Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/574d6ac8-54ef-4d7f-bb8b-1d1d38905ef6.roa
File:                     574d6ac8-54ef-4d7f-bb8b-1d1d38905ef6.roa (raw, json)
Hash identifier:          e0WEMkAsqJKllvUfKcp6PkB3kceXbB6dUcpftTIS44g=
Subject key identifier:   80:96:13:29:BB:54:96:EE:75:B3:0E:5E:6B:D4:73:74:E2:95:FE:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       517A4791BAE68060881B480942199C6E4DF25793
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/574d6ac8-54ef-4d7f-bb8b-1d1d38905ef6.roa
Signing time:             Wed 15 Oct 2025 23:15:22 +0000
ROA not before:           Wed 15 Oct 2025 23:15:22 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        143.204.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7a:47:91:ba:e6:80:60:88:1b:48:09:42:19:9c:6e:4d:f2:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 23:15:22 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=07aacfa11f2be3e0f6049c524847e60affe3eaa43330af3a3dfdac1c802a5718, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:bf:d1:e4:74:14:ca:8f:95:3a:2b:c7:b1:
                    a8:26:0f:86:5f:0d:22:67:54:b5:1f:47:eb:de:e1:
                    f2:e0:1a:5b:32:c9:f8:ea:9d:e7:54:fe:5d:a2:86:
                    1c:82:a2:1d:71:f6:d3:e6:5b:36:8a:92:a9:aa:89:
                    ce:49:69:d2:a4:34:cb:9e:72:47:6c:9a:7a:19:31:
                    3c:03:4a:d8:09:05:85:d5:08:76:9b:e3:6d:91:b0:
                    d7:ab:17:74:cc:db:de:7c:c8:b4:42:94:48:e7:d7:
                    f3:fa:5a:18:d3:27:a3:7a:9e:66:95:12:d9:8f:a4:
                    1a:3e:3f:c8:8a:8b:4b:d5:73:a1:ca:13:0a:3f:41:
                    19:5e:b4:f3:1d:c2:7b:ae:74:de:2a:fd:af:1f:93:
                    ab:d3:8f:41:2e:b6:2b:4e:36:53:d0:1e:38:e2:96:
                    50:4a:b0:4c:de:8d:fb:c1:a0:30:27:68:ab:d7:04:
                    a4:8b:e3:12:69:0a:b1:57:b4:d8:0c:be:dc:bf:81:
                    e0:80:a2:e7:30:d6:e8:d9:4e:4a:71:de:ef:52:d9:
                    bb:5f:85:88:8b:65:07:9c:72:d4:9f:d8:19:de:81:
                    17:54:a1:78:da:fc:7d:d1:04:b4:00:73:26:c9:8b:
                    02:41:23:21:a6:8c:07:2d:23:1c:d9:f1:d8:81:5e:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:13:29:BB:54:96:EE:75:B3:0E:5E:6B:D4:73:74:E2:95:FE:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/574d6ac8-54ef-4d7f-bb8b-1d1d38905ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:89:2e:84:f9:d2:89:4d:4c:48:94:9c:c1:09:26:c9:7f:
         7d:20:15:e0:9f:6f:a2:cb:7b:3d:21:d7:ca:8c:79:45:c4:72:
         31:27:ac:e6:d9:b1:de:af:80:ba:07:1f:bb:16:7f:e8:83:a7:
         f1:74:b7:ea:37:2b:93:1f:90:06:12:b2:a4:56:10:ef:dd:d7:
         0a:4e:88:9d:fc:47:a1:2f:a0:99:94:54:2f:2e:fc:f2:a5:2b:
         f6:c1:27:2a:67:aa:b6:7c:15:74:3f:9a:4a:01:75:d1:f2:fa:
         ee:1e:e6:41:f9:6e:7c:3f:b1:1b:90:4a:cc:ed:78:06:11:a1:
         d6:d1:26:bf:a0:2a:01:e4:d6:15:1b:fd:ec:6d:51:74:cb:0d:
         59:6f:f2:c4:c4:38:43:b4:47:c4:dc:e6:c0:f5:39:27:9c:8e:
         e5:c6:51:19:b4:9a:1a:a1:82:36:3c:f0:92:a4:a0:13:9b:9d:
         9e:6d:a8:5d:b8:36:13:a0:b6:f2:b9:79:bd:5d:0b:14:90:cb:
         0f:53:5c:77:68:a9:57:bf:7f:93:ac:fe:0c:0e:4a:ef:63:16:
         7e:76:51:1b:b5:6c:82:69:da:ed:ad:48:d4:a1:4c:6a:ae:b7:
         dd:b3:fc:0d:2f:63:11:5e:e3:e2:fb:09:93:6f:40:46:00:a8:
         61:23:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:02:16 2025 by rpki-client