Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa
File:                     38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa (raw, json)
Hash identifier:          D1fa24KQxAaPgXtDxUwwANk52Kue4pXrIsMRBdqaQjo=
Subject key identifier:   E4:50:41:2F:FC:8E:55:CB:F2:80:F0:CB:CB:4E:CA:0F:EB:F6:8C:21
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7F16FCEB62C75E6DB10A7D2F6FC301A9196D5E74
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa
Signing time:             Fri 29 Aug 2025 17:11:48 +0000
ROA not before:           Fri 29 Aug 2025 17:11:48 +0000
ROA not after:            Fri 03 Oct 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        52.46.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:16:fc:eb:62:c7:5e:6d:b1:0a:7d:2f:6f:c3:01:a9:19:6d:5e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 29 17:11:48 2025 GMT
            Not After : Oct  3 23:59:59 2025 GMT
        Subject: serialNumber=b6e70996194f389525dbc0d7a2f49afc66017533a045aa3c7432a2cb1c687a21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:6f:31:b6:a4:7c:13:16:78:92:eb:31:15:
                    09:05:96:f1:de:3e:53:22:6a:d1:8a:78:58:bf:f2:
                    50:83:28:81:e8:ba:2a:a1:9c:fa:16:5d:0b:a1:77:
                    1b:c4:46:19:2b:e8:cf:ab:ce:98:5c:55:87:ed:a7:
                    23:6a:b0:fb:25:d5:3e:92:9a:b2:84:10:a0:24:2c:
                    e2:f6:f5:ff:1e:e9:3e:e7:d4:78:a9:5b:13:34:b0:
                    ca:ae:07:02:38:1f:ca:b4:30:c6:55:34:99:fa:f4:
                    25:5e:0b:09:e4:39:6a:04:64:ab:9a:4c:08:ed:1b:
                    cf:0a:df:5b:bd:c7:7c:12:b5:57:7c:05:4e:ec:ef:
                    a1:29:af:83:d6:e3:a6:fe:7b:07:c8:e4:02:48:26:
                    bb:9e:f4:22:5b:17:6a:fe:3a:7e:17:87:11:32:5c:
                    2d:8a:2f:24:cd:ed:9c:59:c4:d3:af:62:1c:81:19:
                    24:ee:78:b5:76:d9:67:e5:78:2d:fe:cb:c8:a9:f8:
                    38:e2:78:c7:e5:24:9a:6d:32:11:11:7a:ad:b4:29:
                    ec:36:31:68:84:3f:83:b8:dc:86:26:f9:09:f6:a3:
                    49:ac:82:b0:b6:23:72:6c:67:5a:fb:85:61:a2:47:
                    40:a3:0d:a8:a1:78:68:32:7f:26:72:82:46:a4:2d:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:41:2F:FC:8E:55:CB:F2:80:F0:CB:CB:4E:CA:0F:EB:F6:8C:21
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:17:c7:73:85:3e:b1:7a:8b:f7:ae:8e:fb:c0:96:71:f4:
         a9:3a:b9:03:53:5b:2f:50:99:bd:72:8f:87:3c:92:aa:a7:57:
         f7:b1:2c:09:c2:38:0b:1f:07:d3:17:36:bb:98:0e:f5:57:cc:
         7d:0c:f7:06:bb:9c:49:d3:77:6f:e1:f4:6e:12:d2:4d:7c:97:
         25:4f:81:0f:c3:32:e7:1b:44:ec:0f:7c:5b:b1:c3:87:88:df:
         75:c0:cf:ed:61:9c:09:fe:13:3d:ff:a9:82:53:5f:8d:ab:f6:
         11:1b:65:dd:7c:b5:a1:06:a3:d1:02:9c:f8:ae:aa:e6:72:74:
         01:50:d7:1c:ab:d2:dc:52:be:cc:98:71:df:62:d5:4d:8a:ff:
         49:3f:46:b1:d4:96:d5:90:e3:67:28:1b:45:e8:56:60:54:11:
         37:04:f1:a0:95:ed:b1:67:de:37:9f:74:0c:f6:af:7c:8b:aa:
         84:d3:bc:b7:79:04:c0:0c:92:0e:a2:05:ef:97:4b:3b:23:37:
         b9:0f:2c:1d:4e:73:52:92:ab:10:68:85:95:61:16:77:8d:b9:
         16:8e:d2:0a:8e:5a:37:4c:8d:2b:0f:15:11:c6:df:22:94:27:
         16:f5:7b:05:6b:5b:bc:ea:1d:8f:f7:c9:ab:09:69:f0:90:e2:
         6c:71:d8:01
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfxb862LHXm2xCn0vb8MBqRltXnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODI5MTcxMTQ4WhcNMjUxMDAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNmU3MDk5NjE5NGYzODk1MjVkYmMwZDdhMmY0OWFmYzY2
MDE3NTMzYTA0NWFhM2M3NDMyYTJjYjFjNjg3YTIxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCztW8xtqR8ExZ4kusxFQkFlvHePlMiatGKeFi/8lCDKIHo
uiqhnPoWXQuhdxvERhkr6M+rzphcVYftpyNqsPsl1T6SmrKEEKAkLOL29f8e6T7n
1HipWxM0sMquBwI4H8q0MMZVNJn69CVeCwnkOWoEZKuaTAjtG88K31u9x3wStVd8
BU7s76Epr4PW46b+ewfI5AJIJrue9CJbF2r+On4XhxEyXC2KLyTN7ZxZxNOvYhyB
GSTueLV22WfleC3+y8ip+DjieMflJJptMhEReq20Kew2MWiEP4O43IYm+Qn2o0ms
grC2I3JsZ1r7hWGiR0CjDaiheGgyfyZygkakLVZtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5FBBL/yOVcvygPDLy07KD+v2jCEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzM4MzI2ZmExLTQ5ZTctNGVhOS05OTk2LTJjZDBhNmFiZDgzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI0LrAwDQYJKoZIhvcNAQELBQADggEBAAoaF8dzhT6xeov3ro77wJZx9Kk6
uQNTWy9Qmb1yj4c8kqqnV/exLAnCOAsfB9MXNruYDvVXzH0M9wa7nEnTd2/h9G4S
0k18lyVPgQ/DMucbROwPfFuxw4eI33XAz+1hnAn+Ez3/qYJTX42r9hEbZd18taEG
o9ECnPiuquZydAFQ1xyr0txSvsyYcd9i1U2K/0k/RrHUltWQ42coG0XoVmBUETcE
8aCV7bFn3jefdAz2r3yLqoTTvLd5BMAMkg6iBe+XSzsjN7kPLB1Oc1KSqxBohZVh
FneNuRaO0gqOWjdMjSsPFRHG3yKUJxb1ewVrW7zqHY/3yasJafCQ4mxx2AE=
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client