Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c668dce-266d-4863-bcae-0ef68b700257.roa
File:                     6c668dce-266d-4863-bcae-0ef68b700257.roa (raw, json)
Hash identifier:          Q+LbkEoxMRfh9sBZAkREobLjSoUc4FUu3BlQbMUfu/U=
Subject key identifier:   A1:9F:2B:CA:66:06:56:7B:FA:A5:47:8A:81:FE:3C:6E:B5:C0:58:84
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0224981F1A655F09D03A61D1DD7C98ABADF558A5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c668dce-266d-4863-bcae-0ef68b700257.roa
Signing time:             Fri 26 Sep 2025 03:06:52 +0000
ROA not before:           Fri 26 Sep 2025 03:06:52 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:24:98:1f:1a:65:5f:09:d0:3a:61:d1:dd:7c:98:ab:ad:f5:58:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 03:06:52 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=996e69fb74c387ed4985261101e7e8ad8e7a059ed89fc1f216ee25295cdc81e1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:e3:51:6d:84:17:50:44:de:31:34:6d:51:
                    21:87:71:70:87:31:82:af:bb:f1:7d:6f:68:38:46:
                    81:05:2e:85:c6:f8:5b:a1:96:07:36:95:2c:65:f0:
                    dc:74:a7:6a:a6:30:37:f7:9b:77:5a:53:7a:bd:ec:
                    b6:d5:6f:58:b7:a4:4e:9e:cc:2b:a7:d4:84:50:8d:
                    fa:0d:5c:b3:68:7b:cd:f5:1e:71:98:d6:89:72:4a:
                    04:d5:e1:25:4a:b9:38:50:69:87:86:32:c5:e4:fb:
                    de:10:36:7d:cd:ea:74:4d:30:65:90:56:e6:4f:be:
                    e7:92:50:90:36:ce:ba:3f:e8:c5:a6:a9:ac:d5:b4:
                    5a:0c:04:db:fb:54:21:74:d0:45:ae:32:a2:2d:90:
                    d2:da:7b:44:0b:9d:6d:14:78:08:46:0d:d9:15:f0:
                    76:14:7f:41:61:cc:1e:0d:1a:4d:28:bf:27:58:7d:
                    b8:66:af:b0:df:ea:2b:a8:e5:a8:63:d0:86:8e:9a:
                    0d:5c:be:15:bf:69:ef:4b:f9:04:40:24:6c:16:51:
                    15:d7:1f:4e:7e:c4:bc:fb:e1:72:46:b7:3d:e4:08:
                    a0:49:73:5a:55:65:34:98:6e:c7:72:71:cc:00:f6:
                    d8:0e:10:58:83:02:9f:f4:4b:a1:04:79:f7:b9:53:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9F:2B:CA:66:06:56:7B:FA:A5:47:8A:81:FE:3C:6E:B5:C0:58:84
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c668dce-266d-4863-bcae-0ef68b700257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:2e:a8:14:b6:a6:24:22:58:7d:69:9d:af:e9:d2:a4:70:
         e2:cc:5f:f9:8b:c2:1f:c1:71:07:60:b1:58:2b:1c:b9:b2:fe:
         a5:ca:65:1a:b9:6b:bc:56:c0:df:b7:fe:09:1a:36:93:f1:c5:
         8a:a4:3c:4a:4b:58:3a:cb:4b:c9:53:d9:55:6c:4a:0b:b5:cb:
         b0:df:cf:3b:d1:e1:e4:13:0c:3f:f1:23:04:ef:e1:43:87:68:
         9d:6e:44:da:e0:88:98:d9:98:e7:2c:98:ba:7e:53:1d:fc:93:
         c3:e1:65:b7:10:9d:18:88:57:91:4d:ff:2e:eb:c9:8a:d8:ba:
         69:64:35:af:c0:26:fa:4e:9a:d4:f3:f1:74:5f:2f:c8:58:39:
         b1:c4:bd:c1:8d:54:6c:85:4c:35:93:7e:07:e1:fd:12:17:2e:
         22:d0:45:7f:14:a9:dc:58:49:65:19:06:20:c4:49:bd:be:ae:
         50:61:c9:2d:a8:91:db:04:bf:5a:84:7d:00:b9:24:34:e5:d0:
         68:30:7e:4b:63:61:ac:24:93:67:d9:ff:66:d9:51:9d:d5:a0:
         bd:9b:f9:5a:d6:5c:37:93:7f:68:dd:5a:da:04:a9:a4:b7:74:
         52:23:ee:7a:8a:4a:0f:35:c4:5f:0f:19:ff:e2:d4:e6:31:b9:
         59:75:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:05:35 2025 by rpki-client