Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1787aea4-c946-4e2f-869a-fd24d766abe7.roa
File:                     1787aea4-c946-4e2f-869a-fd24d766abe7.roa (raw, json)
Hash identifier:          9NR3jsSlVl1v+hsWnEdbvzh05FR1Ryul4vgmg8CxPBI=
Subject key identifier:   D2:22:D0:18:FC:B9:B8:B4:B2:7A:EF:73:5A:B9:00:54:4E:70:AA:84
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       494DCFE5FB4DBE5486237105209F4C5ADBC4BE62
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1787aea4-c946-4e2f-869a-fd24d766abe7.roa
Signing time:             Mon 18 Aug 2025 16:00:12 +0000
ROA not before:           Mon 18 Aug 2025 16:00:12 +0000
ROA not after:            Mon 22 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.53.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:cf:e5:fb:4d:be:54:86:23:71:05:20:9f:4c:5a:db:c4:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 18 16:00:12 2025 GMT
            Not After : Sep 22 23:59:59 2025 GMT
        Subject: serialNumber=27761f255ca8fea077e1a02661ebc0142630124377317f18b9378cfe15bfe6fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:d6:9a:6c:d1:b4:97:9e:aa:0d:01:bf:98:
                    52:51:07:0d:b1:51:d3:0a:55:41:0f:88:03:92:7c:
                    1e:27:cb:1c:24:38:9f:9e:50:f7:c1:4f:e8:d7:fb:
                    67:61:21:97:46:42:b9:8c:40:39:46:8f:7d:68:45:
                    d5:f0:b4:0d:a3:8b:d0:ba:7e:73:ed:a5:21:a6:0d:
                    42:72:48:06:bf:29:b1:ed:b1:95:36:a6:3c:3b:da:
                    d2:97:27:81:55:d5:52:da:22:ad:74:d9:d0:f0:d9:
                    9f:69:3e:7c:70:68:a9:d5:62:06:fe:a1:ff:26:bc:
                    80:d9:e6:86:be:59:97:d2:23:cb:24:4f:ef:3b:5f:
                    10:6c:5d:3c:d4:d0:08:16:70:23:c2:c3:04:9d:87:
                    7b:ef:78:31:3c:ef:eb:28:b0:41:30:9d:09:bc:b3:
                    50:48:68:99:c6:b7:70:36:64:05:69:70:c1:f5:8e:
                    40:62:0f:ab:6e:1e:f9:0a:9d:88:0d:d2:be:8c:8a:
                    79:f7:be:89:59:b9:04:e9:3b:32:4b:c6:01:76:c2:
                    a7:ca:60:f6:94:3d:db:82:32:be:d1:39:ea:81:f3:
                    91:72:01:d8:66:fb:0e:9c:00:1d:63:27:8f:0d:97:
                    40:a6:5c:6e:86:af:ca:8c:eb:ed:5e:d4:e1:c1:d3:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:D0:18:FC:B9:B8:B4:B2:7A:EF:73:5A:B9:00:54:4E:70:AA:84
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1787aea4-c946-4e2f-869a-fd24d766abe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.53.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:f0:79:e9:58:14:5e:34:b8:74:2b:9b:e6:25:23:6f:fc:
         26:09:54:75:9a:d1:d1:95:c4:94:a9:d8:e7:ed:e0:db:fa:2b:
         21:84:35:6a:f4:70:84:aa:10:ac:6b:6c:f6:c1:f0:99:5a:f6:
         01:c7:12:fb:99:a1:32:19:a0:6a:ab:57:4c:59:9e:d8:a4:c6:
         20:c7:18:21:bf:63:9d:2a:d1:8b:7b:8c:98:63:dd:9f:b6:02:
         30:67:1e:c8:cb:7e:42:32:54:90:f5:ad:6e:db:77:fa:c1:17:
         16:c1:50:a3:b0:9b:9a:67:2a:59:43:35:75:a1:fb:c1:08:cd:
         2c:52:03:16:19:93:60:09:02:24:ab:51:a2:7a:6c:19:48:35:
         2f:71:2b:52:71:72:1c:6d:ed:f1:98:aa:26:e9:94:b8:1f:d0:
         03:16:2e:28:7f:2d:31:22:55:00:f1:78:03:ea:eb:10:b4:ff:
         3d:ca:6d:fe:32:21:31:84:05:03:0d:cd:98:23:35:2c:1a:bf:
         8d:d7:c5:73:ae:5a:ab:a4:a8:0e:9c:6a:0f:bf:25:fa:a2:0e:
         b4:11:72:26:5e:f9:3b:48:e3:da:83:a2:e0:b3:b1:32:32:f1:
         e1:27:27:47:fc:96:af:42:bc:01:45:3a:b1:10:73:3f:bb:f0:
         99:cc:ce:65
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSU3P5ftNvlSGI3EFIJ9MWtvEvmIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYwMDEyWhcNMjUwOTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzc2MWYyNTVjYThmZWEwNzdlMWEwMjY2MWViYzAxNDI2
MzAxMjQzNzczMTdmMThiOTM3OGNmZTE1YmZlNmZlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCa9taabNG0l56qDQG/mFJRBw2xUdMKVUEPiAOSfB4nyxwk
OJ+eUPfBT+jX+2dhIZdGQrmMQDlGj31oRdXwtA2ji9C6fnPtpSGmDUJySAa/KbHt
sZU2pjw72tKXJ4FV1VLaIq102dDw2Z9pPnxwaKnVYgb+of8mvIDZ5oa+WZfSI8sk
T+87XxBsXTzU0AgWcCPCwwSdh3vveDE87+sosEEwnQm8s1BIaJnGt3A2ZAVpcMH1
jkBiD6tuHvkKnYgN0r6Minn3volZuQTpOzJLxgF2wqfKYPaUPduCMr7ROeqB85Fy
Adhm+w6cAB1jJ48Nl0CmXG6Gr8qM6+1e1OHB09vHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0iLQGPy5uLSyeu9zWrkAVE5wqoQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE3ODdhZWE0LWM5NDYtNGUyZi04NjlhLWZkMjRkNzY2YWJlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUNNSAwDQYJKoZIhvcNAQELBQADggEBAIHT8HnpWBReNLh0K5vmJSNv/CYJ
VHWa0dGVxJSp2Oft4Nv6KyGENWr0cISqEKxrbPbB8Jla9gHHEvuZoTIZoGqrV0xZ
ntikxiDHGCG/Y50q0Yt7jJhj3Z+2AjBnHsjLfkIyVJD1rW7bd/rBFxbBUKOwm5pn
KllDNXWh+8EIzSxSAxYZk2AJAiSrUaJ6bBlINS9xK1Jxchxt7fGYqibplLgf0AMW
Lih/LTEiVQDxeAPq6xC0/z3Kbf4yITGEBQMNzZgjNSwav43XxXOuWqukqA6cag+/
JfqiDrQRciZe+TtI49qDouCzsTIy8eEnJ0f8lq9CvAFFOrEQcz+78JnMzmU=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:39:09 2025 by rpki-client