Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa
File:                     5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa (raw, json)
Hash identifier:          zqEXrSJVutvkLISv+Oe8C57W+EjqhddhQMY04h7Q4jA=
Subject key identifier:   3B:48:B4:33:6B:65:86:E5:2C:BE:F2:19:86:9B:32:BD:79:0A:C1:6A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1DB888112931EC9EA80B394E3B066AE2ABEA8FF1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa
Signing time:             Tue 19 Aug 2025 16:21:47 +0000
ROA not before:           Tue 19 Aug 2025 16:21:47 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.190.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b8:88:11:29:31:ec:9e:a8:0b:39:4e:3b:06:6a:e2:ab:ea:8f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 16:21:47 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=e068c20fff8d60d9fd858cdc4d3f98f904ed3e5c635d6ae0d7f3f53ef22d004f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:a8:23:f4:9c:68:1d:a9:74:08:ec:fb:c9:
                    7d:20:3c:66:24:71:07:c5:50:e4:f8:25:97:5a:66:
                    d5:b8:f9:ae:72:02:47:9f:a8:14:6d:c7:67:b8:e4:
                    6a:69:b3:0e:58:ae:31:5c:cb:b8:9a:ca:1b:d7:d5:
                    46:fc:b9:68:b4:af:0d:b5:60:05:63:04:af:e9:17:
                    7a:89:9f:2a:d6:33:80:27:4e:dc:07:43:aa:3e:a8:
                    4c:e2:fa:2d:3e:53:60:b7:2d:94:0b:05:5b:c0:19:
                    df:dc:7f:48:23:a8:13:53:4a:50:c0:3f:a7:6f:09:
                    54:3f:f0:24:10:5f:f9:92:bb:89:f9:76:d6:33:03:
                    37:31:96:4d:5f:d5:71:fa:8d:39:8d:4a:de:fa:8e:
                    5d:1e:6f:cc:41:4b:6b:c9:fc:db:70:47:3b:32:32:
                    fc:67:79:6e:5f:ef:d5:b8:95:a2:e1:fe:e7:ee:bc:
                    bc:8b:cc:09:99:a9:79:cb:7f:66:03:d4:2c:ca:1a:
                    dd:3c:37:1f:51:e5:6c:0f:f4:2a:b9:2e:da:50:90:
                    d5:a9:60:db:d9:92:ed:97:ba:9a:7f:76:7e:bf:e9:
                    1a:ef:9a:0d:cd:9f:48:04:30:bc:b9:a1:ed:0d:82:
                    11:06:ad:8b:8f:59:9b:9f:b0:0d:46:f1:23:b0:53:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:B4:33:6B:65:86:E5:2C:BE:F2:19:86:9B:32:BD:79:0A:C1:6A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.190.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:ff:b7:25:68:8e:8b:59:e4:a2:0a:0a:7a:da:72:27:d6:18:
         ae:b4:3f:64:aa:1b:57:5e:2d:4f:9b:ea:a7:e8:10:eb:18:48:
         a0:38:71:0f:34:ea:83:a3:22:24:12:cd:d9:31:a1:4e:57:2a:
         d7:6e:5a:da:e8:c2:20:0f:a7:70:4d:93:de:62:46:de:e5:20:
         38:1f:f5:30:e4:ac:cb:9d:30:19:f6:20:b0:7a:38:47:0f:22:
         7c:2b:10:ab:c8:c4:44:53:ac:ed:55:49:11:94:04:87:11:c9:
         8d:01:62:f1:bf:d1:7e:0a:c3:f1:d1:a0:79:64:73:7e:e5:b5:
         d5:43:79:e7:93:93:32:b6:50:c5:59:0b:f5:d6:92:19:1e:74:
         a3:14:b0:ca:6d:98:bb:36:0c:ba:dc:82:68:ee:e7:91:f2:40:
         16:19:fd:82:28:96:94:40:05:f8:ba:0a:86:03:ba:e9:7f:26:
         df:98:e0:b0:52:b2:c7:5b:d2:75:88:bf:84:6c:b8:b9:19:a5:
         a2:e5:9b:51:8a:26:53:6f:7d:8d:c5:6b:40:ee:e2:ad:1f:93:
         01:3b:0c:19:c8:60:d8:e0:ec:04:1f:f2:7b:dc:fb:40:46:04:
         18:d9:68:3c:4e:07:53:0a:ec:b8:8d:02:d6:eb:53:56:88:1a:
         80:e6:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:38:03 2025 by rpki-client