Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa
File:                     27819b1c-adf8-45d7-9c31-e6af7b843adb.roa (raw, json)
Hash identifier:          np2CxtD9VbfpBoTr1J/6PwKUpwFuao3M5XVYerq2mNk=
Subject key identifier:   AF:70:18:6B:0A:9B:0C:4E:62:8E:3E:30:4D:00:05:68:86:A5:9E:FD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       382F7524F1A4CD0B54194707774C5B8F5029E362
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa
Signing time:             Wed 24 Sep 2025 19:21:58 +0000
ROA not before:           Wed 24 Sep 2025 19:21:58 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:75:24:f1:a4:cd:0b:54:19:47:07:77:4c:5b:8f:50:29:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 19:21:58 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=0ad5d7839ce017000c35c86c2bf725bb187166f614f1906d43e069ed300aef67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:c8:6d:a9:36:a2:33:fc:8b:5b:26:4e:2d:
                    6e:1a:17:bb:3e:c1:9e:c9:6c:e4:0f:32:d4:3d:ba:
                    6c:a2:37:53:7c:54:9e:5f:1c:aa:f9:57:5b:fc:47:
                    a8:64:9f:49:f4:c5:0d:d6:81:c5:2f:50:5e:18:54:
                    92:a9:70:27:0a:a0:2b:22:28:81:c4:60:78:03:cb:
                    7a:b6:eb:6d:f9:ce:78:43:44:8e:5b:76:c6:80:33:
                    8e:0f:1f:2b:dc:ae:b5:50:85:30:67:c8:93:33:2a:
                    c1:6c:2d:d9:71:7d:ef:b2:34:05:45:c6:c6:db:94:
                    a4:8d:8a:58:e0:53:b8:f7:f2:22:60:61:c9:07:71:
                    ee:42:d9:98:27:06:7b:da:f5:46:74:0c:48:61:18:
                    a2:6e:0c:fa:26:42:96:75:05:3f:b4:b3:be:0b:09:
                    9f:63:92:ea:bf:a5:88:30:7e:6f:65:43:a1:c0:40:
                    38:69:11:03:7d:3c:71:40:c8:3f:0a:65:2e:97:5a:
                    4b:1d:f1:f3:56:a1:9f:46:43:8f:69:6e:20:9b:c2:
                    f6:41:24:bd:a5:00:10:38:d8:71:3b:ad:9d:be:2c:
                    71:02:34:0c:4b:6d:5f:6b:82:53:19:97:f5:b0:8a:
                    e2:86:d5:93:83:69:a7:3d:e1:a1:61:68:f7:c9:e2:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:18:6B:0A:9B:0C:4E:62:8E:3E:30:4D:00:05:68:86:A5:9E:FD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27819b1c-adf8-45d7-9c31-e6af7b843adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:99:2e:8b:6a:ac:2a:20:a6:de:26:53:0d:49:e4:ee:f9:
         c6:2a:52:cd:1e:2e:5b:89:5a:06:c6:e2:e0:ce:fc:57:c5:01:
         4a:f7:fb:b4:f9:93:72:b9:13:0e:ed:96:80:db:f1:36:eb:74:
         c3:89:1d:66:44:14:14:0f:af:6a:28:d7:8b:04:07:ed:ca:c7:
         ab:a1:3c:4b:6a:69:8f:08:19:3b:80:ff:68:a6:11:f3:d0:01:
         a0:88:9e:59:1f:08:d1:02:07:48:da:e8:33:c2:a1:64:42:c9:
         90:d6:fd:2a:62:0d:80:1b:f2:4c:9d:99:06:f9:52:be:b9:43:
         9e:11:35:92:8a:dc:5f:82:91:1e:94:3c:41:24:59:20:75:ae:
         05:42:b0:5b:da:16:82:f0:07:e1:d0:b6:e0:73:55:84:41:ce:
         13:cd:d4:ca:e8:db:bf:75:8d:83:e6:8f:c3:d9:76:72:d8:82:
         2d:9b:2d:3a:35:66:6f:1c:aa:90:32:ec:7a:cb:de:dc:fd:6f:
         ed:d0:8a:5c:dc:3c:c1:1d:81:10:17:08:dd:02:32:85:37:b0:
         eb:29:6a:11:eb:2b:f9:21:30:04:c6:a8:32:9f:a9:1b:a8:46:
         e1:6e:96:c1:c1:ae:bc:2e:18:bb:e8:4d:1f:f5:fa:9d:32:f0:
         1e:f3:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:10:46 2025 by rpki-client