Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a06d08f4-d1cb-4462-90e8-f9a012ed3d15.roa
File:                     a06d08f4-d1cb-4462-90e8-f9a012ed3d15.roa (raw, json)
Hash identifier:          4HuTVR41eclyrcm2Oad6sk4Ax2N6+Bp7QNqxltLAxXs=
Subject key identifier:   6C:56:D4:A0:E6:86:11:48:A1:47:8F:47:32:B4:9B:2C:45:F3:F6:66
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       486585725205D346C836D4DDFE0112FFBA4CA32C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a06d08f4-d1cb-4462-90e8-f9a012ed3d15.roa
Signing time:             Wed 24 Sep 2025 20:48:45 +0000
ROA not before:           Wed 24 Sep 2025 20:48:45 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:85:72:52:05:d3:46:c8:36:d4:dd:fe:01:12:ff:ba:4c:a3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:48:45 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=0b91a6c2d155de92b1a2a71a0be54a0284531d5d7cb4ad56316a95278025584b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:06:4c:e6:66:cc:a8:a8:92:97:52:1f:11:
                    d9:8a:b2:61:6e:8e:4b:41:14:5a:58:94:33:4f:ac:
                    61:b2:ae:f0:c9:fb:0a:e1:ad:5d:68:c5:38:31:c3:
                    a5:93:0d:2d:12:3e:c4:3f:2a:81:8d:2c:b2:21:f1:
                    5e:09:d1:18:2c:67:df:7d:b5:01:ea:bb:b7:a7:ba:
                    fd:ff:56:b1:3f:93:38:7a:65:b3:6f:25:44:dc:51:
                    81:a2:84:20:b6:b6:cc:e4:1b:3d:f4:9e:87:12:66:
                    9b:7d:eb:e8:7c:c9:49:c6:36:81:c6:bd:05:2f:48:
                    71:23:75:1a:66:25:ee:c4:16:14:8c:fa:bc:bb:e7:
                    4c:e5:b2:49:91:c4:3d:f8:9a:1c:be:ad:87:90:e6:
                    f4:f5:72:9f:94:b8:f7:36:7b:50:7c:c6:4e:04:27:
                    fb:4f:27:45:4e:22:97:03:3e:d3:45:5a:e5:44:51:
                    8f:10:ce:c9:c2:09:dc:d3:85:87:75:cf:a6:ca:07:
                    5f:aa:de:52:c1:1f:3a:dc:b7:75:97:21:18:06:93:
                    ed:0f:a7:bb:50:b3:6b:e1:74:26:6c:e6:3a:58:fd:
                    a1:07:c1:b3:02:4b:d6:b0:51:41:12:84:07:9d:25:
                    dc:10:e0:e6:2b:96:b9:36:5f:e9:e6:4f:02:01:0c:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:56:D4:A0:E6:86:11:48:A1:47:8F:47:32:B4:9B:2C:45:F3:F6:66
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a06d08f4-d1cb-4462-90e8-f9a012ed3d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:95:0a:9b:d0:f7:e2:5d:22:bc:b5:7e:8e:5c:5b:a8:fd:
         00:41:cd:0a:3a:19:b2:5c:1c:b5:47:81:8b:e1:b7:4b:bd:25:
         a3:66:62:cf:d6:65:a9:f1:ca:a2:b9:c3:3a:b0:ee:6a:b0:37:
         4f:63:1e:5a:9c:13:54:1b:ae:96:ad:e9:d4:6f:fa:92:17:b1:
         71:5c:33:4c:6c:03:b2:98:6d:b9:ad:7a:93:62:ed:67:f9:02:
         63:c3:4c:60:72:88:21:19:3c:df:27:ff:2f:b8:38:ad:f0:51:
         f3:9a:a2:2b:da:b1:80:25:47:dd:8b:23:5c:70:7d:7a:f6:0c:
         ad:af:b1:65:2b:97:a7:2d:fb:aa:d2:57:7f:fc:40:3e:15:3b:
         60:36:bb:80:db:9a:48:18:fb:65:f9:eb:46:9e:a9:77:c9:2d:
         1f:c2:85:ca:32:b1:fb:66:b9:49:d1:c0:4d:d5:58:72:82:ab:
         5f:ac:31:83:0c:79:c2:5b:8a:56:67:0a:e4:db:db:d0:8e:99:
         d9:90:6c:de:83:bc:1c:6d:32:a7:6b:ce:bc:ef:4c:68:61:e9:
         5e:11:be:87:33:47:2b:94:78:03:2d:46:df:02:73:34:58:95:
         77:4c:b1:d1:12:24:ba:2e:7d:8f:d4:67:85:87:ae:0c:2f:19:
         3a:e7:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:43:39 2025 by rpki-client