Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5379a059-5a91-4d25-b4b7-c3be2a62c675.roa
File:                     5379a059-5a91-4d25-b4b7-c3be2a62c675.roa (raw, json)
Hash identifier:          OKDt1VOQcQg9u6XBJrTAirZyM3Upn3P4YyDZNCf9VdY=
Subject key identifier:   97:6F:CD:5D:6C:3C:80:1F:1C:8A:90:20:2A:F7:65:B7:FD:92:68:CA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       40ADF9E0777E530CA2073FFFAE36649BADBAE6CF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5379a059-5a91-4d25-b4b7-c3be2a62c675.roa
Signing time:             Wed 24 Sep 2025 18:06:51 +0000
ROA not before:           Wed 24 Sep 2025 18:06:51 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.35.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:f9:e0:77:7e:53:0c:a2:07:3f:ff:ae:36:64:9b:ad:ba:e6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 18:06:51 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=29373b16b63904b8c63857cf18803baad1ac09dd7df4477f72f9792ee8b57826, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:35:86:f2:72:57:68:3a:f8:08:3b:8f:04:
                    d8:54:5b:00:27:fa:3e:a6:71:ef:87:ab:35:5d:df:
                    7e:af:5e:39:d7:45:b0:47:6a:87:9a:7e:98:01:27:
                    13:2f:3e:62:64:4e:ea:0c:6d:e5:37:e0:24:66:10:
                    e4:46:24:3f:49:72:a3:82:1a:ad:41:e0:2f:a9:2b:
                    40:19:cf:70:74:9a:01:2c:5f:15:9a:64:79:0a:55:
                    68:15:ef:d3:18:4e:e7:55:f7:c5:d7:4b:e7:48:b9:
                    44:70:75:59:bd:da:af:5a:c8:21:bd:b2:b3:26:d2:
                    f8:53:91:6c:a8:59:5b:0d:38:fb:70:35:26:7d:76:
                    e3:7d:89:03:ef:1e:15:b3:a7:42:28:c0:b3:27:6f:
                    9e:ca:01:c6:64:74:82:31:87:87:1b:b8:22:70:49:
                    55:80:a1:6d:63:e5:05:bd:ea:b1:66:b8:eb:73:cd:
                    46:4a:3f:ac:7e:49:12:45:83:07:62:33:53:2c:41:
                    67:7b:14:85:90:a4:4a:26:99:35:d6:54:81:d3:df:
                    1d:a9:a0:0c:45:59:5c:e5:1b:ea:d4:96:06:ee:db:
                    30:61:07:66:05:8c:e5:70:5d:11:5d:81:89:a4:37:
                    ba:96:a1:26:61:a8:fa:30:aa:0e:4e:ea:c8:9d:c5:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6F:CD:5D:6C:3C:80:1F:1C:8A:90:20:2A:F7:65:B7:FD:92:68:CA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5379a059-5a91-4d25-b4b7-c3be2a62c675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.35.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:bd:09:a8:cf:bd:2e:92:0b:c7:46:b3:ff:de:34:84:10:
         0e:55:e0:77:d0:bf:c3:88:82:d2:5f:24:cd:d7:bc:c4:dc:59:
         14:16:19:4b:77:92:a2:0f:b6:d9:62:d2:3e:fe:b5:d6:14:a6:
         d4:e7:88:44:46:ee:b1:4e:50:fd:9e:39:44:26:05:22:f9:8a:
         93:35:23:70:15:1c:97:a5:57:f9:18:33:9d:4e:a9:d0:85:7a:
         b4:a3:54:7f:8e:01:cc:4e:e6:ca:56:64:b2:58:17:19:a8:5c:
         e6:57:92:8f:e5:40:7b:3e:28:36:c3:08:72:9f:4e:2d:76:ec:
         2f:a0:89:7f:15:8a:48:7d:c8:38:a9:c0:e0:56:71:04:19:0d:
         5b:57:14:fd:0b:45:fb:c4:83:05:c6:3f:e8:5e:f5:a6:b1:3c:
         ea:c6:28:c8:08:06:cc:eb:65:8d:58:4a:a6:04:eb:9c:34:23:
         ed:64:fb:06:00:9b:32:f5:e1:d1:f3:81:a8:32:4f:62:91:d3:
         3e:00:73:4c:4e:da:29:34:54:c9:fc:1e:de:d7:1b:4f:e7:26:
         2c:f6:c5:44:65:2d:0f:52:69:50:fa:fb:e2:4b:21:22:f9:ef:
         d7:58:6c:47:b8:5b:9e:21:f8:5a:85:29:48:cb:c8:4a:95:f2:
         c8:e1:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:11:45 2025 by rpki-client