Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa
File:                     5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa (raw, json)
Hash identifier:          81FHIZ6Y9SA19bsFJtlgkEc2bBGaur1Jlhl8hnnXV0A=
Subject key identifier:   93:DC:9B:29:E0:EF:65:7F:D1:ED:70:F6:49:B3:E2:33:FA:93:4A:FB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5490CBBE7FBADA0D6469213A4D2B615C76CC91E0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa
Signing time:             Tue 05 Aug 2025 17:50:19 +0000
ROA not before:           Tue 05 Aug 2025 17:50:19 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.84.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:cb:be:7f:ba:da:0d:64:69:21:3a:4d:2b:61:5c:76:cc:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  5 17:50:19 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=5c28d8820af6705986a64a91baea29cc352f3f9247706530e57c111c28a9666f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:ff:3a:14:40:14:53:a1:7f:c2:e0:60:9e:
                    56:a6:b2:e2:59:6c:22:4a:64:ae:f4:16:2f:12:f5:
                    64:1a:7e:86:14:e5:c4:e3:74:69:a9:99:7c:b3:ba:
                    d6:cc:54:6e:6a:12:9b:27:41:3e:40:8c:cb:db:b2:
                    a8:f6:e9:80:39:6a:e7:b0:a7:db:a6:94:0a:ed:c1:
                    7b:c6:fa:65:db:ab:f8:66:5d:fb:92:07:23:8c:da:
                    88:cb:3e:00:48:89:01:6d:7c:9c:82:ba:3d:7d:f0:
                    ef:fd:29:8b:85:63:5b:62:d8:f4:b1:84:9a:38:75:
                    3c:39:68:6b:a6:ee:54:12:f0:10:88:4c:ab:48:68:
                    04:51:5b:91:c7:82:36:7d:cb:0f:11:b2:af:24:a3:
                    9a:ef:f1:70:5d:3c:a8:02:88:22:b1:27:31:39:3a:
                    78:66:e0:cf:b6:ed:2a:b5:d3:e5:41:c9:33:ae:d1:
                    b1:c5:87:1d:77:c1:b2:0f:e9:fa:ae:fb:7c:00:5a:
                    52:c8:aa:a4:7f:3a:c6:c2:30:45:64:40:0d:e3:39:
                    dc:cc:62:90:79:1a:78:dd:fd:a6:b5:8e:89:49:a0:
                    cd:35:b8:cd:98:2a:cc:53:13:c5:a4:1a:9e:7f:8c:
                    7b:31:eb:16:5b:62:d3:04:63:32:bc:cd:27:e1:e9:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DC:9B:29:E0:EF:65:7F:D1:ED:70:F6:49:B3:E2:33:FA:93:4A:FB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.84.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:77:4b:7a:91:d2:05:53:67:97:c4:8a:33:4d:66:5c:53:
         d2:4f:90:94:b1:46:84:95:dc:f2:a0:4a:37:27:64:b9:5d:95:
         6f:53:61:77:33:05:98:70:98:a8:1d:33:35:3b:d6:02:02:89:
         f6:7b:c5:87:dd:ec:50:48:b2:83:52:a9:15:ac:6c:62:ce:09:
         c4:41:1f:81:cc:e2:ea:56:73:f5:91:8b:75:8c:93:fa:29:8c:
         2c:7c:4d:32:ed:8b:4f:1b:31:f3:d7:13:34:55:ba:4d:64:63:
         a8:bf:d5:3e:48:aa:cd:9f:0c:b9:cc:f6:bc:74:59:e2:ae:5f:
         89:13:a4:6b:fe:ad:07:fc:6d:a5:fd:f1:df:d2:02:a9:ff:1a:
         5b:38:19:27:1d:77:a0:e2:25:72:84:9d:1b:4f:9f:d8:2b:a0:
         ce:72:bf:c5:9d:05:f1:27:c0:fa:f5:06:3f:91:fa:fa:37:9c:
         23:ab:82:d1:25:2f:8c:6b:f7:a9:68:7c:77:ea:81:9d:09:9a:
         c5:a1:4d:42:cd:c0:83:b1:a2:27:89:53:6a:7c:a0:a5:3a:1f:
         8e:84:78:cf:1c:2c:2b:bd:d3:cc:99:a5:9d:e1:cf:40:c3:b1:
         e7:be:41:76:4f:99:d2:67:d9:a0:8d:d8:63:df:ae:27:d4:d2:
         ab:e2:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:32 2025 by rpki-client