Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/198d84e3-05ef-4821-a6e1-6ddad7d12b7d.roa
File:                     198d84e3-05ef-4821-a6e1-6ddad7d12b7d.roa (raw, json)
Hash identifier:          9N5s7jfKL/cM/mqH550cybJjahLW8masCcX9iS1hShU=
Subject key identifier:   37:7B:F7:05:B2:05:9E:C4:75:E9:F6:F5:C1:CF:48:71:40:E9:CA:00
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7CA9E3D765E412B0C2142B3DFBBE97EAD5A4C232
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/198d84e3-05ef-4821-a6e1-6ddad7d12b7d.roa
Signing time:             Fri 03 Oct 2025 15:09:02 +0000
ROA not before:           Fri 03 Oct 2025 15:09:02 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a9:e3:d7:65:e4:12:b0:c2:14:2b:3d:fb:be:97:ea:d5:a4:c2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct  3 15:09:02 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=f3a0179bbc388e97352e07708ae7f2e875caf59324ecfc7ee63c01544e366982, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:c2:9d:59:c2:87:22:d0:c6:5e:83:20:a1:
                    ac:fb:f9:c0:c2:a9:c3:1c:dd:e3:b0:f5:bc:12:73:
                    c9:02:49:a5:8e:b0:f8:e3:11:c6:f8:68:70:a1:2b:
                    e5:de:82:14:0d:20:b3:d5:a3:64:7a:69:79:7e:b9:
                    33:a3:de:3b:5d:51:8a:5d:ef:15:23:52:cd:2c:db:
                    c7:fd:77:5b:db:a9:b9:75:0c:1b:08:c4:d2:7b:84:
                    5d:a4:b9:1b:12:8c:27:5e:75:68:94:9e:d5:b4:a4:
                    fc:c3:88:25:c7:91:8e:54:d3:df:72:05:11:36:18:
                    df:5e:32:97:91:7f:96:f5:43:42:35:d4:97:ba:cd:
                    a2:5f:da:34:79:1e:b9:62:8d:6b:86:9a:be:8b:dd:
                    ef:a9:e1:a4:f9:83:57:44:2a:8e:7d:04:67:99:29:
                    eb:86:90:34:12:91:af:dc:f7:4c:18:2c:24:4c:6f:
                    a2:76:c1:10:c9:0e:d0:9c:0f:bb:25:3a:cf:cc:ce:
                    e6:62:7c:20:1f:4e:98:a0:ad:c0:3d:9d:89:32:4a:
                    71:5d:37:e5:68:de:2c:8b:b1:28:6e:4e:6d:fe:13:
                    3b:f8:d8:ba:1a:7c:b1:b2:0a:d0:e9:e1:d2:e1:61:
                    3b:7d:fe:20:dc:b0:26:9c:b3:0d:37:97:fe:3e:02:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:F7:05:B2:05:9E:C4:75:E9:F6:F5:C1:CF:48:71:40:E9:CA:00
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/198d84e3-05ef-4821-a6e1-6ddad7d12b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:a7:52:a2:c4:8b:bd:75:29:4a:65:38:50:d3:e7:77:f8:
         95:51:04:83:5e:af:88:f4:c9:da:60:01:80:9f:fe:d1:b1:47:
         e8:dc:7b:14:70:d1:1f:fb:eb:ff:27:d0:7f:50:71:b8:58:a1:
         e0:2c:fd:eb:95:37:23:7b:5f:37:41:37:91:fe:41:c6:26:c7:
         a9:a3:26:6a:b1:50:04:1c:86:85:90:c9:fd:3b:1b:fd:0d:54:
         c7:ae:31:3e:c9:f8:47:db:ff:a6:23:0a:38:7c:cb:0c:b8:cf:
         49:98:0e:85:bc:4c:08:04:64:ce:60:d7:d4:8e:2b:b0:6a:09:
         58:ad:0f:92:b4:f5:df:12:fa:3b:44:32:11:66:5d:f7:82:a7:
         b9:3c:ac:87:c8:27:4f:87:85:96:08:e3:71:d7:d5:18:7b:8d:
         5c:6a:67:60:ae:10:64:b2:19:3d:9c:a6:8b:60:32:42:8b:2e:
         4c:f3:52:8d:62:a7:6a:ce:6d:0f:07:4e:b9:86:44:d0:95:89:
         61:8a:16:09:62:c4:c0:fd:17:95:43:10:d2:48:b8:b2:0f:d5:
         cb:bb:25:22:28:3e:e2:ee:d9:2d:af:0d:de:04:4f:ad:cb:a3:
         00:d3:ab:a7:8b:2b:d0:45:27:d2:0f:3e:6b:11:f5:fb:b7:d3:
         a3:95:83:cc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfKnj12XkErDCFCs9+76X6tWkwjIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDAzMTUwOTAyWhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2EwMTc5YmJjMzg4ZTk3MzUyZTA3NzA4YWU3ZjJlODc1
Y2FmNTkzMjRlY2ZjN2VlNjNjMDE1NDRlMzY2OTgyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/b8KdWcKHItDGXoMgoaz7+cDCqcMc3eOw9bwSc8kCSaWO
sPjjEcb4aHChK+XeghQNILPVo2R6aXl+uTOj3jtdUYpd7xUjUs0s28f9d1vbqbl1
DBsIxNJ7hF2kuRsSjCdedWiUntW0pPzDiCXHkY5U099yBRE2GN9eMpeRf5b1Q0I1
1Je6zaJf2jR5HrlijWuGmr6L3e+p4aT5g1dEKo59BGeZKeuGkDQSka/c90wYLCRM
b6J2wRDJDtCcD7slOs/MzuZifCAfTpigrcA9nYkySnFdN+Vo3iyLsShuTm3+Ezv4
2LoafLGyCtDp4dLhYTt9/iDcsCacsw03l/4+AtZVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUN3v3BbIFnsR16fb1wc9IcUDpygAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE5OGQ4NGUzLTA1ZWYtNDgyMS1hNmUxLTZkZGFkN2QxMmI3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW3iEwDQYJKoZIhvcNAQELBQADggEBAA4mp1KixIu9dSlKZThQ0+d3+JVR
BINer4j0ydpgAYCf/tGxR+jcexRw0R/76/8n0H9QcbhYoeAs/euVNyN7XzdBN5H+
QcYmx6mjJmqxUAQchoWQyf07G/0NVMeuMT7J+Efb/6YjCjh8ywy4z0mYDoW8TAgE
ZM5g19SOK7BqCVitD5K09d8S+jtEMhFmXfeCp7k8rIfIJ0+HhZYI43HX1Rh7jVxq
Z2CuEGSyGT2cpotgMkKLLkzzUo1ip2rObQ8HTrmGRNCViWGKFglixMD9F5VDENJI
uLIP1cu7JSIoPuLu2S2vDd4ET63LowDTq6eLK9BFJ9IPPmsR9fu306OVg8w=
-----END CERTIFICATE-----
Generated at Sat Oct 18 00:18:23 2025 by rpki-client