Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5c10d7-9e3f-4fea-a8c1-5a54978a22e2.roa
File:                     6a5c10d7-9e3f-4fea-a8c1-5a54978a22e2.roa (raw, json)
Hash identifier:          +ED7Q8ud5s8RQuxVVfBr7WDwO43ledrogIz78lC8WQI=
Subject key identifier:   9C:E4:A7:3D:C3:F4:79:30:E8:EA:51:F7:A2:C5:9E:17:A9:6F:56:13
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       34E8CF63C5BF716D51E5AF37D138DF008B91AC62
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5c10d7-9e3f-4fea-a8c1-5a54978a22e2.roa
Signing time:             Mon 22 Sep 2025 17:15:36 +0000
ROA not before:           Mon 22 Sep 2025 17:15:36 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.154.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:cf:63:c5:bf:71:6d:51:e5:af:37:d1:38:df:00:8b:91:ac:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 17:15:36 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=9fcc767501044f82b4032c728a2978b0985599fd7852f523a0e5dad264996f4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:a7:90:62:4e:49:b7:3d:96:86:4d:38:68:
                    54:d6:7d:35:8b:2d:6b:a8:10:e6:4f:10:c2:dc:a2:
                    33:ef:e7:94:c4:40:57:46:bb:56:25:80:17:29:73:
                    86:22:06:be:f0:f7:7e:d5:f4:bd:4c:59:43:0b:10:
                    6a:4a:2c:f8:c4:92:93:49:98:11:0a:57:00:ba:62:
                    08:06:1b:df:d9:57:ef:8c:bb:b8:9b:b3:a4:8a:e8:
                    35:d2:0b:32:a0:a9:cb:e1:68:f3:5d:a6:0a:33:af:
                    ea:92:95:11:93:b8:00:d1:d1:93:a1:46:05:66:54:
                    7c:e6:0d:22:a7:74:61:5e:50:9f:34:b5:54:29:5f:
                    42:1e:93:9b:c7:95:80:ff:03:ba:2c:0b:71:ba:b5:
                    fb:f9:21:35:14:1d:81:9d:b4:88:de:8e:cb:9c:5a:
                    ef:ef:34:e5:07:19:d4:fc:1b:5a:ed:35:a2:87:d6:
                    80:55:9f:2b:5a:b4:05:91:98:9d:43:72:6f:a2:6d:
                    2e:1f:e4:92:b1:32:d2:aa:38:d0:af:4b:7e:68:d7:
                    fa:85:5b:2e:52:51:14:22:38:12:01:e6:e4:85:9f:
                    93:ae:38:33:0c:6e:08:63:f6:71:bc:7b:ff:b8:da:
                    be:83:55:1f:6c:5a:13:f1:a6:83:83:c1:b3:5b:c9:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:A7:3D:C3:F4:79:30:E8:EA:51:F7:A2:C5:9E:17:A9:6F:56:13
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5c10d7-9e3f-4fea-a8c1-5a54978a22e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:af:cc:ed:00:b0:f3:80:9d:53:4f:55:71:be:85:0e:14:
         0a:65:49:d8:1f:ee:a7:90:97:b2:66:e8:a2:6e:43:74:23:71:
         46:c6:f3:da:12:ee:49:12:d7:5c:71:f5:cd:c5:3d:e0:65:39:
         71:5d:df:1f:28:ae:49:0c:3d:b1:d9:f6:12:a7:b4:04:24:91:
         d7:4a:7a:81:fb:86:0f:ca:06:9f:7b:f6:3f:9e:65:a8:12:6a:
         0e:8b:cd:21:3e:b6:5b:89:6d:77:1e:68:55:a5:d7:85:74:0a:
         81:7e:0a:6f:6d:32:8c:ab:44:b4:d1:50:ac:51:c0:ac:63:81:
         14:cb:19:b0:63:a1:9c:ae:11:8d:b5:45:7a:45:78:ba:cf:39:
         b9:33:a1:13:7c:28:65:b0:4d:28:fc:b5:bd:6e:4e:55:d9:d8:
         b5:90:7a:f9:c2:6f:52:7e:9a:de:8f:71:36:d7:1c:92:9b:2f:
         46:ae:bf:b8:75:d9:f7:e5:17:26:2a:ab:1e:6e:5d:68:4f:09:
         1b:af:f1:69:af:0b:df:0e:ca:e1:5a:22:14:13:70:d7:a9:5f:
         2c:13:41:6e:55:ad:79:6d:7e:f2:05:83:3a:bd:2f:94:91:d3:
         31:84:4f:87:1b:bd:b6:dd:b5:91:c3:2e:f5:81:ac:bd:db:2b:
         32:04:d6:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNOjPY8W/cW1R5a830TjfAIuRrGIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcxNTM2WhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZmNjNzY3NTAxMDQ0ZjgyYjQwMzJjNzI4YTI5NzhiMDk4
NTU5OWZkNzg1MmY1MjNhMGU1ZGFkMjY0OTk2ZjRmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdXaeQYk5Jtz2Whk04aFTWfTWLLWuoEOZPEMLcojPv55TE
QFdGu1YlgBcpc4YiBr7w937V9L1MWUMLEGpKLPjEkpNJmBEKVwC6YggGG9/ZV++M
u7ibs6SK6DXSCzKgqcvhaPNdpgozr+qSlRGTuADR0ZOhRgVmVHzmDSKndGFeUJ80
tVQpX0Iek5vHlYD/A7osC3G6tfv5ITUUHYGdtIjejsucWu/vNOUHGdT8G1rtNaKH
1oBVnytatAWRmJ1Dcm+ibS4f5JKxMtKqONCvS35o1/qFWy5SURQiOBIB5uSFn5Ou
ODMMbghj9nG8e/+42r6DVR9sWhPxpoODwbNbyeR3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnOSnPcP0eTDo6lH3osWeF6lvVhMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZhNWMxMGQ3LTllM2YtNGZlYS1hOGMxLTVhNTQ5NzhhMjJlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASmi0wDQYJKoZIhvcNAQELBQADggEBAI8Br8ztALDzgJ1TT1VxvoUOFApl
Sdgf7qeQl7Jm6KJuQ3QjcUbG89oS7kkS11xx9c3FPeBlOXFd3x8orkkMPbHZ9hKn
tAQkkddKeoH7hg/KBp979j+eZagSag6LzSE+tluJbXceaFWl14V0CoF+Cm9tMoyr
RLTRUKxRwKxjgRTLGbBjoZyuEY21RXpFeLrPObkzoRN8KGWwTSj8tb1uTlXZ2LWQ
evnCb1J+mt6PcTbXHJKbL0auv7h12fflFyYqqx5uXWhPCRuv8WmvC98OyuFaIhQT
cNepXywTQW5VrXltfvIFgzq9L5SR0zGET4cbvbbdtZHDLvWBrL3bKzIE1o4=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:03:18 2025 by rpki-client