Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dda6e34-3a00-43e6-afc2-797d9fa3f6e7.roa
File:                     4dda6e34-3a00-43e6-afc2-797d9fa3f6e7.roa (raw, json)
Hash identifier:          OYwa0QNK34Oa2I4WLaOzTuFr4MS+S/hHS6TSU7lKJcU=
Subject key identifier:   09:FC:30:8F:ED:3B:07:E3:66:7F:48:37:CF:FE:13:62:06:33:38:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       15CF59B630F05DA323E3047659C506C0EE3EBD31
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dda6e34-3a00-43e6-afc2-797d9fa3f6e7.roa
Signing time:             Mon 22 Sep 2025 17:28:03 +0000
ROA not before:           Mon 22 Sep 2025 17:28:03 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.155.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:59:b6:30:f0:5d:a3:23:e3:04:76:59:c5:06:c0:ee:3e:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 17:28:03 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=2a275c5c4b8f7a1ecbbf3f1aebab86296cfd43629b214baeecb0315daa0794da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:5d:59:69:1c:e0:cc:d4:ed:77:a7:6a:07:
                    7f:82:6f:c2:91:d5:ad:7c:62:0d:7e:cc:9e:9e:af:
                    af:5f:92:80:5b:0e:e4:33:60:6d:36:99:8a:a4:8c:
                    94:75:48:3a:f8:2f:a9:b2:8d:f4:2a:a8:f0:97:14:
                    9c:67:af:6e:d4:39:e7:83:61:89:d0:3f:e7:8e:a3:
                    9a:b2:d5:d2:0d:d8:b3:69:ad:07:89:43:b7:99:ee:
                    8d:39:4f:89:fa:28:ca:80:dc:50:3a:55:be:2e:23:
                    bf:12:12:b7:a2:1d:53:74:ab:61:bd:c2:07:09:2b:
                    51:a2:1b:c9:97:3a:98:43:dc:fd:d4:55:64:1a:87:
                    d7:4d:17:aa:ad:a4:95:18:cd:23:f3:8f:90:ed:76:
                    78:fe:ea:0d:19:8b:03:53:f5:05:5e:ee:5c:b9:8b:
                    29:f6:41:20:79:90:26:8d:a4:98:0d:9e:04:e0:c9:
                    f1:c3:c8:2e:44:62:8a:1d:79:ee:22:4c:60:b7:fa:
                    d9:49:f8:bc:e1:dd:53:7d:36:9f:5d:84:94:a2:a9:
                    ae:09:70:ab:7e:66:e8:84:c7:00:dd:e3:42:58:75:
                    ce:df:2a:0c:5c:44:e4:e2:a3:79:1a:9d:66:bf:37:
                    7e:21:57:f3:33:da:bb:e1:45:0b:49:03:a6:cb:9b:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:30:8F:ED:3B:07:E3:66:7F:48:37:CF:FE:13:62:06:33:38:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dda6e34-3a00-43e6-afc2-797d9fa3f6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.155.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:94:c5:55:92:09:91:45:45:79:6b:dc:c1:a9:34:a7:db:
         6e:68:98:7b:72:a6:c0:c5:15:01:69:da:a6:d6:e7:a8:f5:71:
         7b:ce:22:30:47:b8:55:86:ac:16:60:10:d4:78:30:e5:9d:d3:
         4d:1d:ee:cd:6a:70:3c:b2:26:b2:ec:b3:5c:e7:bf:7f:de:bd:
         91:3d:d7:13:81:ae:b0:55:cd:a6:ec:92:88:98:86:2f:ca:cb:
         c9:4b:97:65:fd:3e:6b:b6:b8:f4:f6:74:df:95:9e:31:49:99:
         68:67:95:7f:41:44:1c:0b:50:ef:9d:a9:40:8e:d0:65:6b:04:
         1c:0e:5a:2f:db:e6:57:05:d6:59:e0:7c:92:81:8f:d0:8f:8b:
         57:ce:e7:bc:33:17:c3:44:cc:1c:ab:3c:d7:92:f2:01:96:e3:
         d8:d6:85:c5:21:4e:d1:8a:41:d0:a1:81:29:84:4a:9c:0e:6e:
         28:af:65:61:79:1c:0b:96:49:47:47:73:8e:3f:b5:7c:3b:f8:
         18:e4:e1:72:0f:b4:05:77:4b:cf:3c:19:e0:a8:d1:44:84:62:
         59:10:2d:6a:22:17:b8:48:89:19:79:07:c1:7f:6c:05:ac:4e:
         bb:f4:3c:bf:83:0a:6d:eb:65:03:53:34:03:b8:55:9a:52:93:
         f4:bf:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:15:33 2025 by rpki-client