Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae8044c-8819-4045-b679-9be339b6809b.roa
File:                     5ae8044c-8819-4045-b679-9be339b6809b.roa (raw, json)
Hash identifier:          OnwMEgvtCKMo7B7pEnMK2xyg95r/ilfjDkARztNIzHg=
Subject key identifier:   55:FB:D4:F2:60:C5:BD:A7:E5:1D:49:2B:73:70:D0:6E:A9:D3:55:40
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       790C25FBE4338CDF8FB7E6E2A3DFD7D04249D239
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae8044c-8819-4045-b679-9be339b6809b.roa
Signing time:             Wed 24 Sep 2025 21:32:43 +0000
ROA not before:           Wed 24 Sep 2025 21:32:43 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0c:25:fb:e4:33:8c:df:8f:b7:e6:e2:a3:df:d7:d0:42:49:d2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 21:32:43 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=b9b7d361ee3119b967208d3bb1711a8b72d07fc8de5b8e4297edf430002c8103, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:e4:c3:68:f6:5e:47:af:89:53:e6:84:44:
                    c1:04:e6:a6:c4:74:0b:4d:de:ec:ad:48:80:4f:9b:
                    54:6a:00:ae:90:43:e7:b9:7d:ab:28:e5:bd:43:ce:
                    5f:08:14:bb:c2:87:fa:3a:8f:25:3a:d3:04:9d:49:
                    ea:6f:e9:1c:d8:dd:cc:55:43:7b:05:fc:33:e2:a8:
                    31:c1:f0:4c:95:65:73:86:62:f0:7e:e6:5b:50:35:
                    4d:10:d9:6c:77:ff:f9:d8:f5:8f:3a:b9:be:6d:48:
                    7a:0c:6b:2d:30:2f:2a:b3:e4:c2:df:63:46:03:cb:
                    ba:89:b7:c7:c2:21:9e:b3:0e:3c:12:ee:ac:8e:73:
                    3d:c3:3c:cc:37:0e:d7:0c:74:32:43:29:1a:de:48:
                    45:38:fa:e4:3e:4a:b1:0d:61:32:84:4d:0f:28:d2:
                    c2:e7:7c:b7:2a:18:b8:ca:b9:ae:be:07:a3:81:4b:
                    97:9c:10:c5:c7:65:72:bd:27:f5:4e:59:6d:17:06:
                    11:6a:b8:15:61:ad:3c:ad:6d:d2:74:bd:41:68:3d:
                    aa:37:b7:d8:f5:dc:85:9f:0b:19:09:9a:c9:fb:49:
                    50:28:bd:06:a4:ed:a9:6e:8d:07:54:a3:c5:f2:ca:
                    b1:32:58:ed:46:51:53:6e:0b:c6:bb:aa:83:f8:d2:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:D4:F2:60:C5:BD:A7:E5:1D:49:2B:73:70:D0:6E:A9:D3:55:40
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae8044c-8819-4045-b679-9be339b6809b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:84:07:21:74:2d:56:9f:08:44:c5:9a:ce:ac:73:97:e8:
         f8:29:34:d4:fe:c5:68:af:e3:b8:bb:8b:76:5b:b3:a8:88:fc:
         8f:1f:96:54:20:e8:48:6a:c4:19:1e:be:af:74:e6:7c:d9:ff:
         cc:9a:45:5b:4f:21:2e:ea:b9:d7:30:64:97:78:19:79:ae:fb:
         ca:7f:48:8f:ad:5e:46:ad:0b:02:da:84:09:04:f0:fb:4f:b5:
         00:12:db:f5:f3:21:2c:ee:3b:a0:1b:a4:31:b3:23:0e:26:32:
         3e:65:a4:85:d8:12:22:71:02:70:90:99:c4:2e:8f:5a:09:02:
         2a:a9:8a:d2:84:74:6a:6f:bf:83:92:a7:0a:d7:65:e9:61:f4:
         e8:f5:e1:56:8d:4a:d4:13:62:c1:49:f1:11:d7:bf:0c:5d:d6:
         de:64:c4:d6:d5:45:c0:f0:37:3d:2a:32:15:6d:b4:17:79:21:
         2a:ab:07:8c:8d:c1:f7:39:19:90:ea:65:d6:7a:37:35:fc:eb:
         55:7a:ee:bd:0a:9c:4a:7a:27:86:54:c4:44:31:1c:cb:3e:33:
         28:ac:fe:f4:ef:e2:bb:88:c7:7f:c1:cc:88:92:67:57:bf:74:
         6e:f7:7a:c2:b0:51:e6:b2:cc:0d:ec:00:19:95:f7:d8:2d:b5:
         ce:de:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:05:32 2025 by rpki-client