Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eec77bd-977f-43e7-a7a4-8ab3b0fb0536.roa
File:                     2eec77bd-977f-43e7-a7a4-8ab3b0fb0536.roa (raw, json)
Hash identifier:          eMrjT+YMqXOzVQ6m0xBVayTQ+wnCnEC0olqnSkXvU0g=
Subject key identifier:   3F:18:09:F0:0E:65:2A:C7:D8:26:25:AC:40:7F:BD:57:44:DE:0A:AD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7B67666168A71F12F301FC46C66406765F310CA5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eec77bd-977f-43e7-a7a4-8ab3b0fb0536.roa
Signing time:             Wed 15 Oct 2025 20:30:02 +0000
ROA not before:           Wed 15 Oct 2025 20:30:02 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        143.204.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:67:66:61:68:a7:1f:12:f3:01:fc:46:c6:64:06:76:5f:31:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 20:30:02 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=941bb9fc8706a76c6131b23569731a8091ad95e0f7deedbf9162ee5a5fb13749, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:5a:8e:3c:2a:f7:0f:07:7d:f6:c4:dc:dd:
                    af:8e:12:d9:68:17:59:ae:4a:0b:65:d5:70:4e:4e:
                    d9:d0:60:a1:93:e6:3c:7d:90:f5:21:37:61:eb:a8:
                    22:0d:61:81:bf:66:fc:14:4f:6f:5a:c5:3b:8b:a2:
                    86:67:5f:4a:09:9b:a8:ab:13:02:bc:27:3a:57:3f:
                    0e:33:76:c7:c5:30:5b:df:31:7a:69:a7:41:fd:6e:
                    86:32:86:45:a1:5f:08:ab:0e:3c:93:eb:6d:52:20:
                    03:14:cc:9e:a2:84:4b:75:61:d4:05:b2:9f:e4:4c:
                    f7:a9:38:65:c5:ae:ac:97:8a:ae:15:ce:46:05:8b:
                    bf:c1:3d:2f:58:65:99:cb:47:f1:01:92:36:b6:b1:
                    c3:fb:9a:6e:4b:48:29:0b:8b:26:46:a3:91:6c:2a:
                    34:5b:25:df:94:a6:2d:af:e4:07:b6:19:cd:f4:ce:
                    d9:7b:f8:13:1a:94:b1:68:bd:1a:e7:15:b3:01:55:
                    77:67:29:1b:26:5c:54:85:13:01:73:4a:af:f6:1f:
                    ed:dd:81:ca:d7:ef:d6:45:8c:42:3a:80:23:dd:aa:
                    5d:39:c3:94:67:51:70:78:c3:36:1e:2c:f7:da:4e:
                    f2:bd:b1:b2:cc:ab:ca:d5:d3:58:71:fb:2e:ae:84:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:09:F0:0E:65:2A:C7:D8:26:25:AC:40:7F:BD:57:44:DE:0A:AD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eec77bd-977f-43e7-a7a4-8ab3b0fb0536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:e9:a2:c8:3c:ee:34:23:bc:57:a6:ed:e3:29:dd:54:82:
         02:db:04:36:99:76:c3:4b:61:91:a6:4b:bf:59:7e:72:f8:9f:
         00:2a:70:04:37:48:6c:13:ec:b4:9f:04:18:bd:47:83:03:67:
         da:31:f8:da:47:42:b4:8d:a9:ed:d2:1a:23:33:5e:9b:f9:3c:
         ec:e0:6e:1d:f9:e3:37:6e:68:94:bb:db:5e:a2:17:a2:7e:ba:
         ac:8a:a5:6b:c7:e7:d1:d3:1d:a8:7c:55:d0:0e:3a:68:d1:98:
         a1:26:db:7e:eb:1b:80:31:b1:94:d3:8a:ac:df:eb:35:d8:e7:
         31:1c:58:07:41:3d:6f:58:2a:05:5f:96:dd:c8:71:f3:3f:48:
         73:d2:9b:d0:ed:50:45:80:ad:00:2f:e3:fa:8d:a4:65:00:7a:
         a1:d5:ad:29:0c:4a:89:bd:df:2e:9a:8a:6d:cd:88:e2:2f:a7:
         b5:96:9b:aa:a8:da:06:66:94:ab:42:7f:0e:b5:c8:a5:e6:d3:
         df:d0:ca:eb:fe:15:a5:26:ff:bc:99:a0:ec:c7:c9:22:25:c6:
         f3:d6:34:db:55:a2:dc:9f:18:31:85:c2:43:cf:4f:47:31:48:
         92:13:a3:4b:d3:27:cb:2a:f4:5c:3c:c3:5d:1f:f6:76:14:06:
         70:40:c2:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe2dmYWinHxLzAfxGxmQGdl8xDKUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE1MjAzMDAyWhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDFiYjlmYzg3MDZhNzZjNjEzMWIyMzU2OTczMWE4MDkx
YWQ5NWUwZjdkZWVkYmY5MTYyZWU1YTVmYjEzNzQ5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhY1qOPCr3Dwd99sTc3a+OEtloF1muSgtl1XBOTtnQYKGT
5jx9kPUhN2HrqCINYYG/ZvwUT29axTuLooZnX0oJm6irEwK8JzpXPw4zdsfFMFvf
MXppp0H9boYyhkWhXwirDjyT621SIAMUzJ6ihEt1YdQFsp/kTPepOGXFrqyXiq4V
zkYFi7/BPS9YZZnLR/EBkja2scP7mm5LSCkLiyZGo5FsKjRbJd+Upi2v5Ae2Gc30
ztl7+BMalLFovRrnFbMBVXdnKRsmXFSFEwFzSq/2H+3dgcrX79ZFjEI6gCPdql05
w5RnUXB4wzYeLPfaTvK9sbLMq8rV01hx+y6uhJWJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPxgJ8A5lKsfYJiWsQH+9V0TeCq0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJlZWM3N2JkLTk3N2YtNDNlNy1hN2E0LThhYjNiMGZiMDUzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGPzD4wDQYJKoZIhvcNAQELBQADggEBADqG6aLIPO40I7xXpu3jKd1UggLb
BDaZdsNLYZGmS79ZfnL4nwAqcAQ3SGwT7LSfBBi9R4MDZ9ox+NpHQrSNqe3SGiMz
Xpv5POzgbh354zduaJS7216iF6J+uqyKpWvH59HTHah8VdAOOmjRmKEm237rG4Ax
sZTTiqzf6zXY5zEcWAdBPW9YKgVflt3IcfM/SHPSm9DtUEWArQAv4/qNpGUAeqHV
rSkMSom93y6aim3NiOIvp7WWm6qo2gZmlKtCfw61yKXm09/Qyuv+FaUm/7yZoOzH
ySIlxvPWNNtVotyfGDGFwkPPT0cxSJITo0vTJ8sq9Fw8w10f9nYUBnBAwvc=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:57:43 2025 by rpki-client