Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e4e4b4e-e018-4b87-8553-89a0fcb2ee05.roa
File:                     3e4e4b4e-e018-4b87-8553-89a0fcb2ee05.roa (raw, json)
Hash identifier:          i7yMpMsopvJ4/OqOWVFMVp2gv2iKero/cOTiLjykpuQ=
Subject key identifier:   7F:C0:33:A3:A4:2A:FF:96:7D:B3:EA:EE:B1:99:9C:96:C5:61:9B:49
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3486B885322EE97016BC24A26389759D548726C8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e4e4b4e-e018-4b87-8553-89a0fcb2ee05.roa
Signing time:             Mon 22 Sep 2025 20:15:29 +0000
ROA not before:           Mon 22 Sep 2025 20:15:29 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:86:b8:85:32:2e:e9:70:16:bc:24:a2:63:89:75:9d:54:87:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 20:15:29 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=d29842b27d674c7eab9ea62b4527a74d5e7ae2a2c13bd195c5ccab632c367560, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:2a:eb:99:a5:ad:e9:34:ff:15:db:91:16:
                    b9:c6:22:a9:b4:70:16:3c:73:26:a9:3a:3a:0d:af:
                    87:d6:08:5a:c9:db:4f:e7:d6:85:de:19:bb:da:dd:
                    b9:ac:7d:c9:11:c0:7b:8d:b3:df:67:2c:08:2d:ed:
                    bc:c2:75:eb:17:01:40:7f:2b:df:81:85:a2:64:8c:
                    85:e3:5c:38:50:dc:88:06:4e:95:80:41:9f:7a:d3:
                    5e:fc:01:1e:88:68:d5:7a:2b:8b:cb:07:19:6a:90:
                    06:6b:f6:84:5a:3f:82:e3:9f:b1:e5:6b:6a:e3:cb:
                    12:ea:78:f5:68:52:d4:d8:d6:01:f8:2c:be:a3:0b:
                    d1:aa:04:0f:01:9d:91:ef:b7:9a:6b:cf:32:f7:e7:
                    ba:cd:c4:df:08:34:a9:d3:ac:00:d5:99:ee:a5:5f:
                    f2:21:f9:5a:e4:a8:f3:d1:f6:bd:40:c1:e8:cb:4c:
                    cd:3c:22:81:75:44:58:ba:a2:cb:ce:5c:8e:f5:1b:
                    53:32:39:5d:ca:14:fd:b0:b1:bc:4f:6a:e3:0d:6b:
                    73:88:bc:12:4c:70:8b:de:f5:ec:d6:5e:e5:60:c7:
                    31:fa:91:b5:f3:41:09:e7:2b:4d:96:6d:8d:de:84:
                    d4:80:0c:4a:b5:18:01:8e:6d:f5:8d:99:77:9b:b8:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C0:33:A3:A4:2A:FF:96:7D:B3:EA:EE:B1:99:9C:96:C5:61:9B:49
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e4e4b4e-e018-4b87-8553-89a0fcb2ee05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:77:47:65:bb:e5:c6:77:e5:b4:70:5b:05:5e:8e:1c:87:d9:
         6e:03:48:41:ae:75:1a:72:5f:9b:41:90:3c:37:28:a3:03:2f:
         8b:c4:79:3f:41:ad:5c:4c:85:cd:67:7a:16:2d:ea:aa:e7:44:
         1b:91:de:31:1d:56:e1:8a:84:c4:9d:f7:a1:cf:c6:1d:05:92:
         4f:c6:cb:2b:06:ff:e0:b6:86:da:02:96:c3:9f:f1:df:88:00:
         ec:a0:cf:e2:62:b4:8d:9d:d0:ad:f2:0c:e6:2d:db:05:8f:7a:
         e8:7b:b3:d3:71:e9:c1:7c:9d:96:db:dd:3c:c1:4f:cc:ee:4f:
         15:6e:c2:d8:5e:f4:8d:d3:c6:1b:18:fd:fe:83:57:ef:fc:3d:
         13:5b:71:bb:a2:8b:c2:5a:eb:7c:7f:b7:58:05:4d:24:43:a3:
         17:f9:d3:49:30:79:17:27:e1:65:d1:36:3d:4f:27:44:09:a1:
         d5:07:de:54:c7:3a:cc:6c:64:01:03:0a:e1:2f:f8:44:67:3a:
         e2:00:a1:33:3a:04:bd:8f:e4:d8:73:4c:7f:ab:57:25:d1:37:
         e1:d3:37:9d:82:40:00:ea:90:ec:58:fe:8d:32:a5:b8:81:97:
         97:86:2c:95:eb:02:79:0a:af:5d:2a:89:e9:57:4f:f3:2c:1a:
         e2:30:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:11:52 2025 by rpki-client