Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92d83db1-2f17-4368-a177-9b9abddeeef5.roa
File:                     92d83db1-2f17-4368-a177-9b9abddeeef5.roa (raw, json)
Hash identifier:          bV5YH29ZmKpQ1qE6IhM0YXtPl8pWA+IW2uT9n4xoK7Q=
Subject key identifier:   B2:8D:3C:6B:6D:18:83:29:63:D3:E9:94:DB:DA:79:BD:AE:34:8D:F5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F18CEA58AA59B6C5381DD71EEFFE7C4951E0F4C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92d83db1-2f17-4368-a177-9b9abddeeef5.roa
Signing time:             Fri 26 Sep 2025 02:57:41 +0000
ROA not before:           Fri 26 Sep 2025 02:57:41 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:ce:a5:8a:a5:9b:6c:53:81:dd:71:ee:ff:e7:c4:95:1e:0f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:57:41 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0a79a93aea3b53bdb658674c08f37eee47019a3a511013e37c3e64b3edb4625c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:bf:8a:e2:aa:09:5b:9b:64:d4:f6:37:bd:
                    a1:83:8d:66:93:93:4d:de:98:fe:a3:3f:cb:b3:de:
                    1d:29:5c:31:16:5f:74:6c:c7:e4:fc:cf:a5:91:ed:
                    7e:dc:85:59:10:c7:12:1d:84:ca:1a:79:b6:9a:e8:
                    72:57:a0:a5:bc:2a:ec:b3:79:89:3e:ab:fe:cc:80:
                    f9:ae:41:e7:d0:19:df:ab:42:a8:bb:b6:94:46:ff:
                    34:45:b6:cf:a3:bf:75:fe:56:aa:4a:78:9b:fe:d6:
                    46:5b:6c:5d:3b:83:8e:e3:17:38:71:8f:a7:fc:94:
                    c0:00:5b:d0:5b:86:4d:73:2f:da:f0:4c:41:ca:bf:
                    b9:4f:c5:f1:a7:cd:b8:88:fe:63:a1:96:b5:5c:82:
                    a7:62:69:b3:fb:d6:b9:54:6d:fb:87:89:dd:50:80:
                    cf:e0:f2:e4:6d:ba:4c:ec:77:b2:92:68:da:b2:55:
                    0a:99:4a:4a:d3:f3:9b:6f:40:66:8d:ec:5d:83:1d:
                    d3:a3:fa:20:30:39:8c:1e:52:82:b6:32:54:41:1e:
                    5e:02:7f:ea:41:e3:9a:5b:3e:77:ea:d3:dd:9a:15:
                    0c:e2:1f:c7:46:7e:99:d6:05:e6:b9:a6:bb:d4:2a:
                    8a:8f:97:02:b3:86:41:72:17:33:18:97:13:c9:d6:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8D:3C:6B:6D:18:83:29:63:D3:E9:94:DB:DA:79:BD:AE:34:8D:F5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92d83db1-2f17-4368-a177-9b9abddeeef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:e3:87:78:d1:ac:69:56:3d:00:12:82:5a:00:61:d2:12:cc:
         ec:ba:af:b4:2f:84:dc:78:be:ff:c5:89:0a:d9:25:40:19:cd:
         64:c0:6a:e4:41:51:d4:6d:73:9e:87:f7:b6:ab:c5:c7:22:fc:
         30:c4:ea:47:2a:14:4d:15:2e:b1:58:dd:e2:a0:fa:75:95:09:
         1d:71:a2:7c:b3:d3:4b:f0:20:24:a3:31:f1:ab:6d:21:e3:80:
         85:67:24:16:9e:3e:7d:21:8c:f1:cc:35:40:fb:d1:48:25:c6:
         3f:d6:e8:ee:74:3f:ee:ee:a3:68:b1:dc:33:10:9e:d4:f7:88:
         8c:c8:51:43:35:d4:04:b2:da:5e:22:69:5d:1b:4c:47:59:56:
         13:7c:1e:66:c2:47:85:67:02:2e:17:41:a8:cc:a6:60:2d:e9:
         ef:5e:7f:d1:8f:b0:e0:a3:af:c4:54:88:84:45:36:39:aa:f2:
         30:be:0c:48:33:77:9d:95:8c:e2:91:58:43:a1:e9:05:4b:30:
         95:d7:39:93:35:f1:0b:10:58:56:d8:75:d6:37:c8:32:8f:6b:
         3a:0c:73:f1:22:51:13:16:f3:d1:4f:a0:1e:7a:2d:0e:64:c0:
         5b:8c:c9:8b:39:d7:8c:31:39:68:1a:80:ef:6e:14:d9:a6:97:
         39:df:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:17:37 2025 by rpki-client