Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3953fc-3e68-41b0-bbb2-3503296563cb.roa
File:                     7b3953fc-3e68-41b0-bbb2-3503296563cb.roa (raw, json)
Hash identifier:          VifjCVmRYwC9Fs2D9/pRIfdv/RQZY5Mnr/Vv31wvOPI=
Subject key identifier:   D3:52:AE:C5:04:75:CF:37:B4:BD:44:B4:78:5F:74:30:B7:A7:3A:F1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0402C6B3D550938AC8522D14223EA821212863AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3953fc-3e68-41b0-bbb2-3503296563cb.roa
Signing time:             Wed 24 Sep 2025 20:00:12 +0000
ROA not before:           Wed 24 Sep 2025 20:00:12 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:02:c6:b3:d5:50:93:8a:c8:52:2d:14:22:3e:a8:21:21:28:63:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:00:12 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=6ab13fd3e027ba362506cf3ebf1978464ab5a7060ee83937a693c3cda61a59df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:a5:a3:41:71:d8:5f:91:7c:4a:4b:1b:51:
                    e9:18:e8:8e:aa:bd:82:c3:5c:6f:e4:cb:55:a6:cb:
                    73:fd:90:2a:2e:6f:d3:2d:bd:5a:29:c2:8c:81:99:
                    e9:4e:2c:6d:ff:65:52:6e:80:a9:0f:38:cb:05:fe:
                    35:bc:de:43:40:a3:98:fe:e8:0e:3d:7e:85:98:df:
                    4b:d7:1a:56:04:b6:2c:7b:93:f4:7b:cf:3d:e1:05:
                    82:be:13:b5:f6:15:f4:dc:8b:0b:18:a6:49:09:8e:
                    a3:c9:07:ac:59:92:71:bb:53:98:6e:aa:b7:02:61:
                    20:f2:03:70:6b:e9:e8:17:df:13:a0:c4:09:8e:7c:
                    d1:6a:2a:88:a9:0b:86:0a:14:f4:5d:81:6b:7e:9d:
                    03:a1:15:c6:b6:63:fb:1d:08:76:9b:01:88:db:55:
                    9c:e1:d0:56:f6:99:b4:ec:2e:2f:88:de:1d:55:04:
                    b5:76:b2:6b:fc:11:87:7e:54:71:8e:e1:ae:38:37:
                    64:55:db:ab:a8:40:d2:36:36:ed:81:34:23:a0:87:
                    a3:e3:4b:bc:ff:dd:cb:2e:4d:8a:e1:e2:4e:48:2f:
                    a7:c2:d7:bc:af:2b:4c:11:5d:4f:bb:29:cb:6d:57:
                    ce:33:98:36:e7:f6:fe:2c:ac:ce:11:3f:00:71:10:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:52:AE:C5:04:75:CF:37:B4:BD:44:B4:78:5F:74:30:B7:A7:3A:F1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b3953fc-3e68-41b0-bbb2-3503296563cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:fc:ad:e0:96:81:fd:8c:42:b5:79:62:87:2b:53:34:be:
         16:4d:6c:e3:58:0b:57:86:b2:91:0a:d5:2f:c8:88:e4:92:35:
         e1:ab:fb:b2:2e:95:ba:e2:92:bd:f5:d0:e0:8a:f1:d7:05:6c:
         bc:5f:8c:44:2d:14:ec:32:2f:e3:74:6d:e8:36:ec:a2:05:5a:
         56:e2:e0:02:0f:c4:be:de:28:a9:98:d8:9f:d6:a1:36:74:35:
         2f:50:3d:f2:02:64:1b:46:d5:8f:58:03:d8:89:51:03:46:7f:
         da:be:43:cb:38:9f:15:32:12:32:1f:0c:2e:da:74:1a:d7:53:
         77:ff:d1:03:7b:a0:78:79:cf:f6:f8:46:e0:29:f6:99:36:42:
         96:da:84:bb:ca:01:04:09:58:6f:a8:0a:9e:fc:4d:f3:e9:79:
         12:0b:3f:11:68:c8:83:9d:eb:46:a8:2d:f8:04:02:a3:24:12:
         2b:28:c6:8c:28:a7:6c:c0:f1:97:a1:dc:2f:69:b9:e4:96:91:
         0a:6d:cc:a1:c1:6e:9b:03:4e:82:e5:c9:3d:bf:ac:14:61:21:
         97:6d:d0:9a:e7:91:6d:98:b7:81:08:00:a2:8a:4a:e2:57:df:
         8a:cb:8c:4a:3d:3c:26:64:57:67:c0:54:20:6a:8d:e9:c4:49:
         76:b3:51:f3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBALGs9VQk4rIUi0UIj6oISEoY68wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjAwMDEyWhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YWIxM2ZkM2UwMjdiYTM2MjUwNmNmM2ViZjE5Nzg0NjRh
YjVhNzA2MGVlODM5MzdhNjkzYzNjZGE2MWE1OWRmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1N6WjQXHYX5F8SksbUekY6I6qvYLDXG/ky1Wmy3P9kCou
b9MtvVopwoyBmelOLG3/ZVJugKkPOMsF/jW83kNAo5j+6A49foWY30vXGlYEtix7
k/R7zz3hBYK+E7X2FfTciwsYpkkJjqPJB6xZknG7U5huqrcCYSDyA3Br6egX3xOg
xAmOfNFqKoipC4YKFPRdgWt+nQOhFca2Y/sdCHabAYjbVZzh0Fb2mbTsLi+I3h1V
BLV2smv8EYd+VHGO4a44N2RV26uoQNI2Nu2BNCOgh6PjS7z/3csuTYrh4k5IL6fC
17yvK0wRXU+7KcttV84zmDbn9v4srM4RPwBxEM3lAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU01KuxQR1zze0vUS0eF90MLenOvEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdiMzk1M2ZjLTNlNjgtNDFiMC1iYmIyLTM1MDMyOTY1NjNjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN42AwDQYJKoZIhvcNAQELBQADggEBADve/K3gloH9jEK1eWKHK1M0vhZN
bONYC1eGspEK1S/IiOSSNeGr+7Iulbrikr310OCK8dcFbLxfjEQtFOwyL+N0beg2
7KIFWlbi4AIPxL7eKKmY2J/WoTZ0NS9QPfICZBtG1Y9YA9iJUQNGf9q+Q8s4nxUy
EjIfDC7adBrXU3f/0QN7oHh5z/b4RuAp9pk2QpbahLvKAQQJWG+oCp78TfPpeRIL
PxFoyIOd60aoLfgEAqMkEisoxowop2zA8Zeh3C9pueSWkQptzKHBbpsDToLlyT2/
rBRhIZdt0JrnkW2Yt4EIAKKKSuJX34rLjEo9PCZkV2fAVCBqjenESXazUfM=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:56:20 2025 by rpki-client