Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3cef89-bbeb-442f-9d94-09459ae2df37.roa
File:                     2c3cef89-bbeb-442f-9d94-09459ae2df37.roa (raw, json)
Hash identifier:          mNbAHFFB8ApjjN77D5lDaKc4S5By57umXL2KXZLXDiA=
Subject key identifier:   28:AF:06:C4:58:E2:0C:C1:96:F0:4F:D8:4B:6D:64:74:EB:05:74:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       747C6285D65E51A6C31813428AA3C6EE6A6D17A3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3cef89-bbeb-442f-9d94-09459ae2df37.roa
Signing time:             Mon 22 Sep 2025 21:10:37 +0000
ROA not before:           Mon 22 Sep 2025 21:10:37 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.173.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7c:62:85:d6:5e:51:a6:c3:18:13:42:8a:a3:c6:ee:6a:6d:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 21:10:37 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=a528924f7771c6490dfc9dc7846bd537f7f16988aaa3d9d6806d5a7a42dff18f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:47:c2:47:9e:97:34:88:ba:9c:0f:f4:71:
                    33:73:13:9b:db:b5:02:c6:2e:25:c4:49:67:33:8e:
                    34:32:2b:8b:ee:19:6d:0f:45:4e:a1:ef:08:21:fe:
                    2a:4a:ee:b4:e8:3c:2a:a9:b2:a6:e2:11:19:d3:90:
                    37:56:31:3b:48:4c:7c:c7:84:3a:0a:ae:1c:fa:b8:
                    36:4a:db:ef:45:0c:00:8a:71:64:10:d8:52:87:be:
                    fb:0e:35:db:05:e2:fa:27:bb:15:bc:8d:83:8b:f9:
                    31:af:aa:c1:f6:2d:35:f2:90:89:7b:ae:7d:d9:3c:
                    cf:d9:7c:de:43:14:26:17:15:37:4a:bc:45:19:2d:
                    d7:58:2b:04:ab:cc:27:37:41:9d:b6:bd:5a:23:1a:
                    02:6d:c5:85:aa:7b:f3:86:80:36:a0:a5:1d:fb:f8:
                    cf:34:af:df:27:36:47:2d:4c:91:93:1b:23:f9:89:
                    ab:8d:e5:47:cb:37:b9:50:88:9f:74:03:82:99:76:
                    1b:45:31:8d:71:39:94:2e:56:07:05:03:1d:4f:32:
                    65:c5:89:74:25:12:60:64:07:88:5c:fb:fd:6c:82:
                    6f:c6:45:34:d7:3d:75:d5:cd:1b:85:3d:2a:51:f6:
                    1b:8c:7c:15:d8:82:40:87:86:e3:dd:15:96:8c:06:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AF:06:C4:58:E2:0C:C1:96:F0:4F:D8:4B:6D:64:74:EB:05:74:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3cef89-bbeb-442f-9d94-09459ae2df37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.173.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:27:49:2a:e1:71:d0:ae:73:24:dc:27:be:9f:3e:ef:1b:
         60:86:13:31:52:ac:e8:53:af:92:76:8e:71:88:02:1e:c5:79:
         75:b1:34:dc:29:54:12:c3:08:29:8d:78:4a:f6:62:6a:2a:b4:
         56:4c:d3:0b:e5:01:1c:4e:3e:2f:a9:43:e1:ac:f1:32:ff:10:
         0b:f4:9c:7f:d0:4c:4e:59:66:13:8c:0f:b0:8d:c1:ab:80:43:
         ec:0f:d8:25:be:51:fc:3a:45:a2:c6:3d:f5:23:f9:24:71:98:
         35:f0:1a:aa:63:f6:9b:01:01:7d:7b:6d:4a:60:79:b5:62:2f:
         ac:fa:93:96:b1:6d:ee:fd:6f:e4:7c:c7:44:66:3f:b3:03:4a:
         24:9c:37:6a:f4:61:72:32:78:ff:2b:b7:29:db:fc:2c:6c:6e:
         f6:ea:29:57:2c:0b:4a:00:3a:c1:a6:52:7f:16:f5:80:6d:e6:
         c2:99:de:08:52:de:33:33:f8:62:d7:7e:f7:53:de:32:9b:25:
         25:1f:35:2a:ba:b9:2e:07:87:86:66:da:1c:2d:5e:76:08:1d:
         e4:f7:fd:68:f5:2d:2d:cf:50:7a:e4:ae:ee:bf:9e:95:3e:39:
         e3:3e:88:69:19:84:fe:ce:ed:a2:65:3a:26:04:93:a5:b9:9f:
         b7:9b:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:13:00 2025 by rpki-client