Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1440f789-fc06-4920-b110-feffde878399.roa
File:                     1440f789-fc06-4920-b110-feffde878399.roa (raw, json)
Hash identifier:          jexW3XTN8UJ7QXsKv4+con74JyKa+nBK+4KXRbxQLO4=
Subject key identifier:   B1:79:C6:F4:46:1B:AE:96:58:73:5C:D2:7E:A7:60:80:00:A6:33:F8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       64CC3A1593D7ED042B12407272E791C1BD3D7B4B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1440f789-fc06-4920-b110-feffde878399.roa
Signing time:             Fri 26 Sep 2025 17:32:53 +0000
ROA not before:           Fri 26 Sep 2025 17:32:53 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cc:3a:15:93:d7:ed:04:2b:12:40:72:72:e7:91:c1:bd:3d:7b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 17:32:53 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=2ea1063efa443ea10d420d8c43097c3eccc9b5646405cbd15627bd90fd68a0fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:6a:cd:4f:35:94:a1:16:dd:b9:ac:26:31:
                    be:df:b9:b5:46:8c:59:76:0f:ac:c6:21:c6:4c:2f:
                    02:53:66:4a:7a:e9:46:31:f6:19:81:19:84:c3:1e:
                    e0:e0:63:20:9d:d8:2a:8f:7a:e9:5c:50:99:76:0b:
                    b1:d0:76:60:3a:4d:4f:1c:74:b4:a4:c0:a5:c1:d3:
                    9e:27:fb:d0:4f:5c:1a:71:9f:bd:ca:f1:2d:17:f1:
                    e6:86:dc:39:2b:df:3d:cc:9f:28:ef:6a:6f:cb:e0:
                    d5:82:d7:33:22:c3:f3:65:2c:6b:f0:16:ba:1d:70:
                    22:dd:62:8a:46:40:a2:aa:66:39:b5:7a:df:a3:af:
                    06:ca:dc:cd:e0:7f:af:58:03:9d:2f:86:16:76:cd:
                    a0:a9:44:26:ad:c6:5d:3b:70:78:19:4b:ac:4f:bf:
                    90:0c:cd:7d:1c:bd:be:e7:59:16:69:81:3b:a3:20:
                    6c:12:68:a2:e9:ad:14:3e:01:81:ba:6f:f0:4e:45:
                    89:59:e1:d6:61:83:23:c3:f8:36:9e:51:c8:89:6c:
                    f0:4f:80:51:fa:d3:ef:e2:bc:e9:cd:99:cb:e7:a9:
                    5e:2c:da:12:f5:6a:b6:10:06:c8:3b:0f:c5:69:cb:
                    30:03:57:a4:05:31:80:5f:f9:07:16:7b:3d:9e:65:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:C6:F4:46:1B:AE:96:58:73:5C:D2:7E:A7:60:80:00:A6:33:F8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1440f789-fc06-4920-b110-feffde878399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:40:9d:23:7d:a4:23:4f:82:f2:09:cd:d5:55:ba:96:dc:
         7c:64:70:fd:b6:23:76:cd:75:5c:da:db:eb:73:ab:15:45:be:
         32:18:72:96:23:b1:96:66:c7:92:44:3a:25:cb:d8:01:49:14:
         2e:75:f3:31:97:86:79:9c:39:68:8b:37:6e:1c:63:e0:bb:8a:
         47:d0:dc:f6:c1:f8:1c:b4:22:68:de:4f:64:d6:31:41:a9:10:
         e0:e1:7a:ad:3b:79:e0:82:36:98:64:45:84:93:06:e7:55:6d:
         f7:e4:b8:90:28:84:11:9a:d1:30:34:92:93:08:a7:72:04:15:
         b3:f4:16:3a:02:9d:ba:5a:8e:68:fa:45:57:1e:33:80:a8:11:
         7a:6c:ed:d5:70:de:62:24:9d:bd:fa:b9:76:26:12:8c:10:f7:
         74:1e:8f:67:5a:1e:1f:d7:6d:73:a7:c5:6a:15:18:34:5b:93:
         11:a3:5c:59:5e:30:20:de:4d:b3:50:62:4e:ff:bd:c5:5b:6d:
         e7:85:24:f7:44:c8:06:dd:49:3e:07:e8:60:e0:38:7f:70:87:
         3e:8f:31:c4:bb:36:7d:0a:09:88:34:94:43:8d:40:e8:53:dc:
         7b:b2:02:9f:f2:a8:37:4d:a3:ac:9e:a8:3c:64:3e:89:56:95:
         66:72:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:14:46 2025 by rpki-client