Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa
File:                     94bbb927-ed11-4cfd-8f38-db394dfbb980.roa (raw, json)
Hash identifier:          EhCrsBhDEoUerGwtBskIqLMccQ+zxR7RhfbN4PC3KDw=
Subject key identifier:   45:DA:60:2A:0F:36:9C:1B:C9:DA:01:18:6B:3E:4E:EB:BB:1D:98:10
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       05D7D663A4999F9ED2CD5B9E833F3279872EC7E2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa
Signing time:             Tue 19 Aug 2025 15:21:44 +0000
ROA not before:           Tue 19 Aug 2025 15:21:44 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.54.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d7:d6:63:a4:99:9f:9e:d2:cd:5b:9e:83:3f:32:79:87:2e:c7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 15:21:44 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=84414647245d401ac2faac112af80ac82ef6806e0bc935b404b94b33f701f874, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:ac:0a:8f:7c:77:93:1c:7d:aa:c6:dc:e6:
                    8a:0d:1f:86:93:0a:cb:54:75:3e:18:10:4c:a3:60:
                    b7:9c:8e:3b:44:d5:ac:12:09:f4:57:1f:6d:30:75:
                    44:91:a7:7f:ba:1b:31:1d:2d:08:55:0d:d6:22:13:
                    d1:c7:07:57:6e:ac:c0:22:93:60:af:09:88:ab:7f:
                    dc:30:81:e2:65:bf:e6:0d:c4:58:4d:af:ae:81:d3:
                    42:d0:d2:5c:02:6a:70:99:db:fd:13:d5:aa:c1:30:
                    a7:1f:33:fa:01:49:da:b8:9d:e2:65:cc:a9:39:5b:
                    ec:dd:39:d3:70:ca:56:f5:ae:3e:bd:00:e9:79:05:
                    d2:cf:92:82:f1:c4:84:d5:fa:61:f1:81:35:50:3e:
                    e9:da:4e:75:49:86:4d:5e:97:09:ee:8c:25:26:ac:
                    1c:f2:3d:f7:0c:fd:d7:d9:8b:7c:48:ce:dc:5a:0d:
                    75:a0:71:a3:fb:18:3b:6c:98:8c:6c:73:0e:8a:77:
                    cb:8d:0e:fc:68:9a:2d:41:0e:a9:76:6e:7d:2f:ec:
                    3c:f2:fc:62:c2:44:d4:0a:6e:5d:da:f1:7d:6a:a0:
                    b7:dd:25:f6:40:f9:6a:da:ab:e5:74:eb:f5:c5:be:
                    bb:b1:38:55:2c:a1:ea:ad:79:c0:05:b4:86:f7:8a:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:60:2A:0F:36:9C:1B:C9:DA:01:18:6B:3E:4E:EB:BB:1D:98:10
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         19:80:37:a1:f4:02:6f:e7:dc:a0:17:0c:be:a0:8c:10:ab:3e:
         0e:07:7f:d5:e3:5e:93:08:91:dc:ca:63:47:f3:a4:b1:95:3c:
         3c:a1:20:67:3d:a3:fe:b8:75:e9:a5:69:da:0a:30:d8:b5:8f:
         e8:b9:78:c5:a1:1c:1c:af:95:e7:cc:92:fb:64:a1:13:d8:42:
         7d:8c:bf:32:a2:a7:0a:c8:a9:da:fe:91:0b:a2:31:6d:f9:97:
         e0:bb:f7:c4:ac:72:6c:01:f1:90:a9:57:6b:aa:18:9f:29:02:
         7b:5d:bd:76:a7:02:39:11:31:4e:ac:0a:b6:c7:8c:f1:df:99:
         ac:fb:52:38:ff:ed:f5:1e:72:5c:5b:09:ac:2b:dc:17:62:71:
         b5:70:8a:0b:a6:df:12:3e:2d:93:1f:5a:30:26:27:92:95:dd:
         e3:5f:2b:b9:ec:18:0f:14:e4:07:19:92:1e:1f:2f:42:e6:38:
         53:3c:2c:2e:70:11:2a:92:c5:30:d5:c0:bb:ad:27:01:38:a1:
         b1:ac:5a:ac:98:7e:1d:c3:64:9c:6f:ec:7d:60:c5:be:61:7b:
         de:98:e3:e7:2a:bd:bd:31:3d:0e:19:74:19:c2:d0:72:42:58:
         33:6f:ad:c9:11:4c:27:eb:c0:fc:bf:60:db:bf:97:df:b4:8b:
         3a:7f:4e:17
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBdfWY6SZn57SzVuegz8yeYcux+IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUyMTQ0WhcNMjUwOTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDQxNDY0NzI0NWQ0MDFhYzJmYWFjMTEyYWY4MGFjODJl
ZjY4MDZlMGJjOTM1YjQwNGI5NGIzM2Y3MDFmODc0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTW6wKj3x3kxx9qsbc5ooNH4aTCstUdT4YEEyjYLecjjtE
1awSCfRXH20wdUSRp3+6GzEdLQhVDdYiE9HHB1durMAik2CvCYirf9wwgeJlv+YN
xFhNr66B00LQ0lwCanCZ2/0T1arBMKcfM/oBSdq4neJlzKk5W+zdOdNwylb1rj69
AOl5BdLPkoLxxITV+mHxgTVQPunaTnVJhk1elwnujCUmrBzyPfcM/dfZi3xIztxa
DXWgcaP7GDtsmIxscw6Kd8uNDvxomi1BDql2bn0v7Dzy/GLCRNQKbl3a8X1qoLfd
JfZA+Wraq+V06/XFvruxOFUsoeqtecAFtIb3ilCjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURdpgKg82nBvJ2gEYaz5O67sdmBAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk0YmJiOTI3LWVkMTEtNGNmZC04ZjM4LWRiMzk0ZGZiYjk4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwENNjANBgkqhkiG9w0BAQsFAAOCAQEAGYA3ofQCb+fcoBcMvqCMEKs+Dgd/
1eNekwiR3MpjR/OksZU8PKEgZz2j/rh16aVp2gow2LWP6Ll4xaEcHK+V58yS+2Sh
E9hCfYy/MqKnCsip2v6RC6IxbfmX4Lv3xKxybAHxkKlXa6oYnykCe129dqcCOREx
TqwKtseM8d+ZrPtSOP/t9R5yXFsJrCvcF2JxtXCKC6bfEj4tkx9aMCYnkpXd418r
uewYDxTkBxmSHh8vQuY4UzwsLnARKpLFMNXAu60nATihsaxarJh+HcNknG/sfWDF
vmF73pjj5yq9vTE9Dhl0GcLQckJYM2+tyRFMJ+vA/L9g27+X37SLOn9OFw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:39:57 2025 by rpki-client