Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d0d407d-165c-4cbb-b709-b0f0ea98bc69.roa
File:                     6d0d407d-165c-4cbb-b709-b0f0ea98bc69.roa (raw, json)
Hash identifier:          kBW5IGHDzJtJemML+PWxQROj1+ghWjMxO7Tvvx+tgj8=
Subject key identifier:   F8:E3:33:48:10:B4:9A:80:C7:F3:8D:B9:B2:59:9D:7D:85:EA:57:C5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4A0681D34418B01CDF5143AD68DCC1F27812034C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d0d407d-165c-4cbb-b709-b0f0ea98bc69.roa
Signing time:             Fri 10 Oct 2025 16:30:32 +0000
ROA not before:           Fri 10 Oct 2025 16:30:32 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.166.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:81:d3:44:18:b0:1c:df:51:43:ad:68:dc:c1:f2:78:12:03:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 16:30:32 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=85948720b7d9269d4f43f3b942accf34bbd8112cf482073146bed57f7eba38e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:75:1f:45:54:14:a9:f6:97:2e:d4:29:cf:
                    c2:47:0d:0d:e0:53:15:ff:50:c6:32:97:a9:9f:55:
                    7e:57:6d:36:f4:2d:82:aa:46:b0:de:55:b8:81:36:
                    10:3b:c1:c9:c6:a2:b9:cb:eb:31:78:81:4b:05:39:
                    a9:cb:51:bf:7a:e5:68:1c:73:00:fe:17:47:7a:9d:
                    37:10:72:f4:0e:bf:68:47:11:d7:56:ea:13:af:04:
                    c6:78:00:92:11:7c:9b:00:64:f9:e3:e0:20:f4:f2:
                    35:d2:98:7a:8d:0d:09:9c:69:f5:33:6d:b0:36:64:
                    2f:65:38:67:39:5a:8d:bc:d9:7f:d3:e2:d5:3d:eb:
                    f5:73:e8:f5:be:98:eb:42:a7:00:9a:cb:5c:dd:ae:
                    db:ef:27:ee:51:f3:01:b2:5e:a1:76:79:bb:a2:75:
                    a1:26:86:a7:b9:f9:4f:46:9d:67:31:52:01:be:47:
                    10:32:7b:9d:fb:5f:dc:75:3f:e7:6f:f8:5c:2d:3e:
                    f0:35:32:7b:c8:ae:19:0e:46:12:62:40:38:35:60:
                    52:70:11:36:93:ce:89:de:9a:1a:00:c5:d6:24:2b:
                    30:f5:a1:e9:ef:d3:63:23:45:65:d8:a7:0e:26:c6:
                    4f:7a:0a:ea:62:43:01:f2:6b:fb:82:09:c2:64:a7:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:33:48:10:B4:9A:80:C7:F3:8D:B9:B2:59:9D:7D:85:EA:57:C5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d0d407d-165c-4cbb-b709-b0f0ea98bc69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.166.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         13:44:24:bc:ae:f1:e1:c0:30:2b:b9:df:ef:9f:7e:e9:ef:27:
         f5:ad:cc:fc:ca:ab:05:0f:53:b4:91:3d:49:09:35:b1:98:48:
         0a:c9:b8:4c:d3:04:42:26:7a:52:b6:c2:b6:bc:b8:b8:ff:1d:
         8d:2c:94:86:fa:93:12:44:aa:e5:1f:8e:db:16:75:92:0a:9c:
         ba:29:4c:19:8c:ba:43:ed:04:77:7f:90:95:fe:cd:d6:00:d3:
         a1:0b:ea:56:98:31:c0:f9:59:bd:d9:8e:2a:f0:76:d4:1b:79:
         2e:cb:aa:3d:46:c5:9d:d9:ec:bc:4e:9d:a4:9f:e9:c2:a5:d5:
         20:d0:96:35:1c:0e:44:b4:36:40:a7:fd:fc:7c:07:88:cb:98:
         5e:5b:62:cf:88:5b:a6:b5:89:b0:42:0f:8d:0e:60:14:b2:39:
         6e:62:1a:b7:24:89:13:7c:0e:dd:ca:ff:ca:60:4d:77:04:f2:
         b9:1c:68:2d:75:71:15:4a:71:8d:dd:8f:2f:0d:d5:51:87:33:
         cf:67:ce:fb:06:ca:68:d2:c3:4d:c3:9d:ed:d8:fb:eb:b1:c7:
         b1:17:fd:7e:96:77:9e:f6:b1:b7:bb:2c:6a:c4:97:6b:5f:dd:
         f6:11:5f:24:ea:f9:e4:21:c6:6c:bf:61:07:89:bd:6e:7a:27:
         dd:10:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:54:43 2025 by rpki-client