Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16b2c6ce-ee50-4da1-b8a5-37cf88def8c4.roa
File:                     16b2c6ce-ee50-4da1-b8a5-37cf88def8c4.roa (raw, json)
Hash identifier:          USy681K1z0pqpL0JyLDIJ50gqELSTB7h4YGTZP8x2mk=
Subject key identifier:   C1:61:8E:D9:A9:5C:E2:B0:2C:F5:69:13:C1:0F:7D:AC:82:78:EA:0B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3A9FB3F86E23FA854F44FA0D2FC8D8D0DF184B92
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16b2c6ce-ee50-4da1-b8a5-37cf88def8c4.roa
Signing time:             Fri 26 Sep 2025 16:30:57 +0000
ROA not before:           Fri 26 Sep 2025 16:30:57 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.92.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:b3:f8:6e:23:fa:85:4f:44:fa:0d:2f:c8:d8:d0:df:18:4b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 16:30:57 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=51d80d2fb5a7ab7559d60fb8549b9a102d87e32158bc26bda48ea7e2c45f4864, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:a6:cc:f3:62:79:ad:bb:8a:fa:f4:ae:8e:
                    02:8d:20:58:7d:95:84:8d:e5:a0:05:3a:df:7a:7f:
                    24:dd:44:27:65:79:f0:d6:5b:ab:38:76:3c:c3:b4:
                    07:fd:1a:69:4f:09:1b:dd:f0:d7:17:71:4b:3c:20:
                    34:f2:39:70:7c:31:fc:14:b7:8f:4d:bb:fa:33:65:
                    0d:83:44:52:1f:80:ae:ce:b3:48:9c:8b:31:60:0b:
                    06:cb:b7:95:24:bb:22:9d:9d:14:df:3c:12:50:9c:
                    d0:94:b7:b4:2d:b2:b0:ee:4b:9d:a1:6e:6a:5b:c8:
                    44:56:82:47:61:73:42:91:01:71:0a:f9:bd:89:0a:
                    c0:ff:70:cb:99:f2:f1:ac:cb:e3:91:85:f6:52:6a:
                    e3:58:cb:ef:c1:6b:ed:67:9a:60:3d:4e:4d:ef:b7:
                    f1:88:14:76:0c:7f:86:d8:e4:f8:24:01:d7:fc:9f:
                    f9:bd:03:db:80:92:27:df:2a:05:e6:9c:d9:7b:44:
                    f5:85:1e:cc:8e:07:0c:7d:e7:43:62:8c:d3:4d:67:
                    c0:0e:5b:c9:c9:dc:79:f6:df:94:c9:be:cd:30:0e:
                    c5:e0:04:73:d0:4b:58:c4:7c:27:76:05:bc:18:f9:
                    d4:29:04:34:b1:bd:e5:90:81:d1:78:14:bd:80:26:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:8E:D9:A9:5C:E2:B0:2C:F5:69:13:C1:0F:7D:AC:82:78:EA:0B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16b2c6ce-ee50-4da1-b8a5-37cf88def8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:69:46:c7:bc:d5:e9:52:62:8d:ed:9a:e6:3b:52:48:c7:
         27:79:bf:e6:66:9c:15:6e:13:4b:c2:e6:de:d5:f9:97:72:cc:
         ba:91:6a:d2:1f:66:4e:1d:3d:fa:00:34:50:ea:19:be:4e:aa:
         cf:36:f3:82:36:4d:11:65:90:85:18:31:47:32:d0:3f:52:ee:
         d1:f2:fc:50:57:31:0a:b5:56:da:83:3c:c9:86:c1:20:74:2a:
         46:ce:50:af:e5:5b:8e:f2:27:3f:28:6b:65:c3:3a:e2:0a:16:
         07:27:a8:08:ac:24:1d:0c:3d:82:1a:d6:72:07:30:e0:ac:6a:
         f2:5c:9a:03:f0:50:2f:4a:60:19:96:4a:1b:00:3b:dc:05:c4:
         43:39:96:40:f3:a2:3f:58:29:c2:86:df:44:fa:4f:3a:1b:9c:
         e8:7b:8e:c4:ad:1f:33:af:67:3b:8b:41:b0:59:f3:bd:b3:a3:
         15:51:d2:b8:7f:00:f7:46:de:27:b5:e9:20:b2:01:2e:17:9c:
         f4:8b:46:c4:8c:89:d4:31:d5:7a:1c:fc:2d:99:4e:86:7e:08:
         17:6d:44:18:a7:31:fc:2a:4e:4e:1e:76:58:18:94:52:b3:46:
         ca:52:7f:1e:86:34:8f:b8:db:09:bf:b8:04:4c:17:db:9a:de:
         8b:2f:ce:7a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOp+z+G4j+oVPRPoNL8jY0N8YS5IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYzMDU3WhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWQ4MGQyZmI1YTdhYjc1NTlkNjBmYjg1NDliOWExMDJk
ODdlMzIxNThiYzI2YmRhNDhlYTdlMmM0NWY0ODY0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDF2qbM82J5rbuK+vSujgKNIFh9lYSN5aAFOt96fyTdRCdl
efDWW6s4djzDtAf9GmlPCRvd8NcXcUs8IDTyOXB8MfwUt49Nu/ozZQ2DRFIfgK7O
s0icizFgCwbLt5UkuyKdnRTfPBJQnNCUt7QtsrDuS52hbmpbyERWgkdhc0KRAXEK
+b2JCsD/cMuZ8vGsy+ORhfZSauNYy+/Ba+1nmmA9Tk3vt/GIFHYMf4bY5PgkAdf8
n/m9A9uAkiffKgXmnNl7RPWFHsyOBwx950NijNNNZ8AOW8nJ3Hn235TJvs0wDsXg
BHPQS1jEfCd2BbwY+dQpBDSxveWQgdF4FL2AJqMTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUwWGO2alc4rAs9WkTwQ99rIJ46gswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE2YjJjNmNlLWVlNTAtNGRhMS1iOGE1LTM3Y2Y4OGRlZjhjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASXDANBgkqhkiG9w0BAQsFAAOCAQEAPTdpRse81elSYo3tmuY7UkjHJ3m/
5macFW4TS8Lm3tX5l3LMupFq0h9mTh09+gA0UOoZvk6qzzbzgjZNEWWQhRgxRzLQ
P1Lu0fL8UFcxCrVW2oM8yYbBIHQqRs5Qr+VbjvInPyhrZcM64goWByeoCKwkHQw9
ghrWcgcw4Kxq8lyaA/BQL0pgGZZKGwA73AXEQzmWQPOiP1gpwobfRPpPOhuc6HuO
xK0fM69nO4tBsFnzvbOjFVHSuH8A90beJ7XpILIBLhec9ItGxIyJ1DHVehz8LZlO
hn4IF21EGKcx/CpOTh52WBiUUrNGylJ/HoY0j7jbCb+4BEwX25reiy/Oeg==
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:42:02 2025 by rpki-client