Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fc49c51-f063-4a9d-8ec8-f4f0a88297ae.roa
File:                     5fc49c51-f063-4a9d-8ec8-f4f0a88297ae.roa (raw, json)
Hash identifier:          ZRYXNaWlXfIRgz1zRjME+ugGAnsSvmnUCdouhKD7BCc=
Subject key identifier:   61:6F:60:36:39:FA:E4:BF:F9:66:B0:98:23:4F:75:F3:BF:4A:94:53
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       16BEAFFA818629EA7A4B3CA27C433D3CED155087
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fc49c51-f063-4a9d-8ec8-f4f0a88297ae.roa
Signing time:             Fri 26 Sep 2025 02:55:09 +0000
ROA not before:           Fri 26 Sep 2025 02:55:09 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:af:fa:81:86:29:ea:7a:4b:3c:a2:7c:43:3d:3c:ed:15:50:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:55:09 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=311039f82e38440088afc121de7fc55f9f7766eb4d57cceae1e6228369fcd125, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:a5:0f:c6:1d:5f:21:58:de:6c:41:b0:78:
                    59:0a:18:42:12:0c:27:23:e2:64:52:ff:2c:05:e2:
                    5f:76:de:d7:3e:2d:c1:13:78:50:30:01:1d:5e:a9:
                    26:33:88:38:c0:a9:a7:69:70:67:fe:df:9e:41:b8:
                    e0:9e:bc:b7:59:ca:53:50:07:8a:f4:77:eb:0a:a3:
                    9a:a8:3c:02:ef:d1:6f:6f:e6:35:08:8c:86:d3:a1:
                    9d:66:64:62:75:ef:04:75:9b:64:f7:e8:70:58:19:
                    08:77:2c:71:ef:6f:1b:dc:5c:7e:6d:77:1d:39:52:
                    e7:d3:4b:66:b5:9d:b4:c7:ae:54:78:d0:64:ca:ad:
                    4e:5e:61:cb:b1:a6:52:d6:ee:87:23:70:98:ef:1d:
                    d7:50:89:88:4a:49:b5:8c:35:aa:b4:94:52:ac:9f:
                    29:6f:3d:59:90:b2:58:50:9e:02:7c:26:a3:9c:2a:
                    33:92:32:8d:43:0b:d3:93:95:c0:d1:06:41:af:7b:
                    0f:4d:26:03:75:be:5b:f8:da:64:43:7a:e3:ca:ee:
                    1c:26:06:36:c2:b9:74:5d:04:cd:98:91:7a:75:41:
                    24:33:b4:61:19:82:10:c2:0a:fd:c0:f7:3b:6a:ea:
                    9d:65:6f:3a:ee:53:b3:f2:f8:b1:71:16:ab:6e:da:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6F:60:36:39:FA:E4:BF:F9:66:B0:98:23:4F:75:F3:BF:4A:94:53
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fc49c51-f063-4a9d-8ec8-f4f0a88297ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:76:7c:37:b7:06:d9:bb:d9:8c:78:82:08:bb:63:c0:b7:
         e6:ef:2a:78:28:af:dd:16:e7:ee:72:96:7b:57:31:d8:7e:c1:
         71:52:8d:61:54:99:a4:07:0b:4a:ff:98:66:eb:17:5d:5e:b7:
         c7:01:6a:c2:fe:b9:03:21:79:a6:b2:cb:a7:b6:c4:39:78:d9:
         0a:04:15:d9:c6:f8:00:d1:79:6b:45:31:06:c3:9e:98:2e:30:
         25:f7:9b:55:12:85:d8:ea:54:60:9b:f1:35:b3:89:3f:00:09:
         6a:5e:76:43:74:c9:f2:ca:a2:62:e3:18:8d:cc:10:c5:94:66:
         d9:ab:77:ed:fc:28:a2:6f:df:75:71:86:7d:9a:e2:de:e9:a9:
         72:79:fd:2a:2b:c0:6a:fb:c0:65:42:fb:20:7a:20:99:c2:e6:
         41:b9:0f:89:ce:5b:f6:76:97:58:db:f4:47:7c:cf:58:bf:fc:
         2c:34:56:ca:ac:eb:93:b7:8e:ff:e9:ac:9c:68:17:c2:4e:84:
         0d:55:b5:b3:c5:4c:27:9c:16:48:a0:e2:f8:be:3a:ee:14:ea:
         d6:2e:d4:81:0b:07:9b:0b:86:b8:e8:f7:c5:c3:3b:48:7d:8b:
         e0:c5:d8:af:95:91:84:68:cd:ff:49:ff:ad:c5:7f:fb:6e:f0:
         b7:e7:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:50:30 2025 by rpki-client