Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e583c84-b196-43ca-b7b2-4a908e409d62.roa
File:                     9e583c84-b196-43ca-b7b2-4a908e409d62.roa (raw, json)
Hash identifier:          F1VvYp1Z+V0tnPpKt5N7co7sAYL1MY40jqUwIOwBLmA=
Subject key identifier:   55:87:70:24:C4:D5:79:31:BB:02:B6:56:43:BA:7C:0C:C2:50:E2:1D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       09FDC6106495AFA463D3358C8F68FAF4AA0F0560
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e583c84-b196-43ca-b7b2-4a908e409d62.roa
Signing time:             Thu 16 Oct 2025 22:49:13 +0000
ROA not before:           Thu 16 Oct 2025 22:49:13 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:c6:10:64:95:af:a4:63:d3:35:8c:8f:68:fa:f4:aa:0f:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 22:49:13 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=27044690e2eee1a8901b4a1f2f1b5bc29c9b36a90bad85e8284536860087cb65, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:46:53:e2:53:1f:d2:ef:c0:86:ed:d2:f6:
                    81:46:4a:b1:3e:c5:a5:e2:37:24:b5:d3:d7:ef:5a:
                    cb:96:f3:c5:8c:7d:d5:88:8f:bd:55:fa:b9:b7:fc:
                    b4:64:6e:c2:78:d9:a4:1d:b0:fe:b6:b9:7d:b0:34:
                    47:18:4b:91:76:9a:1b:fb:af:6a:01:81:db:36:54:
                    6b:49:d3:18:99:5a:0e:f6:54:5f:d9:71:db:13:97:
                    82:2f:9f:1f:f7:b7:a2:b0:04:7d:71:60:d1:7d:9d:
                    78:e0:bc:f0:48:f9:c7:20:33:cc:8d:ae:91:e6:dc:
                    3f:39:5e:19:62:bc:56:90:61:8e:ae:8c:7b:89:da:
                    a3:3b:ef:4b:18:d1:fa:83:08:3e:c0:37:ac:64:73:
                    ca:f5:41:28:ed:86:57:f1:df:ee:40:37:12:ce:e3:
                    32:65:90:b8:9c:1b:a5:09:69:db:fa:59:4d:7f:f4:
                    18:86:ae:01:09:0a:12:fe:de:3e:7f:06:3b:e9:88:
                    b8:63:53:3d:e6:4f:de:63:fd:bc:fc:01:d2:c9:93:
                    6f:ea:86:41:4a:6b:29:86:20:70:c1:9d:ae:6b:d7:
                    95:90:98:e5:df:8a:59:c5:02:a4:72:51:93:66:65:
                    fa:6f:be:3c:de:8b:71:98:07:20:b5:d7:42:d8:2e:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:70:24:C4:D5:79:31:BB:02:B6:56:43:BA:7C:0C:C2:50:E2:1D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e583c84-b196-43ca-b7b2-4a908e409d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:bc:53:d3:16:0f:ff:f7:62:33:ab:a9:8e:5d:35:42:31:
         94:91:d4:07:71:ac:b3:30:51:d7:75:ad:f1:27:9c:f8:85:77:
         96:ed:5e:d1:79:5f:8b:be:40:d0:98:2b:0d:a5:11:a4:67:b4:
         49:d2:9b:1f:20:b6:e7:d8:3d:58:68:80:3e:02:ea:cf:25:cc:
         17:b8:92:3d:df:5c:e1:68:45:dc:0e:b5:b5:9b:46:5d:b5:97:
         3d:a1:9f:19:86:b9:3c:05:f2:0f:d7:29:28:87:93:0f:6f:90:
         af:7c:8a:fe:b9:e7:3c:84:ed:a5:de:79:24:c7:fe:9d:86:85:
         ab:97:dd:0b:58:1a:93:95:66:38:10:3e:30:7b:d3:3c:0c:c0:
         20:af:49:e0:44:f9:56:43:d9:35:da:14:e8:55:13:d8:63:e6:
         46:37:ea:5e:c9:80:86:25:0f:2c:ab:7f:f1:0a:d4:3a:17:00:
         a8:aa:dd:a3:d1:ec:f1:7a:96:cb:5a:fc:7a:72:78:5e:ef:da:
         0c:b9:48:bf:db:a8:a9:8d:ee:f4:9b:80:2b:74:92:52:e3:4f:
         18:42:ca:b3:7c:b7:fc:ab:46:d2:21:44:6b:58:66:ad:74:01:
         ce:6e:f4:de:09:fa:e5:6d:ed:d4:97:91:13:fa:8a:18:af:ff:
         58:ce:40:60
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCf3GEGSVr6Rj0zWMj2j69KoPBWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjI0OTEzWhcNMjUxMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzA0NDY5MGUyZWVlMWE4OTAxYjRhMWYyZjFiNWJjMjlj
OWIzNmE5MGJhZDg1ZTgyODQ1MzY4NjAwODdjYjY1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClq0ZT4lMf0u/Ahu3S9oFGSrE+xaXiNyS109fvWsuW88WM
fdWIj71V+rm3/LRkbsJ42aQdsP62uX2wNEcYS5F2mhv7r2oBgds2VGtJ0xiZWg72
VF/ZcdsTl4Ivnx/3t6KwBH1xYNF9nXjgvPBI+ccgM8yNrpHm3D85XhlivFaQYY6u
jHuJ2qM770sY0fqDCD7AN6xkc8r1QSjthlfx3+5ANxLO4zJlkLicG6UJadv6WU1/
9BiGrgEJChL+3j5/BjvpiLhjUz3mT95j/bz8AdLJk2/qhkFKaymGIHDBna5r15WQ
mOXfilnFAqRyUZNmZfpvvjzei3GYByC110LYLudLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVYdwJMTVeTG7ArZWQ7p8DMJQ4h0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzllNTgzYzg0LWIxOTYtNDNjYS1iN2IyLTRhOTA4ZTQwOWQ2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI2trAwDQYJKoZIhvcNAQELBQADggEBAEamvFPTFg//92Izq6mOXTVCMZSR
1AdxrLMwUdd1rfEnnPiFd5btXtF5X4u+QNCYKw2lEaRntEnSmx8gtufYPVhogD4C
6s8lzBe4kj3fXOFoRdwOtbWbRl21lz2hnxmGuTwF8g/XKSiHkw9vkK98iv655zyE
7aXeeSTH/p2GhauX3QtYGpOVZjgQPjB70zwMwCCvSeBE+VZD2TXaFOhVE9hj5kY3
6l7JgIYlDyyrf/EK1DoXAKiq3aPR7PF6lsta/HpyeF7v2gy5SL/bqKmN7vSbgCt0
klLjTxhCyrN8t/yrRtIhRGtYZq10Ac5u9N4J+uVt7dSXkRP6ihiv/1jOQGA=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:52:10 2025 by rpki-client