Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18733047-f090-4496-8609-c859462dab1c.roa
File:                     18733047-f090-4496-8609-c859462dab1c.roa (raw, json)
Hash identifier:          YBD3ym6ORrpSnCWJEfJJFj1ky9l6iMtSKPR1tc7BkTs=
Subject key identifier:   DC:E0:45:93:6A:46:A8:01:CB:CF:C1:16:39:0D:A4:92:FE:B4:E9:BF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1CD50428E6FACA29BC5F5087482C65B8AA45DCF8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18733047-f090-4496-8609-c859462dab1c.roa
Signing time:             Fri 17 Oct 2025 00:15:46 +0000
ROA not before:           Fri 17 Oct 2025 00:15:46 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:04:28:e6:fa:ca:29:bc:5f:50:87:48:2c:65:b8:aa:45:dc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 00:15:46 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=6fe3101f62483be3044323f82ca7ecf08be30519e98eb6be828e1b95e40eb6fd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:e2:de:3d:4d:8c:0d:b4:63:83:77:25:da:
                    9a:a8:00:c8:66:11:94:20:da:9b:3f:af:29:86:32:
                    f3:83:0d:10:c4:6d:6b:3d:2e:b8:a7:7d:51:f9:a6:
                    e3:eb:f6:c1:d8:9f:1f:c8:90:e4:d3:ea:c1:1a:c5:
                    18:9f:77:16:2e:21:37:7b:53:0a:0e:0b:0d:05:d6:
                    a3:13:ac:87:68:aa:75:e0:93:c1:69:0d:b4:54:17:
                    41:f6:27:9a:39:3c:6c:b2:bf:52:f8:3e:72:3d:ff:
                    99:d6:e0:55:5d:6c:71:cc:3b:6e:85:2e:d5:9f:ed:
                    ac:71:57:71:d1:4e:ab:e8:f9:8c:08:5b:d5:7b:4d:
                    a2:78:b2:56:33:6f:e2:9e:e7:40:2c:3d:57:77:33:
                    84:1e:ec:a7:cb:31:72:1c:ad:33:1f:4f:b4:83:ef:
                    85:18:2e:ef:5c:4d:6f:47:60:a4:87:33:2a:74:36:
                    17:09:5b:0c:04:a7:43:dd:cb:58:34:46:e0:91:73:
                    55:8f:a8:e4:c5:df:9d:0d:73:85:23:c3:80:e9:ca:
                    a0:58:af:ee:ee:a6:7e:71:f3:af:8e:23:85:67:50:
                    39:5f:7e:c7:11:da:00:4f:7f:5b:b0:61:60:60:fc:
                    ac:88:1a:27:d7:4c:9e:5d:42:1a:55:12:0c:a8:f9:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:45:93:6A:46:A8:01:CB:CF:C1:16:39:0D:A4:92:FE:B4:E9:BF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18733047-f090-4496-8609-c859462dab1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:88:88:0d:e8:a5:96:79:69:6e:4b:8a:68:1e:87:b1:13:
         57:a1:2e:e2:67:22:4e:e7:d6:24:5c:56:7b:73:83:bc:f9:dc:
         33:37:3e:14:a0:00:a5:4d:14:27:78:bd:fb:82:77:8d:b9:31:
         63:eb:af:7e:1e:9e:97:d2:33:30:46:cd:76:ad:41:cb:47:a2:
         cb:3f:9c:09:cb:f9:24:2d:ce:d6:95:48:d7:e5:83:8d:ea:60:
         7c:3c:6c:ed:09:32:4d:ef:e6:23:a0:ed:50:b2:ad:6b:5a:c9:
         0f:90:ed:61:d5:97:2f:0f:7c:64:1f:57:f7:82:42:ec:76:af:
         45:67:a3:2c:2c:b7:7a:0a:a7:16:95:9b:b3:d1:38:c1:cf:9c:
         96:3c:f9:bb:2f:d6:6a:54:b1:2f:67:75:b2:31:6b:18:34:d7:
         64:96:a3:d8:0d:49:54:ff:7f:96:0f:e3:54:4a:2b:ea:fb:c4:
         82:68:b9:36:05:e4:68:10:a7:f1:df:0b:85:cd:8f:6f:3f:ec:
         e2:5c:3c:d1:bb:13:66:80:ba:5a:a5:f4:e7:32:b8:0d:d5:3e:
         0c:8a:f1:fa:90:bd:42:ea:82:8c:14:1e:d4:d2:c6:c9:8c:76:
         0d:1f:87:dc:1c:5d:b4:86:e2:f3:86:54:6f:b8:e0:c4:e3:5e:
         67:d5:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:06:12 2025 by rpki-client