Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45ca887f-c6a9-4d0f-80fe-5fc5357d2ba3.roa
File:                     45ca887f-c6a9-4d0f-80fe-5fc5357d2ba3.roa (raw, json)
Hash identifier:          aItZxnW3h7/mYCqhv4MGZmGxCrk/7VTGZZPLR6mTpW4=
Subject key identifier:   C2:DA:C7:1E:6B:8A:D0:03:74:40:A9:CD:2F:49:B8:96:A0:6B:A3:00
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5635E40F9CCE98D72E361D2CBB066A9AB80664D8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45ca887f-c6a9-4d0f-80fe-5fc5357d2ba3.roa
Signing time:             Mon 22 Sep 2025 22:42:44 +0000
ROA not before:           Mon 22 Sep 2025 22:42:44 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.244.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:35:e4:0f:9c:ce:98:d7:2e:36:1d:2c:bb:06:6a:9a:b8:06:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 22:42:44 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=859511fbee8434d8b6944146dfd81c26ff5d3a063ad5b35e5e6c065bf1f6162a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:36:25:a6:fe:f3:51:e2:44:8a:48:e8:01:
                    ea:a1:ca:e0:d7:ec:bd:53:1d:cb:1a:eb:d3:fa:b1:
                    97:36:d4:5b:22:5a:28:fd:99:db:f5:54:88:10:cb:
                    85:a1:57:a0:8b:fb:8f:55:12:80:68:07:39:f8:0c:
                    d7:c6:d2:8a:3f:4b:9a:38:a9:8b:f0:06:79:95:98:
                    57:bb:1c:1e:33:54:df:4b:77:aa:ae:96:9b:71:c6:
                    49:44:eb:fd:04:a7:95:82:78:e1:46:86:d6:1c:f3:
                    82:52:82:d1:df:8b:d5:4b:7f:85:84:ea:5d:a2:f8:
                    11:af:8c:77:a4:3c:f8:4b:be:01:6f:d3:9b:27:28:
                    36:2c:77:e0:20:c9:36:ee:4e:3e:ed:38:ad:98:2f:
                    5c:89:48:c3:e6:05:42:ea:44:3b:c5:99:f9:c8:09:
                    88:c2:41:56:26:49:0a:24:9f:97:5f:fb:ff:5e:db:
                    65:54:45:7a:e6:83:6d:25:0b:e9:fc:ec:1f:64:e1:
                    55:df:be:de:33:db:2f:a8:33:1f:a8:56:4f:f9:60:
                    15:47:0d:d4:aa:ad:70:70:e0:c2:f5:1f:c6:af:33:
                    85:3a:94:fd:b5:6f:79:99:8b:3d:4f:df:6f:e0:44:
                    57:23:54:94:97:bc:47:60:83:0b:14:bc:3d:a7:59:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:C7:1E:6B:8A:D0:03:74:40:A9:CD:2F:49:B8:96:A0:6B:A3:00
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45ca887f-c6a9-4d0f-80fe-5fc5357d2ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.244.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:45:22:7a:5c:9f:b6:00:11:92:69:b6:6c:79:7b:f4:60:94:
         6b:54:71:62:15:08:01:f5:d6:a6:d2:c9:63:c3:c2:1b:44:e8:
         fd:aa:67:ac:d3:50:8e:cd:aa:62:ae:5b:89:da:f3:6e:35:1b:
         e1:45:d0:fd:7f:26:cc:6a:66:0e:ac:da:b2:1b:9f:93:22:a6:
         9a:93:c2:91:6e:9c:80:59:a2:1f:15:01:92:45:db:2b:5d:5a:
         ed:c8:3a:b1:d0:96:62:70:1e:8e:53:01:f3:3f:e0:e3:89:f7:
         c4:bf:c6:56:6d:6f:76:67:6f:91:02:2c:67:ff:30:19:c4:d7:
         1c:39:dc:bb:6e:fd:65:47:c5:e2:f7:3a:18:5e:ad:c1:90:7d:
         91:34:51:39:4b:cd:af:58:a4:f3:ed:a9:bd:82:49:2a:56:39:
         a9:9d:aa:50:ca:a6:c3:1e:48:ad:32:26:0b:31:82:a0:e0:ac:
         28:79:f4:93:bc:b3:a4:24:1c:23:74:e8:55:8a:62:38:0c:7c:
         10:74:c3:3a:23:3a:98:7c:c3:cb:76:4d:fe:58:96:81:38:c7:
         a2:0c:a9:68:a3:f6:0d:02:64:62:66:92:c2:df:f1:1b:13:be:
         14:26:9e:ef:a6:54:32:29:4b:09:01:7a:11:42:a5:d4:f7:ce:
         90:aa:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:57:41 2025 by rpki-client