Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/771da7a6-3171-4f6a-92d0-d7c8cdeb2ae4.roa
File:                     771da7a6-3171-4f6a-92d0-d7c8cdeb2ae4.roa (raw, json)
Hash identifier:          B6mRiXn+hYUEyeAqiQD9ouCmiwszlqKwgeQ+0L4SqOc=
Subject key identifier:   D7:3A:1B:6C:AF:93:B8:25:E7:34:40:13:AB:F5:EB:95:34:72:76:75
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       20EE6AE6D5C4D381B3C8DEDA3B535EFBA6F59DFF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/771da7a6-3171-4f6a-92d0-d7c8cdeb2ae4.roa
Signing time:             Wed 24 Sep 2025 18:44:16 +0000
ROA not before:           Wed 24 Sep 2025 18:44:16 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.35.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:6a:e6:d5:c4:d3:81:b3:c8:de:da:3b:53:5e:fb:a6:f5:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 18:44:16 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=0bde6df9fe898654604503a5564c331c7f7083a964547c4da5755a86b42e3bb2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:ab:32:23:68:d9:80:96:f0:70:80:a8:d9:
                    c2:91:8f:e4:fa:7c:69:30:92:bf:20:a0:b1:ff:fe:
                    e5:4e:02:43:5e:8a:c5:7d:3a:80:01:52:4e:45:8b:
                    08:f8:07:89:a3:45:e1:30:20:53:3e:97:8a:05:0f:
                    c2:7c:f9:5b:49:c1:72:c7:f5:71:19:22:c0:25:f3:
                    7a:42:ca:4b:f5:13:36:bc:31:e0:39:77:23:2c:de:
                    19:1c:8a:15:80:0a:cb:ac:6a:ed:55:a5:68:15:a6:
                    ad:a3:d7:d4:e7:41:c3:27:04:90:d8:82:59:42:88:
                    20:92:ba:4b:d1:c8:f1:6e:06:38:18:22:d2:35:02:
                    22:7d:be:75:fd:66:7b:a8:c8:89:75:14:af:95:b0:
                    3a:cd:ee:7a:ef:be:c3:ba:f3:a9:0b:89:21:0e:55:
                    65:af:dd:75:d2:cd:4f:e7:66:97:6a:3f:e3:4d:78:
                    a1:bf:86:8a:36:e2:72:0b:ea:69:28:4f:c3:30:2f:
                    ef:86:4e:ed:da:8d:a0:26:7d:90:a5:8c:7d:dc:67:
                    69:23:c6:7a:ba:81:b2:13:ed:c6:e6:71:14:b3:f1:
                    05:af:df:39:93:f2:fe:c4:26:10:b2:99:cd:51:c2:
                    41:ee:cc:ae:45:4b:3e:7f:60:3b:f6:e9:33:79:2c:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:1B:6C:AF:93:B8:25:E7:34:40:13:AB:F5:EB:95:34:72:76:75
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/771da7a6-3171-4f6a-92d0-d7c8cdeb2ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.35.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:f9:3b:90:99:ed:32:08:09:41:ed:44:20:57:98:e0:16:
         1d:a2:2d:18:17:7c:5c:4b:83:f8:a7:09:ba:a0:af:cc:35:a4:
         77:2c:a0:79:77:81:17:66:83:6c:87:e4:ae:6c:de:ba:63:b3:
         24:a2:ea:c3:c9:3d:1d:32:a3:bd:00:6d:34:4a:32:be:69:d1:
         97:eb:01:a0:92:5b:79:d9:dc:db:aa:87:55:92:09:7b:e9:e7:
         22:a6:48:e4:62:7f:b9:c8:46:09:3a:59:bb:05:e3:bc:2a:52:
         f6:23:60:83:d3:7b:58:1a:ba:50:43:dc:8e:73:63:d9:25:10:
         f1:ac:8f:89:6b:48:05:79:91:79:ac:8c:6b:f2:b8:16:2a:b4:
         fa:55:54:45:60:3d:72:26:c7:54:fe:54:46:4e:8c:a0:b0:21:
         fc:31:55:f1:e1:01:18:b7:24:04:d9:1a:33:86:f9:b2:02:29:
         56:15:59:e0:f6:fc:6a:c9:0f:3a:9f:65:0f:46:82:8a:d2:b1:
         6d:8d:86:3e:11:d4:19:c9:da:42:28:5c:be:5d:e3:41:42:d3:
         d3:da:8e:9e:0f:c6:a8:d9:a7:73:24:ab:76:15:f0:98:af:62:
         56:5f:48:e8:5c:28:68:d9:77:64:08:f0:94:bc:19:e5:8e:e8:
         fe:1d:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:03:10 2025 by rpki-client