Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54352540-2c72-4291-90dc-33c3887a0165.roa
File:                     54352540-2c72-4291-90dc-33c3887a0165.roa (raw, json)
Hash identifier:          w1TXDvG5q5pTKrJmfAjIJa4yR6jy2W8afoXT0LH5MC4=
Subject key identifier:   AD:74:DE:43:D7:DB:4C:11:86:98:CF:92:09:85:F7:B3:ED:F6:C7:41
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3714A3C6B1A008752A2FB98F056B0F05A09C5D9D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54352540-2c72-4291-90dc-33c3887a0165.roa
Signing time:             Mon 22 Sep 2025 16:38:46 +0000
ROA not before:           Mon 22 Sep 2025 16:38:46 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.249.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:14:a3:c6:b1:a0:08:75:2a:2f:b9:8f:05:6b:0f:05:a0:9c:5d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 16:38:46 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=e9dd73ba7d84a4d21ad1d4f85cde02612bbe9a1d85b15d70247d18bf63813763, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:0f:7c:ea:61:99:4b:fd:e5:66:e4:cf:99:
                    27:ba:69:34:d7:72:20:a3:08:c5:54:17:99:05:89:
                    43:b1:7a:a0:63:4e:02:10:aa:ea:a1:98:6b:f7:e5:
                    a2:a0:89:b5:6e:09:55:86:f8:44:8e:39:4e:f3:1e:
                    0d:4d:27:5c:0d:87:42:b4:b7:8a:61:ad:7b:bc:e5:
                    d6:f5:5f:26:66:2d:bf:6d:29:79:65:37:65:71:ac:
                    fc:97:42:92:93:a9:97:a2:11:cf:38:d5:bd:0c:a6:
                    de:b9:1a:35:f7:d1:bd:d5:66:20:a6:7a:ee:6a:b5:
                    7d:3c:87:74:a8:7a:1a:ad:53:5f:88:0d:3a:c8:4f:
                    33:6f:cd:1a:fa:d6:1a:29:9e:8c:93:a2:db:1c:0b:
                    a5:d3:56:1d:bc:2f:10:3b:2d:d0:a7:66:fc:32:1a:
                    89:16:c1:bc:05:fd:96:8e:7d:4e:03:d9:c4:ec:c1:
                    b7:1c:f0:6e:5b:5d:c6:af:36:8b:92:48:21:19:15:
                    49:12:c6:e7:92:b7:97:da:13:49:c8:f4:04:ce:65:
                    1a:9a:ad:ad:4b:42:83:27:ed:b8:05:4e:ac:e6:72:
                    c4:68:44:5e:e8:4f:56:ae:b2:95:16:2a:5c:9e:e7:
                    d0:cd:f2:0d:07:cb:e0:95:b5:ec:f4:7a:2c:26:d2:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:DE:43:D7:DB:4C:11:86:98:CF:92:09:85:F7:B3:ED:F6:C7:41
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54352540-2c72-4291-90dc-33c3887a0165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.249.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9e:26:b2:1a:42:0b:6c:02:2a:2c:30:08:8b:a4:30:fb:11:
         43:14:20:27:9c:89:41:3a:bf:89:31:e6:4c:95:94:94:d7:6b:
         ff:31:21:fd:2c:5d:31:7e:4c:40:5a:d6:89:1e:57:96:63:95:
         4d:cb:b0:34:a0:a9:ac:81:56:ad:a3:d2:c9:f4:40:bb:04:2e:
         36:38:01:43:50:12:94:ee:fc:18:75:17:09:57:bd:aa:72:a9:
         10:52:9b:e1:ed:ef:03:ea:36:bc:62:0c:59:b2:fe:1a:18:ad:
         bc:2b:6c:c4:18:9d:29:2e:47:3f:10:05:e0:73:9f:72:89:0e:
         31:bc:24:02:dd:64:fe:c4:6e:da:4d:51:0e:50:9e:7b:ef:9b:
         78:32:ef:1c:1a:2c:b0:f1:e4:ac:40:f6:55:33:4d:c0:b2:2e:
         16:12:9b:92:d9:36:64:69:f5:bf:50:37:ee:6c:04:2f:33:b6:
         b9:ba:d7:c9:f4:98:01:f7:98:35:8d:9a:a3:2c:c6:a8:a1:66:
         73:50:4d:95:48:60:c8:79:19:03:a4:9d:a5:5b:70:70:9f:0b:
         6f:c7:60:88:30:3a:d0:2d:6b:58:cf:61:54:68:a2:2d:a4:26:
         a0:40:6e:9b:e9:61:82:aa:b2:ed:d4:67:c0:f9:df:75:01:09:
         ab:e2:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:16:39 2025 by rpki-client