Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24478956-69e9-420d-8118-8252ba029d6d.roa
File:                     24478956-69e9-420d-8118-8252ba029d6d.roa (raw, json)
Hash identifier:          0PegE/I4hJm5feVVVz51V8BzBL5elj0R5sqaUfrEo14=
Subject key identifier:   A7:C3:74:07:64:0A:CF:E5:59:96:3C:D0:1C:0A:FD:AA:E8:38:B1:60
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5989A315308378DFDDF3C5B6E67A6A1FDBC79608
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24478956-69e9-420d-8118-8252ba029d6d.roa
Signing time:             Fri 26 Sep 2025 02:26:58 +0000
ROA not before:           Fri 26 Sep 2025 02:26:58 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:89:a3:15:30:83:78:df:dd:f3:c5:b6:e6:7a:6a:1f:db:c7:96:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:26:58 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=4d2f662bf272b825d232abe71f67ab944fedae25d147021536e6b8a2d6213fdc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:ae:b5:b8:ed:4f:8b:11:20:08:74:a1:ce:
                    7c:23:62:b6:ab:af:92:1f:f6:1f:b5:f9:3d:92:fa:
                    08:95:3e:a4:47:67:29:29:c3:e7:11:b5:03:eb:99:
                    1d:d4:c1:d8:a4:18:8b:69:6d:d7:7e:49:7a:1c:bb:
                    96:45:4f:ac:c0:66:de:7a:92:c2:f3:19:a8:bb:ee:
                    6f:c7:8f:56:40:5d:ed:49:5e:68:73:70:77:37:69:
                    97:c2:37:4a:03:1c:5c:2f:f0:f9:7d:da:8d:df:2a:
                    49:ca:dc:5e:99:b7:7e:9e:de:15:3d:0c:1f:27:c3:
                    77:0a:71:76:af:e2:57:a2:3c:b8:ce:f4:2d:0f:35:
                    47:36:12:80:8e:40:c1:41:52:cd:8d:82:77:eb:7d:
                    cf:6d:89:1c:88:7f:47:17:2e:aa:86:4e:16:3e:8f:
                    e8:c0:7a:53:49:05:ea:8a:d0:cf:d1:82:2c:aa:71:
                    cb:e5:c9:1f:53:b4:6a:1d:4d:45:fa:00:02:f4:08:
                    63:46:ba:15:a8:d9:d4:f0:76:b5:90:70:d6:bf:44:
                    65:2f:4b:b4:fa:99:89:a9:9a:c9:fe:33:67:1f:32:
                    21:25:55:99:69:39:a9:d5:56:1d:a9:a7:9a:e9:c3:
                    3c:5e:f4:18:b5:84:cc:95:b6:99:fd:9c:0b:36:e9:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C3:74:07:64:0A:CF:E5:59:96:3C:D0:1C:0A:FD:AA:E8:38:B1:60
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24478956-69e9-420d-8118-8252ba029d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:5c:21:e1:0f:0e:57:1a:da:b6:71:9b:cf:b4:dc:aa:5a:
         db:2e:ce:bc:2a:85:b2:af:18:d1:c4:ae:c1:fb:24:22:c5:5b:
         dd:72:76:86:ba:6d:55:06:37:6b:11:51:90:9c:57:18:1f:b8:
         2c:5d:d8:41:f6:6d:f5:40:9e:16:ef:07:54:f7:85:a2:29:6b:
         eb:3f:b0:31:92:e3:60:e9:f8:b6:10:55:01:e4:cb:f0:4b:c5:
         f5:a0:54:d4:46:84:e2:27:34:86:49:3c:d0:81:b2:c0:8d:52:
         f8:f1:e8:ff:59:49:fd:30:54:b3:ea:c8:91:4a:47:1a:63:27:
         2a:c8:d0:a0:74:03:c2:f7:c5:bd:ca:aa:87:33:54:1f:f7:63:
         8a:1d:ac:ca:53:f5:64:85:a4:33:17:59:8c:e7:a6:ac:bb:c0:
         dc:52:90:92:54:9f:17:2e:39:5e:41:69:21:52:10:96:be:4a:
         dd:35:97:2c:08:91:d8:0e:5f:19:20:24:49:a0:d6:26:7d:89:
         5c:8c:4a:3b:f7:8e:a5:c5:b1:cc:01:0f:12:5a:60:2e:4e:c0:
         8a:5c:17:1a:38:71:09:f9:bb:e8:af:03:bc:56:54:72:6f:9e:
         7c:17:9e:9a:3c:76:e3:ea:55:14:74:9f:4d:f8:55:b9:f6:1e:
         62:94:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:19:33 2025 by rpki-client