Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69308722-8b91-419a-b94b-1438d0288af3.roa
File:                     69308722-8b91-419a-b94b-1438d0288af3.roa (raw, json)
Hash identifier:          SQZh/FdG7W62x2KN/QBXa3lzQDjfQKd09qAIfzML9Z4=
Subject key identifier:   A1:C1:C9:4E:14:D9:EB:4B:FF:EB:BF:2D:3C:3F:ED:05:41:FD:0D:E4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D4113F12ED8C1CF8966588526A459242D258ACE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69308722-8b91-419a-b94b-1438d0288af3.roa
Signing time:             Mon 22 Sep 2025 23:46:17 +0000
ROA not before:           Mon 22 Sep 2025 23:46:17 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.84.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:41:13:f1:2e:d8:c1:cf:89:66:58:85:26:a4:59:24:2d:25:8a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 23:46:17 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=82f04414cccaefedce5dbfbb44dd90a09e85c86f84d8433e275a4fdc5c4f10ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:72:64:00:fc:0f:c5:7f:90:46:25:d2:80:
                    98:2a:6c:6e:d4:4d:cb:7e:18:7d:e7:8d:d4:25:a4:
                    0d:2a:55:40:e0:a5:7d:29:94:bc:20:84:2d:42:8e:
                    ac:7d:e8:42:48:9c:73:f8:5c:8d:e0:e0:90:5e:e7:
                    66:3e:3e:76:4a:c1:05:79:22:2d:0c:d6:60:f7:39:
                    ff:59:48:2d:71:f2:3e:55:76:3e:8e:7c:7a:49:36:
                    44:f5:32:7c:ec:3f:9c:9f:a2:42:17:86:ab:90:94:
                    09:64:00:40:5b:84:38:26:74:db:87:10:05:60:aa:
                    91:6c:ae:8a:8d:d3:6a:0b:5d:8c:3e:f5:c0:fc:9a:
                    bd:da:31:49:f7:d8:9c:52:f8:7b:bb:0e:04:4a:0b:
                    c2:28:d5:37:6f:bf:03:ac:ab:65:43:90:e9:c9:48:
                    ba:d2:0d:61:8a:ae:c6:0b:1d:63:06:f8:4a:46:e1:
                    94:d8:68:07:d7:72:79:b1:14:51:77:2a:4d:7b:ec:
                    42:07:84:92:da:b7:67:49:83:9d:df:5f:47:90:6c:
                    f4:60:75:0b:bc:f4:0d:b1:4e:d3:f1:98:43:61:d6:
                    2d:b9:31:3c:93:b6:55:1e:48:13:1e:98:1b:87:76:
                    8f:b9:9b:72:88:6c:08:06:9f:3f:93:4c:ac:e4:82:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:C9:4E:14:D9:EB:4B:FF:EB:BF:2D:3C:3F:ED:05:41:FD:0D:E4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69308722-8b91-419a-b94b-1438d0288af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.84.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:59:ea:68:9b:57:20:de:b7:7c:eb:ee:f0:0d:7f:89:f3:d7:
         92:19:9a:bd:60:aa:5f:54:d0:e5:cb:30:dd:3b:ec:dd:b7:c3:
         01:3d:62:72:81:07:85:18:96:42:e0:5c:bd:b7:50:3c:dd:0d:
         32:5e:a3:30:c9:5b:f7:cb:c4:68:38:cf:dd:38:db:e7:76:9a:
         47:7c:01:2f:0c:ee:68:9a:59:c3:ca:4f:79:89:d0:bf:a3:79:
         1e:1a:29:f5:74:05:30:39:88:74:0d:7a:7b:08:54:b3:89:9c:
         9c:a7:5c:85:7b:8f:f1:e1:e0:be:5c:db:da:ee:2a:f9:9e:c7:
         6b:e0:ab:7a:6d:b6:68:d1:c0:63:3e:77:2e:d1:d1:bf:e1:b6:
         f4:1b:b5:47:bd:5a:80:b0:61:bb:22:39:c2:ff:0c:76:01:04:
         d4:f7:e4:bd:aa:2c:e1:0c:7e:7e:57:20:3c:cf:b8:02:02:bc:
         44:3b:49:eb:99:f8:7f:a1:c0:5d:b3:dd:bc:e1:d5:35:58:ca:
         ac:ce:ab:68:d5:7f:95:22:3d:3c:0c:6e:32:b9:19:84:84:2f:
         de:c8:12:70:4d:76:73:49:d5:cc:80:9e:eb:2e:be:d9:79:7d:
         fe:61:e1:7c:b9:d8:00:95:b6:35:ff:b8:19:e6:28:7b:87:3a:
         14:b3:ce:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULUET8S7Ywc+JZliFJqRZJC0lis4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0NjE3WhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmYwNDQxNGNjY2FlZmVkY2U1ZGJmYmI0NGRkOTBhMDll
ODVjODZmODRkODQzM2UyNzVhNGZkYzVjNGYxMGFiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSP3JkAPwPxX+QRiXSgJgqbG7UTct+GH3njdQlpA0qVUDg
pX0plLwghC1Cjqx96EJInHP4XI3g4JBe52Y+PnZKwQV5Ii0M1mD3Of9ZSC1x8j5V
dj6OfHpJNkT1MnzsP5yfokIXhquQlAlkAEBbhDgmdNuHEAVgqpFsroqN02oLXYw+
9cD8mr3aMUn32JxS+Hu7DgRKC8Io1TdvvwOsq2VDkOnJSLrSDWGKrsYLHWMG+EpG
4ZTYaAfXcnmxFFF3Kk177EIHhJLat2dJg53fX0eQbPRgdQu89A2xTtPxmENh1i25
MTyTtlUeSBMemBuHdo+5m3KIbAgGnz+TTKzkgjalAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUocHJThTZ60v/678tPD/tBUH9DeQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzY5MzA4NzIyLThiOTEtNDE5YS1iOTRiLTE0MzhkMDI4OGFmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0VLQwDQYJKoZIhvcNAQELBQADggEBAHRZ6mibVyDet3zr7vANf4nz15IZ
mr1gql9U0OXLMN077N23wwE9YnKBB4UYlkLgXL23UDzdDTJeozDJW/fLxGg4z904
2+d2mkd8AS8M7miaWcPKT3mJ0L+jeR4aKfV0BTA5iHQNensIVLOJnJynXIV7j/Hh
4L5c29ruKvmex2vgq3pttmjRwGM+dy7R0b/htvQbtUe9WoCwYbsiOcL/DHYBBNT3
5L2qLOEMfn5XIDzPuAICvEQ7SeuZ+H+hwF2z3bzh1TVYyqzOq2jVf5UiPTwMbjK5
GYSEL97IEnBNdnNJ1cyAnusuvtl5ff5h4Xy52ACVtjX/uBnmKHuHOhSzzpU=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:04:09 2025 by rpki-client