Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93aa584b-d55a-410e-aca2-a9f75fba677e.roa
File:                     93aa584b-d55a-410e-aca2-a9f75fba677e.roa (raw, json)
Hash identifier:          p65D5LKehdJXKIi4ZppiqNfnHm0gLCQB1f/pUxmm6ZA=
Subject key identifier:   A4:B3:7B:85:87:8E:94:8A:19:17:D2:0A:43:65:54:8B:AC:1D:8D:04
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D54E8B32881ACEDAF816DB27B0CE9FA81068257
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93aa584b-d55a-410e-aca2-a9f75fba677e.roa
Signing time:             Fri 26 Sep 2025 02:32:19 +0000
ROA not before:           Fri 26 Sep 2025 02:32:19 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:e8:b3:28:81:ac:ed:af:81:6d:b2:7b:0c:e9:fa:81:06:82:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:32:19 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=833590b778489ff8aac62b7d38123f983b396bc0387185331719189d66dd20f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:57:42:d3:fb:84:1e:a9:77:cc:74:31:51:
                    7a:b1:2d:32:f6:d5:18:6f:41:b7:ad:0e:11:0e:09:
                    90:b7:58:d6:6a:a4:f6:83:42:9a:51:db:06:1a:ef:
                    a1:be:dc:da:57:ff:7e:8c:a6:ab:d7:b0:3b:39:dc:
                    05:98:d1:f8:22:a4:dd:ce:9b:7b:b5:c3:b6:91:37:
                    2e:1e:e5:2b:ff:b9:78:73:28:76:f6:d0:a9:4f:d1:
                    9b:28:69:9f:4a:32:32:bc:f8:d5:06:75:9a:45:e1:
                    28:71:5b:37:10:b5:43:63:55:f3:5e:f6:10:a8:2c:
                    01:58:6d:e2:fc:3e:cd:22:1f:ee:1a:66:91:3f:35:
                    b4:93:ae:bd:55:8c:21:ca:f0:30:76:67:c4:ba:9c:
                    7a:99:c7:af:f0:dc:92:85:2b:fc:6e:a3:30:4f:fb:
                    42:fd:5f:f6:b1:c9:9d:79:3c:c3:d5:ac:bc:21:26:
                    96:6e:40:e3:81:03:8f:07:0f:fe:07:51:ab:ef:35:
                    1b:a3:67:e5:94:03:00:3e:35:f5:80:45:19:ac:c4:
                    54:e1:60:f0:63:0b:e2:e9:f2:53:ab:9a:a8:4a:e1:
                    79:f1:71:3e:b7:4d:10:4f:8d:2f:14:55:53:f4:5b:
                    e9:09:12:50:b9:eb:ac:48:79:d8:a8:54:a8:c2:da:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:7B:85:87:8E:94:8A:19:17:D2:0A:43:65:54:8B:AC:1D:8D:04
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93aa584b-d55a-410e-aca2-a9f75fba677e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bc:f8:22:3f:b8:52:9d:1c:fe:d9:25:57:f0:3d:24:32:d0:
         85:3e:32:c3:ad:59:11:24:3c:e9:76:f9:c3:17:8e:99:88:d9:
         0a:3e:f6:22:e2:ed:83:86:49:e6:1c:19:df:79:87:da:ac:4a:
         89:85:00:d1:17:4f:2d:7b:b0:6e:ff:d8:88:6f:63:d3:80:8d:
         b1:fb:e8:5f:5c:2f:ab:09:89:e5:8e:6d:af:b3:3e:ec:2b:9e:
         b2:36:8a:aa:c7:5e:f5:9a:26:ef:f7:13:35:88:a9:0e:18:ca:
         88:70:2c:e4:a2:f6:3d:90:1d:5f:46:48:2b:64:ab:ec:df:15:
         b1:5b:55:f3:83:52:00:da:9a:c7:4b:2f:1f:fe:c7:39:1e:98:
         6a:45:50:7f:0b:fb:36:55:fa:6c:f5:62:5f:ec:57:2a:c6:a9:
         bd:64:8e:f9:3b:d2:45:82:64:92:13:74:4e:00:fc:03:bb:8b:
         59:2f:8c:cc:33:3d:69:44:dd:a0:59:a8:0c:1d:e6:3e:1d:18:
         28:11:11:9c:1b:79:33:c1:12:ca:12:15:45:c3:49:ac:83:b2:
         18:65:88:96:75:9e:55:16:e2:e9:e8:6a:c3:94:88:50:18:89:
         bf:4a:41:ee:55:2e:95:a0:e1:7e:56:3f:ac:58:a7:2a:a7:61:
         b1:c6:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:43:24 2025 by rpki-client