Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ccf0ba-a735-426e-a5a7-c99cebd9ff44.roa
File:                     13ccf0ba-a735-426e-a5a7-c99cebd9ff44.roa (raw, json)
Hash identifier:          NTMZG4a31y7omoDd8L94A2WGsDsbMGFpWq20kJgcsS4=
Subject key identifier:   D2:94:0E:D1:F4:6C:5E:5A:DD:FD:F2:17:2C:6E:1D:D9:DA:F0:C7:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26E053FA4F936D9078670121F67C450FDE900C80
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ccf0ba-a735-426e-a5a7-c99cebd9ff44.roa
Signing time:             Wed 15 Oct 2025 20:55:43 +0000
ROA not before:           Wed 15 Oct 2025 20:55:43 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        143.204.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e0:53:fa:4f:93:6d:90:78:67:01:21:f6:7c:45:0f:de:90:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 20:55:43 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=49e21b02a445edaaf71584a16a2bc9887cf2f2fccf56c882d64cf39b78cfb97b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:86:ac:41:11:b7:6d:7b:68:c3:85:58:a1:89:
                    80:9e:36:9a:9e:74:73:7d:37:6a:15:2d:02:75:46:
                    a9:25:78:2e:2f:67:aa:5d:1e:d4:57:8b:23:f9:f2:
                    41:ee:6e:8d:27:60:ac:82:fb:de:77:5b:ca:62:10:
                    a5:bb:4d:d4:6f:db:c8:de:c1:f1:15:02:5a:f9:1f:
                    98:92:db:46:2f:76:37:79:98:3c:af:55:1e:4d:fa:
                    00:f0:45:aa:dc:d1:b4:3c:1c:61:7f:6c:35:04:b2:
                    8d:d8:1c:01:b1:e2:1f:81:c1:e3:1b:78:02:d9:55:
                    32:83:7d:f2:19:9c:de:5f:45:bd:94:7b:c9:92:88:
                    64:b6:cb:a5:72:98:b9:66:2d:f7:ed:b7:11:43:17:
                    b2:6b:6b:62:52:a6:76:5e:8e:98:95:6c:1f:d8:1a:
                    f3:cc:0f:9c:35:d4:5c:ce:7e:96:fb:2e:25:fc:b1:
                    78:c7:f9:34:a2:1f:6a:9f:0e:6d:80:e8:61:3d:3b:
                    3f:89:df:8a:55:65:af:62:bc:49:df:40:fb:c9:0b:
                    8d:d2:fa:57:76:57:a7:48:e3:83:04:6a:da:69:e4:
                    dc:79:d9:a7:d9:10:a6:59:68:0b:1e:4e:46:a5:6d:
                    c6:1a:80:0d:87:1d:76:07:b3:d6:1c:3e:3e:96:b1:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:0E:D1:F4:6C:5E:5A:DD:FD:F2:17:2C:6E:1D:D9:DA:F0:C7:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13ccf0ba-a735-426e-a5a7-c99cebd9ff44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:00:26:1a:2b:95:49:06:48:13:75:96:4a:63:4e:9f:d4:
         9f:f0:34:48:34:7a:db:3f:36:ee:a2:c4:e8:a5:57:a8:b6:43:
         1f:a6:aa:00:56:6a:6a:2c:99:52:25:13:0c:80:46:10:5f:06:
         f2:28:b3:6c:95:5f:79:46:fa:55:71:f0:78:4f:73:a4:4c:9b:
         6f:50:a5:8e:27:30:75:4f:03:63:23:c8:05:da:11:90:01:f0:
         7e:7b:56:f6:f4:d7:ef:93:32:5c:0b:33:77:4f:19:49:67:e7:
         5f:d6:35:5c:7a:ac:af:9a:52:85:5f:ca:b6:ba:e8:49:16:92:
         c7:7b:c3:4e:f0:7f:7a:0c:68:57:89:1b:06:37:bd:b7:3e:88:
         f1:e8:29:a9:bc:84:06:6b:bb:72:d4:95:a7:45:c8:2e:d7:19:
         b8:19:85:0e:22:68:20:13:20:45:bb:2d:3c:41:fb:15:ae:45:
         22:e3:0f:90:7a:4c:b7:36:16:73:71:19:79:2d:47:42:90:04:
         ad:c1:3d:4c:da:5f:dc:48:b6:7f:57:8e:53:f4:04:4e:29:76:
         9b:43:b9:e1:95:e7:1e:3a:e2:5d:00:2a:cb:a4:b6:5e:fb:a8:
         d3:f4:55:84:aa:c7:03:13:d8:ee:38:38:fb:70:5c:e0:0d:54:
         96:b0:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:10:45 2025 by rpki-client