Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/722458e7-7759-4819-b4f1-e26e3756f802.roa
File:                     722458e7-7759-4819-b4f1-e26e3756f802.roa (raw, json)
Hash identifier:          6glebTAVVONqg7icgH4yoN8wIeU5WGICbebREnDssmI=
Subject key identifier:   1B:E3:B5:02:60:24:1A:B6:DA:35:BB:CA:02:A3:FF:64:73:35:2A:6E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A621D3B8CEFA6153A813F01DAE6B7EC0D6218B2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/722458e7-7759-4819-b4f1-e26e3756f802.roa
Signing time:             Fri 17 Oct 2025 21:30:32 +0000
ROA not before:           Fri 17 Oct 2025 21:30:32 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.203.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:62:1d:3b:8c:ef:a6:15:3a:81:3f:01:da:e6:b7:ec:0d:62:18:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 21:30:32 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=d90d91d94aa66926764a1dddb03065587b7299a27064256e4a9252c18b1a3435, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:36:f3:2d:aa:1b:a3:44:93:d5:50:57:e6:
                    c1:3e:a8:ac:ea:03:b5:a6:49:17:6e:5c:ec:f3:04:
                    62:07:98:9f:7a:30:4c:7f:7e:34:cd:3a:a6:eb:5e:
                    b0:b7:71:85:22:73:46:b1:10:90:f0:a8:7d:71:0f:
                    3f:2c:11:4f:b5:7d:2d:15:00:f3:ef:1f:b4:f4:be:
                    35:40:ef:0a:c1:6f:a6:41:31:aa:f7:ff:25:85:77:
                    e3:43:8c:44:d2:69:cd:d2:e5:f6:62:6e:45:40:76:
                    9b:a6:20:0a:4e:b3:47:64:21:9b:a3:05:1a:0f:5c:
                    98:a2:fa:af:07:e2:e4:9d:89:ab:fd:b8:93:90:8a:
                    43:a1:4f:e2:fa:16:8b:b2:c4:7e:e9:3e:06:b4:15:
                    b1:64:bb:2e:b0:b7:e8:f5:87:3f:9a:01:68:f5:0e:
                    d5:62:57:89:77:0c:c1:e3:d8:b3:92:57:93:8b:21:
                    aa:29:bc:8a:e8:73:f3:59:15:16:44:2b:f4:b1:68:
                    f6:99:d7:7b:98:98:24:33:62:7e:7e:7d:3b:0e:3f:
                    0d:f7:e6:ba:9c:97:ab:68:86:3a:0b:1c:70:3f:59:
                    66:c1:83:2e:c2:1b:c4:d2:4a:3e:3f:c4:95:ef:72:
                    7f:36:79:35:30:12:f1:21:f8:0a:43:ba:ce:33:44:
                    cd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:B5:02:60:24:1A:B6:DA:35:BB:CA:02:A3:FF:64:73:35:2A:6E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/722458e7-7759-4819-b4f1-e26e3756f802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.203.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:c5:9c:37:65:b4:6d:1f:20:46:78:73:98:65:f2:d7:da:
         90:30:b1:ea:2e:1d:23:41:77:d6:47:b8:73:3a:f4:87:31:6a:
         ea:4d:3a:4a:76:36:d1:a7:e4:5e:e3:54:4b:bb:5b:b4:27:de:
         95:01:ac:09:b2:a4:60:1c:80:56:1d:bd:33:4a:0b:90:1f:32:
         78:db:d4:59:24:35:96:30:0b:48:af:31:bc:94:45:32:c7:f2:
         59:93:2b:a6:92:61:b2:c0:08:e2:ce:13:39:96:be:89:34:95:
         9b:32:46:ed:59:b2:e4:59:0d:c0:1d:11:62:74:05:5f:14:75:
         a7:62:cc:be:14:00:dc:ba:bd:08:e4:8a:43:b6:5a:a7:6d:29:
         4d:52:e6:c6:3d:f2:6e:85:5d:9d:b8:ec:d7:68:fa:05:dc:10:
         90:82:fc:70:e6:c7:af:98:cb:38:ae:f9:eb:07:7f:60:36:c0:
         63:c4:51:1d:78:a2:d5:e2:26:e6:8a:3a:24:62:a6:d3:1a:19:
         93:3e:8f:8a:82:73:89:dd:f9:70:3f:17:77:87:5a:bc:4c:6d:
         06:ff:5a:dc:e6:1b:b8:9e:b0:c8:03:ff:92:00:e7:ff:65:73:
         3e:a5:e1:7f:bc:02:bf:e0:26:45:e2:41:cb:7a:ab:be:7f:44:
         a4:ef:e8:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWmIdO4zvphU6gT8B2ua37A1iGLIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjEzMDMyWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTBkOTFkOTRhYTY2OTI2NzY0YTFkZGRiMDMwNjU1ODdi
NzI5OWEyNzA2NDI1NmU0YTkyNTJjMThiMWEzNDM1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEkTbzLaobo0ST1VBX5sE+qKzqA7WmSRduXOzzBGIHmJ96
MEx/fjTNOqbrXrC3cYUic0axEJDwqH1xDz8sEU+1fS0VAPPvH7T0vjVA7wrBb6ZB
Mar3/yWFd+NDjETSac3S5fZibkVAdpumIApOs0dkIZujBRoPXJii+q8H4uSdiav9
uJOQikOhT+L6FouyxH7pPga0FbFkuy6wt+j1hz+aAWj1DtViV4l3DMHj2LOSV5OL
IaopvIroc/NZFRZEK/SxaPaZ13uYmCQzYn5+fTsOPw335rqcl6tohjoLHHA/WWbB
gy7CG8TSSj4/xJXvcn82eTUwEvEh+ApDus4zRM2LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG+O1AmAkGrbaNbvKAqP/ZHM1Km4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzcyMjQ1OGU3LTc3NTktNDgxOS1iNGYxLWUyNmUzNzU2ZjgwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2y8AwDQYJKoZIhvcNAQELBQADggEBAFkuxZw3ZbRtHyBGeHOYZfLX2pAw
seouHSNBd9ZHuHM69IcxaupNOkp2NtGn5F7jVEu7W7Qn3pUBrAmypGAcgFYdvTNK
C5AfMnjb1FkkNZYwC0ivMbyURTLH8lmTK6aSYbLACOLOEzmWvok0lZsyRu1ZsuRZ
DcAdEWJ0BV8UdadizL4UANy6vQjkikO2WqdtKU1S5sY98m6FXZ247Ndo+gXcEJCC
/HDmx6+Yyziu+esHf2A2wGPEUR14otXiJuaKOiRiptMaGZM+j4qCc4nd+XA/F3eH
WrxMbQb/WtzmG7iesMgD/5IA5/9lcz6l4X+8Ar/gJkXiQct6q75/RKTv6BQ=
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:20:16 2025 by rpki-client