Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73187018-83a8-42af-a833-23b7db78b618.roa
File:                     73187018-83a8-42af-a833-23b7db78b618.roa (raw, json)
Hash identifier:          WzERXxoiPG93B/cOZICaGMPU54VpwXzP96K7umYWxvU=
Subject key identifier:   F2:67:B8:DF:CD:23:1F:11:49:1D:51:72:E7:8A:15:27:D0:2A:FD:D6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       20A3BA6E84E5D43DC7FD5A72EB4C2D9E544864DA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73187018-83a8-42af-a833-23b7db78b618.roa
Signing time:             Thu 16 Oct 2025 23:25:09 +0000
ROA not before:           Thu 16 Oct 2025 23:25:09 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.192.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:ba:6e:84:e5:d4:3d:c7:fd:5a:72:eb:4c:2d:9e:54:48:64:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 23:25:09 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=d37678b42dccdd794e0962765eab3be72986bcdadd06d0baf70d36db641f9265, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:59:32:6e:fb:60:e4:2f:5e:6e:a1:02:5a:
                    5e:32:04:59:22:07:ad:08:04:22:b0:19:e8:de:3f:
                    72:66:1b:62:0d:ad:8c:08:c3:22:14:f7:01:5d:7c:
                    54:36:24:24:e6:0b:8d:a9:46:36:4a:f8:4f:59:e8:
                    d3:c8:07:4b:00:7a:22:80:48:07:38:62:09:e1:2f:
                    57:a4:eb:c4:f8:6b:74:2e:2c:f2:7c:49:04:25:cb:
                    1a:e4:84:f8:12:ba:3a:6d:1f:d8:91:88:d6:10:3e:
                    8f:d9:f1:7e:97:78:c8:42:4d:2d:a0:71:0e:37:84:
                    b0:89:be:30:4e:d3:d9:82:5b:48:ec:a4:01:e6:a0:
                    ee:12:21:1c:97:47:00:d2:60:73:64:45:c2:7b:16:
                    a4:b4:74:0b:a8:fe:61:4f:19:06:8a:5f:4b:e2:dc:
                    25:f1:cc:82:31:d4:80:84:65:cc:94:38:70:3b:dc:
                    ce:d7:d0:3a:43:1e:31:eb:28:70:bc:fa:cf:e4:08:
                    b6:4c:04:01:90:bd:60:6f:67:2d:bf:79:d5:e7:00:
                    ec:aa:2c:bf:b9:66:0a:09:9c:59:82:c7:89:e5:b6:
                    8d:74:12:42:e3:c0:74:45:85:18:cd:de:e3:ba:d1:
                    0d:91:a7:cf:e0:07:b6:19:17:48:a5:e3:b4:4d:75:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:67:B8:DF:CD:23:1F:11:49:1D:51:72:E7:8A:15:27:D0:2A:FD:D6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73187018-83a8-42af-a833-23b7db78b618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:e9:38:ce:7c:f6:b1:6d:64:2f:41:b6:60:7c:86:7c:b0:
         d2:26:40:cc:0b:00:d8:3c:17:37:3c:e5:ab:d0:77:13:39:e0:
         dc:9e:6f:55:40:04:ae:d5:41:4c:ef:83:98:b7:c4:91:d8:b3:
         13:37:ba:e4:25:fe:c2:32:e8:7b:0e:93:7a:ae:21:e8:68:51:
         93:98:83:15:6e:ac:3c:13:37:59:92:cd:9d:29:83:6e:4d:91:
         8f:23:0a:a5:a1:8d:aa:ec:2d:20:a2:eb:86:56:32:6d:a6:7f:
         ef:8f:cc:c4:05:72:4b:59:2b:ba:70:8d:4a:05:c3:dc:2a:69:
         09:8d:ce:6a:c8:3f:28:77:b8:18:13:8b:20:e1:f7:07:a0:58:
         3f:35:82:77:7a:b2:00:ad:75:71:59:0f:36:4f:7c:a5:16:0e:
         fc:cb:7a:a7:f0:e0:aa:98:07:f9:17:94:74:89:d2:17:e4:e3:
         65:b8:1b:5c:2f:bc:65:17:b9:e0:a0:f5:8d:eb:8e:f4:2a:df:
         15:d5:e3:d6:c8:1e:e0:ef:7f:7d:d5:0b:65:30:21:9f:2a:0f:
         8b:84:de:2e:81:ca:11:a3:2a:3b:b8:e4:1b:7f:89:c6:28:c1:
         e3:3d:b5:72:85:87:a0:13:ce:03:84:b7:de:b5:47:51:51:48:
         6e:b1:22:65
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIKO6boTl1D3H/Vpy60wtnlRIZNowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMyNTA5WhcNMjUxMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzc2NzhiNDJkY2NkZDc5NGUwOTYyNzY1ZWFiM2JlNzI5
ODZiY2RhZGQwNmQwYmFmNzBkMzZkYjY0MWY5MjY1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC13lkybvtg5C9ebqECWl4yBFkiB60IBCKwGejeP3JmG2IN
rYwIwyIU9wFdfFQ2JCTmC42pRjZK+E9Z6NPIB0sAeiKASAc4YgnhL1ek68T4a3Qu
LPJ8SQQlyxrkhPgSujptH9iRiNYQPo/Z8X6XeMhCTS2gcQ43hLCJvjBO09mCW0js
pAHmoO4SIRyXRwDSYHNkRcJ7FqS0dAuo/mFPGQaKX0vi3CXxzIIx1ICEZcyUOHA7
3M7X0DpDHjHrKHC8+s/kCLZMBAGQvWBvZy2/edXnAOyqLL+5ZgoJnFmCx4nlto10
EkLjwHRFhRjN3uO60Q2Rp8/gB7YZF0il47RNda9BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8me4380jHxFJHVFy54oVJ9Aq/dYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzczMTg3MDE4LTgzYTgtNDJhZi1hODMzLTIzYjdkYjc4YjYxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2wAowDQYJKoZIhvcNAQELBQADggEBAFbk6TjOfPaxbWQvQbZgfIZ8sNIm
QMwLANg8Fzc85avQdxM54Nyeb1VABK7VQUzvg5i3xJHYsxM3uuQl/sIy6HsOk3qu
IehoUZOYgxVurDwTN1mSzZ0pg25NkY8jCqWhjarsLSCi64ZWMm2mf++PzMQFcktZ
K7pwjUoFw9wqaQmNzmrIPyh3uBgTiyDh9wegWD81gnd6sgCtdXFZDzZPfKUWDvzL
eqfw4KqYB/kXlHSJ0hfk42W4G1wvvGUXueCg9Y3rjvQq3xXV49bIHuDvf33VC2Uw
IZ8qD4uE3i6ByhGjKju45Bt/icYoweM9tXKFh6ATzgOEt961R1FRSG6xImU=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:04:57 2025 by rpki-client