Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa
File:                     102caa67-f908-4605-9862-ab28b2ff2cd5.roa (raw, json)
Hash identifier:          ZnnFS0ZqFG7ohQCW0Uiahrroc/H/TQkQ01gB+bHHhvQ=
Subject key identifier:   7D:CF:11:8F:A4:8F:2D:53:13:DC:6D:C6:D9:F3:7B:FC:8A:43:D4:8C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1815C61BA7270723EDE448A6BFB913B542C33C6E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa
Signing time:             Fri 17 Oct 2025 23:42:41 +0000
ROA not before:           Fri 17 Oct 2025 23:42:41 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:15:c6:1b:a7:27:07:23:ed:e4:48:a6:bf:b9:13:b5:42:c3:3c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 23:42:41 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=e06c10ed400f838d5091f7aeb103bdf5b13e441ef0ff3946ab5b7628114d7919, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:79:18:6e:b9:ec:02:87:e9:30:70:ed:c9:
                    7c:bb:72:22:00:ac:5a:54:a9:07:bc:a0:35:7c:10:
                    c6:74:f4:eb:84:72:6c:b3:e9:cc:1e:08:71:ca:8a:
                    72:e2:a4:50:7e:d2:e2:70:b6:8e:2b:be:8e:fe:2e:
                    d4:b2:da:61:f1:b9:e2:a5:ed:d5:4e:17:4f:38:83:
                    3d:52:da:b1:f2:6b:3a:a8:35:1a:3a:19:f5:22:30:
                    0b:0d:0a:59:75:c3:96:45:a8:98:ca:2b:fa:f9:4c:
                    7f:de:54:1f:11:41:69:b7:90:ff:34:c3:45:01:86:
                    bb:b6:ed:c4:ca:57:47:f4:c4:f9:48:8b:f2:18:40:
                    57:99:22:18:ed:da:89:7e:12:2a:82:8d:0c:34:a3:
                    a4:73:a8:dc:e9:eb:a0:d5:33:93:3c:ec:44:27:e8:
                    5f:85:8e:ac:58:a4:3c:61:5e:ea:de:71:f0:8a:e0:
                    58:e5:26:2f:32:da:3f:d2:80:24:72:40:64:a1:99:
                    bc:34:0b:dc:89:02:f0:e0:3a:5e:90:97:8d:48:a4:
                    db:5d:3f:c3:46:30:60:62:20:b2:7d:ee:1f:ce:a5:
                    0d:57:c3:01:7e:c2:92:53:ac:c4:fe:c5:e1:d3:b0:
                    5a:d3:c6:49:e2:d5:43:08:e1:ad:c6:8d:b1:f2:3d:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CF:11:8F:A4:8F:2D:53:13:DC:6D:C6:D9:F3:7B:FC:8A:43:D4:8C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:bf:25:1f:1e:4c:50:04:02:b8:75:50:47:d5:8c:5c:86:
         38:22:7d:41:52:51:9c:98:0b:75:55:34:8c:f6:0b:06:8b:ce:
         4b:b9:1d:85:74:a8:b0:8d:10:27:e6:10:8a:80:bb:f5:11:03:
         5f:4b:a0:ed:18:d0:47:d6:51:26:e6:cc:ad:71:10:64:6c:18:
         8e:2a:18:04:6f:78:f0:7a:02:d4:94:3b:6e:11:5f:54:2c:c2:
         48:b2:00:6a:29:35:98:f3:bd:02:df:c6:69:77:67:67:07:9a:
         59:25:c5:0a:96:51:10:61:25:6d:d6:e7:df:30:02:6c:68:2f:
         a5:2a:f4:41:d8:45:ff:35:f8:59:35:ae:4d:97:82:8e:dc:cd:
         62:de:cb:3c:b1:f9:00:97:bd:fe:c3:aa:c3:57:0c:a6:10:ad:
         38:49:28:58:2c:e6:19:31:8e:1f:a4:25:60:71:3e:e2:82:87:
         d1:0d:88:98:21:ee:ad:f1:06:f6:30:71:df:28:1b:37:5e:64:
         bb:44:fb:89:68:8b:d0:cd:44:6b:e1:30:f3:27:07:b5:55:14:
         9d:b1:ec:85:45:63:e9:d0:f3:70:a1:17:d1:ff:87:35:74:bc:
         b1:8a:f3:fc:c2:6f:42:a7:43:c5:63:db:0a:af:c7:95:0b:de:
         c9:5a:04:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGBXGG6cnByPt5Eimv7kTtULDPG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM0MjQxWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDZjMTBlZDQwMGY4MzhkNTA5MWY3YWViMTAzYmRmNWIx
M2U0NDFlZjBmZjM5NDZhYjViNzYyODExNGQ3OTE5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCd1nkYbrnsAofpMHDtyXy7ciIArFpUqQe8oDV8EMZ09OuE
cmyz6cweCHHKinLipFB+0uJwto4rvo7+LtSy2mHxueKl7dVOF084gz1S2rHyazqo
NRo6GfUiMAsNCll1w5ZFqJjKK/r5TH/eVB8RQWm3kP80w0UBhru27cTKV0f0xPlI
i/IYQFeZIhjt2ol+EiqCjQw0o6RzqNzp66DVM5M87EQn6F+FjqxYpDxhXurecfCK
4FjlJi8y2j/SgCRyQGShmbw0C9yJAvDgOl6Ql41IpNtdP8NGMGBiILJ97h/OpQ1X
wwF+wpJTrMT+xeHTsFrTxkni1UMI4a3GjbHyPVrlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfc8Rj6SPLVMT3G3G2fN7/IpD1IwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzEwMmNhYTY3LWY5MDgtNDYwNS05ODYyLWFiMjhiMmZmMmNkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM28AAwDQYJKoZIhvcNAQELBQADggEBAFnkvyUfHkxQBAK4dVBH1Yxchjgi
fUFSUZyYC3VVNIz2CwaLzku5HYV0qLCNECfmEIqAu/URA19LoO0Y0EfWUSbmzK1x
EGRsGI4qGARvePB6AtSUO24RX1QswkiyAGopNZjzvQLfxml3Z2cHmlklxQqWURBh
JW3W598wAmxoL6Uq9EHYRf81+Fk1rk2Xgo7czWLeyzyx+QCXvf7DqsNXDKYQrThJ
KFgs5hkxjh+kJWBxPuKCh9ENiJgh7q3xBvYwcd8oGzdeZLtE+4loi9DNRGvhMPMn
B7VVFJ2x7IVFY+nQ83ChF9H/hzV0vLGK8/zCb0KnQ8Vj2wqvx5UL3slaBFE=
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:41:59 2025 by rpki-client