Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33b076b8-baad-466a-8105-7093b82b63fc.roa
File:                     33b076b8-baad-466a-8105-7093b82b63fc.roa (raw, json)
Hash identifier:          gJeiV/tIHY7mNO+GmpKPCC2Tn9tJrg9iFUlS0uZ6eEw=
Subject key identifier:   75:E9:93:B0:24:90:D6:2C:69:84:09:20:C4:79:81:02:A4:B1:0D:F4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5AB5A5D2A075F190BF1E4FCC621412D13DA32208
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33b076b8-baad-466a-8105-7093b82b63fc.roa
Signing time:             Fri 26 Sep 2025 02:24:33 +0000
ROA not before:           Fri 26 Sep 2025 02:24:33 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b5:a5:d2:a0:75:f1:90:bf:1e:4f:cc:62:14:12:d1:3d:a3:22:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:24:33 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=459f5d2ac5b5480d551d0ad7ac2e1bb987faa9ab0797287166b96007de333709, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:75:63:1d:2c:93:92:88:a7:ae:1f:46:22:
                    2f:44:1d:02:cc:c6:8e:76:00:f0:f4:85:eb:7c:78:
                    28:b5:9f:ac:d3:e0:85:83:ef:09:3b:cb:47:bf:71:
                    a7:e2:18:aa:e4:2e:aa:29:a6:f7:e4:e5:84:c2:e2:
                    44:01:19:7b:2b:94:84:b1:08:c9:d5:ca:3b:81:17:
                    cf:67:f8:ad:d7:92:08:f0:3a:4e:36:37:ba:73:b7:
                    b6:74:a9:05:0f:e3:a7:9b:4c:d9:a8:42:2d:ac:27:
                    00:8d:27:de:c4:cb:da:8c:02:c6:7b:41:4e:f4:83:
                    7a:6d:2f:a6:a7:5e:91:12:3a:c3:fb:57:37:7c:52:
                    30:f0:bd:01:c8:ac:39:97:85:cd:86:2a:0c:23:2c:
                    d6:92:90:b1:8e:94:d1:79:96:47:7b:09:a9:6f:d9:
                    08:8c:54:15:54:f8:13:11:db:42:ac:44:1c:03:f7:
                    de:4e:a3:e5:24:e8:9d:07:6a:7b:6f:a8:19:86:7f:
                    3c:b0:1b:13:f5:4d:4d:00:78:40:4a:9a:69:7a:2a:
                    c1:10:70:66:c1:d8:cc:07:47:7e:6d:7b:12:5a:82:
                    be:3d:a3:4e:28:e5:d9:a6:e1:7d:f9:54:53:38:36:
                    c0:30:3d:61:fb:0c:c5:79:a7:6a:5c:b7:29:94:56:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:93:B0:24:90:D6:2C:69:84:09:20:C4:79:81:02:A4:B1:0D:F4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33b076b8-baad-466a-8105-7093b82b63fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:80:11:e8:e4:bd:0f:ea:c3:8d:c6:12:71:b4:06:ab:d3:fa:
         63:a0:8a:f2:b7:52:bc:0e:14:5a:7e:4f:5c:95:7f:f2:00:12:
         75:3f:b9:71:48:f0:52:b8:24:5a:da:f9:1d:37:a7:22:1e:fb:
         ce:f2:26:2a:ef:6c:4a:a0:b9:75:ca:f8:ad:6e:9e:de:7d:94:
         31:3f:07:71:d3:1a:cb:88:ff:b0:1a:17:53:58:79:af:ea:90:
         b4:cf:5b:70:e5:4b:dc:93:ae:61:b6:f8:2e:51:ca:6b:32:54:
         74:bd:0f:92:fd:70:2a:79:54:65:e2:c1:9a:ef:e3:a0:7c:d9:
         b9:20:c5:63:14:69:15:f0:22:dc:db:58:0a:8e:08:5b:0f:1a:
         9d:94:b9:a5:2a:c1:59:0d:f5:a6:c7:82:d4:79:67:f0:cb:d3:
         80:ff:38:08:14:26:83:59:42:5e:92:a5:93:cb:e7:ea:15:01:
         e7:d4:07:82:93:67:48:04:a2:15:88:7e:0a:83:3d:5d:db:aa:
         9f:d7:e7:72:bb:ab:7d:a7:73:b1:15:6a:8c:a8:34:46:1d:58:
         31:b9:8f:3d:5c:05:db:44:d3:14:f8:37:91:03:ef:a8:07:57:
         cb:83:68:c4:fa:91:22:16:5d:de:05:49:62:2c:5b:66:bc:22:
         c0:c3:49:a1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWrWl0qB18ZC/Hk/MYhQS0T2jIggwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDIyNDMzWhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTlmNWQyYWM1YjU0ODBkNTUxZDBhZDdhYzJlMWJiOTg3
ZmFhOWFiMDc5NzI4NzE2NmI5NjAwN2RlMzMzNzA5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9VXVjHSyTkoinrh9GIi9EHQLMxo52APD0het8eCi1n6zT
4IWD7wk7y0e/cafiGKrkLqoppvfk5YTC4kQBGXsrlISxCMnVyjuBF89n+K3Xkgjw
Ok42N7pzt7Z0qQUP46ebTNmoQi2sJwCNJ97Ey9qMAsZ7QU70g3ptL6anXpESOsP7
Vzd8UjDwvQHIrDmXhc2GKgwjLNaSkLGOlNF5lkd7Calv2QiMVBVU+BMR20KsRBwD
995Oo+Uk6J0HantvqBmGfzywGxP1TU0AeEBKmml6KsEQcGbB2MwHR35texJagr49
o04o5dmm4X35VFM4NsAwPWH7DMV5p2pctymUVjWJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdemTsCSQ1ixphAkgxHmBAqSxDfQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMzYjA3NmI4LWJhYWQtNDY2YS04MTA1LTcwOTNiODJiNjNmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA25qkwDQYJKoZIhvcNAQELBQADggEBAKWAEejkvQ/qw43GEnG0BqvT+mOg
ivK3UrwOFFp+T1yVf/IAEnU/uXFI8FK4JFra+R03pyIe+87yJirvbEqguXXK+K1u
nt59lDE/B3HTGsuI/7AaF1NYea/qkLTPW3DlS9yTrmG2+C5RymsyVHS9D5L9cCp5
VGXiwZrv46B82bkgxWMUaRXwItzbWAqOCFsPGp2UuaUqwVkN9abHgtR5Z/DL04D/
OAgUJoNZQl6SpZPL5+oVAefUB4KTZ0gEohWIfgqDPV3bqp/X53K7q32nc7EVaoyo
NEYdWDG5jz1cBdtE0xT4N5ED76gHV8uDaMT6kSIWXd4FSWIsW2a8IsDDSaE=
-----END CERTIFICATE-----
Generated at Sat Oct 18 05:10:20 2025 by rpki-client