Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa
File:                     34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa (raw, json)
Hash identifier:          SsV7hSR4pv+DyIhek0Y0DmcyZxEfuWarIRtcczBDe5k=
Subject key identifier:   9A:E3:3D:6F:2F:F4:18:69:DA:AE:DD:52:13:C7:7B:C7:47:F7:47:22
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22E8C5E548D85A800C2CA8C59C042DA9945C688A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa
Signing time:             Wed 20 Aug 2025 00:30:14 +0000
ROA not before:           Wed 20 Aug 2025 00:30:14 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e8:c5:e5:48:d8:5a:80:0c:2c:a8:c5:9c:04:2d:a9:94:5c:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 20 00:30:14 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=1b3e394bae9ad8fdf7a46bf3b88dac73f01930ef54ef8fb92eeb9eafaefd38c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:72:45:09:8c:8f:b8:34:92:b5:a9:c1:31:
                    a1:41:d3:cd:4e:2f:3b:c3:af:3d:b6:ff:17:18:6d:
                    7c:22:54:8e:5e:62:ea:a3:54:83:62:37:b0:a2:f3:
                    5f:25:57:b2:43:fe:84:a7:23:f3:12:09:9c:e5:c9:
                    bc:1d:49:72:a3:ce:2f:ce:79:f1:9c:bb:93:2d:c9:
                    86:f3:f3:fa:29:d6:de:c2:c4:dd:f4:d4:7b:68:22:
                    af:59:0a:ed:dc:37:a2:2e:07:6f:f9:0b:d1:77:24:
                    04:68:18:40:42:b7:a1:62:5b:e8:90:72:29:c2:da:
                    25:ab:8e:95:48:89:ee:45:0b:a5:3a:17:8f:af:56:
                    1c:39:8c:3a:6d:f7:65:7a:55:e9:4d:5c:8e:e2:56:
                    28:42:4a:fe:c2:ee:aa:f5:39:47:e5:92:94:45:91:
                    11:de:97:23:c8:b4:ad:08:1b:13:98:60:e3:7b:f2:
                    75:9c:c6:f2:57:b2:2c:5e:e8:b0:3a:a9:3e:98:d1:
                    e1:18:cc:46:e1:c0:d1:4e:d6:bc:b8:80:c8:1e:0b:
                    86:80:45:bb:dc:74:5a:29:ea:95:b0:be:b4:62:fd:
                    7a:e6:8f:e9:34:3c:e9:f6:08:c1:a5:d9:04:27:d8:
                    bd:11:10:1a:ae:bc:57:1b:93:3a:88:5e:8a:fa:7e:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:3D:6F:2F:F4:18:69:DA:AE:DD:52:13:C7:7B:C7:47:F7:47:22
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:27:e5:6c:2f:bd:68:cf:70:75:e1:a2:3f:ff:d3:d1:95:ec:
         1b:7c:6d:a2:1a:10:06:b9:a1:a0:5d:8c:d7:2c:e2:d7:6c:a7:
         51:75:9c:b0:12:fd:81:d0:ab:45:50:11:4d:8e:49:47:3d:dd:
         d9:09:69:29:39:62:69:7d:ac:d5:c9:5e:04:c6:83:c3:3d:32:
         c0:bf:a0:96:dd:df:98:c6:58:e0:4d:37:5e:3d:7d:94:41:0b:
         c6:35:3d:79:18:7c:6d:a4:be:ab:85:ed:6e:d0:8f:71:63:8c:
         35:05:f4:b4:7b:79:44:f2:c0:2d:a7:8d:4b:ec:3a:d9:ba:28:
         e4:08:6c:e8:ff:0d:fa:4c:e3:5c:07:cc:e3:1c:5a:2a:e1:ae:
         03:a2:d4:e6:44:ee:fb:54:06:31:ae:50:ac:72:b7:70:e8:cd:
         d1:2c:f5:57:6f:48:6d:64:8d:f6:90:8b:2d:60:5d:5d:92:28:
         84:bb:45:98:42:29:42:bf:02:cd:48:00:b1:4c:1e:33:fa:f0:
         96:8f:8c:a0:b2:00:47:06:bc:c9:5c:71:78:d1:a7:2a:72:f2:
         e1:81:50:b2:22:09:4a:af:6e:ae:a2:5e:1c:a7:b2:6c:a6:34:
         99:7b:e0:1a:76:60:41:d0:a2:af:82:3f:a0:40:42:75:91:f2:
         4e:42:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:48 2025 by rpki-client