Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60eeef73-ec88-44ef-80bf-ee41e270ec37.roa
File:                     60eeef73-ec88-44ef-80bf-ee41e270ec37.roa (raw, json)
Hash identifier:          Sw0TKt6BogHnkCKuiWq92oPK0y61IrgrfOzMip+TY+g=
Subject key identifier:   86:20:24:6C:13:B5:30:33:7D:FA:FA:7A:1D:12:7D:01:EB:BF:DD:32
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       28C828EEB27BCB3D3D2B59AE8BE6B189EEB73031
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60eeef73-ec88-44ef-80bf-ee41e270ec37.roa
Signing time:             Wed 24 Sep 2025 20:48:48 +0000
ROA not before:           Wed 24 Sep 2025 20:48:48 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c8:28:ee:b2:7b:cb:3d:3d:2b:59:ae:8b:e6:b1:89:ee:b7:30:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:48:48 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=606fb7d108549ea8b42f580a5e759782f410ddbd3e6eea8c71d2c57d2c88dec1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:29:0b:5f:66:d6:c2:98:27:95:e1:70:11:
                    e8:6e:22:1e:18:45:03:eb:67:9e:a5:67:02:fe:6a:
                    08:2a:a9:1c:74:8f:ad:ba:ad:9e:ce:50:8b:68:41:
                    60:6b:09:6e:66:84:78:69:af:73:e8:ca:df:1b:33:
                    ab:53:a5:e0:c9:ed:89:f6:8b:e8:56:b4:43:eb:e3:
                    7c:ab:29:14:36:8b:8d:3d:a5:2e:49:ea:f7:7c:96:
                    96:23:bf:c7:a4:17:4a:e6:c3:d7:e2:f2:c7:b2:d1:
                    d6:fc:29:85:bc:54:ac:7f:0c:da:bb:12:93:1f:94:
                    9f:00:7e:b5:93:0f:67:bb:a7:9a:23:04:90:43:b6:
                    0c:65:f1:b7:32:bd:29:e8:07:52:cc:00:d5:06:0b:
                    fa:ed:0b:7e:fb:a0:84:eb:91:4c:90:0b:35:06:53:
                    a5:34:72:39:2c:4a:62:2a:97:dd:9d:f0:21:47:d3:
                    7d:ab:88:5f:dc:08:d2:7d:8c:96:e4:90:e1:64:a7:
                    bc:35:ce:fd:c8:8d:cb:8b:60:2f:01:71:8e:7d:a0:
                    05:3b:1c:df:ef:83:20:76:c5:3d:b2:0c:a7:4d:4e:
                    51:77:73:90:38:25:e1:a4:4e:21:4d:4a:30:1f:a9:
                    42:5d:21:43:08:fb:c3:6e:8d:82:15:0a:e6:31:be:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:24:6C:13:B5:30:33:7D:FA:FA:7A:1D:12:7D:01:EB:BF:DD:32
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60eeef73-ec88-44ef-80bf-ee41e270ec37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:bc:da:c6:5b:ee:74:42:93:08:20:ec:04:03:32:37:d3:
         ae:83:07:3e:f6:3c:b7:89:66:7c:c2:26:2e:a8:7e:bf:01:0d:
         ef:5c:be:3e:87:63:21:63:28:61:ba:4f:46:d7:02:12:f0:71:
         08:13:de:de:0c:d4:be:56:07:a8:8c:f2:7f:d6:15:4b:e9:f5:
         7f:df:da:9c:7a:ba:3b:84:e9:28:9d:f7:54:9b:97:63:7a:ae:
         08:76:22:26:38:53:23:f3:be:f1:c6:20:d3:5e:6d:fc:ef:f0:
         5c:53:7b:a9:d9:4b:6e:7a:ae:ea:07:16:b4:b9:f0:fb:4c:b5:
         62:57:2c:21:2c:8e:30:15:1f:01:fa:bc:3d:c6:c4:cb:b0:c4:
         2b:48:55:4e:d6:45:71:b0:7c:e7:2f:3d:28:58:da:18:86:64:
         89:7d:e0:cf:20:ea:f8:d8:9c:1e:91:d3:d4:67:f1:27:7f:b8:
         70:2d:07:6a:3b:76:eb:4f:06:d3:93:da:8a:aa:53:46:cf:9a:
         42:4c:76:19:56:a0:12:d1:55:0d:08:ef:96:e3:d7:46:a0:71:
         c3:70:b4:c1:86:f0:55:6c:a0:da:39:ee:2d:aa:08:fd:2f:ad:
         9a:44:fb:d4:9d:4e:af:9c:fb:2f:b7:6c:30:aa:ba:78:bc:82:
         83:bd:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:57:00 2025 by rpki-client