:90:bb:c2:c6:2f:dc:
         70:04:69:7c:5a:4f:be:a7:b1:e3:54:5b:b6:0e:f8:2e:ba:63:
         ba:d7:31:95:6f:2e:85:4f:a7:56:fc:51:6f:ac:ad:32:3b:ae:
         59:93:c7:57:2e:2c:3d:e7:29:08:7f:af:52:27:e0:85:18:65:
         f3:84:4d:78:2b:73:ec:5b:0c:8c:64:23:3f:ad:3e:bb:cb:ea:
         54:97:78:42:05:b3:05:10:27:2d:60:6b:7a:7c:5f:e5:31:b6:
         00:64:0d:fd:70:12:71:ea:44:a2:7c:b5:72:c4:a6:ed:59:45:
         f1:12:a9:c0:50:2d:26:6a:c6:a0:94:f5:61:3e:1a:4b:de:20:
         d0:76:55:98:d8:ac:0e:8a:a7:fe:6d:22:0a:b6:38:87:11:06:
         ab:63:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:14:13 2025 by rpki-client