Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a818c72d-789f-4287-8baa-4f51759ded80.roa
File:                     a818c72d-789f-4287-8baa-4f51759ded80.roa (raw, json)
Hash identifier:          BLLreSC22Y2KQKNrA2DKzcdIUy4ud+0aJdVd4p7Q+Bc=
Subject key identifier:   AF:C2:88:8E:AC:C3:A6:2C:6A:60:4D:0E:AC:7C:88:24:35:F6:69:4C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C7B9B4FE87F9B6A35CAAA6E17D2D50A07E5F518
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a818c72d-789f-4287-8baa-4f51759ded80.roa
Signing time:             Fri 26 Sep 2025 02:52:12 +0000
ROA not before:           Fri 26 Sep 2025 02:52:12 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7b:9b:4f:e8:7f:9b:6a:35:ca:aa:6e:17:d2:d5:0a:07:e5:f5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:52:12 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0baff05f27293a46fe2754a40346deb83ee9050cac29b7e3dbb27b9cba8fe7f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:f4:44:dd:23:3b:57:60:9e:8f:a3:e5:f6:
                    19:86:05:d0:ec:66:3e:6e:d7:d4:d9:25:1f:cf:21:
                    0b:6d:b7:b5:a6:82:ff:12:bf:97:8e:19:31:b1:73:
                    fe:e1:7f:3a:d2:9e:07:1c:2a:f0:c1:09:ad:b2:ce:
                    2c:67:dd:f7:da:ec:15:30:4e:e1:2b:54:e0:df:b0:
                    76:0f:1a:24:17:cf:c9:5c:a6:1b:2d:80:5a:ec:74:
                    1e:31:5d:e3:99:8c:de:37:56:fe:c2:b2:19:4d:e8:
                    46:d9:6f:ac:97:16:24:45:59:54:40:85:24:96:14:
                    61:d2:93:21:7d:08:11:22:0f:1b:2b:8d:fc:53:18:
                    35:17:88:00:1c:53:94:84:6b:39:c0:a4:17:39:cd:
                    25:51:3f:f0:f4:09:19:8a:a5:86:a5:db:a9:c5:80:
                    d7:12:21:f6:a8:9b:9f:80:b7:f6:06:52:8d:b5:83:
                    3b:28:02:36:e1:f2:2e:53:89:26:20:1f:14:ac:42:
                    5f:c7:84:83:ec:9c:ea:bb:2f:da:0a:56:f2:06:46:
                    d1:2d:64:9c:ad:32:d0:b3:54:4b:2b:04:75:61:94:
                    71:84:dc:02:98:81:23:27:1b:35:7a:43:ac:27:94:
                    97:ca:24:1e:f7:7a:40:b4:60:9a:3d:80:6c:76:1f:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:88:8E:AC:C3:A6:2C:6A:60:4D:0E:AC:7C:88:24:35:F6:69:4C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a818c72d-789f-4287-8baa-4f51759ded80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:a3:40:d9:f4:42:b5:7f:91:db:2a:f0:e9:bb:e0:95:e6:
         6e:27:f1:95:47:02:de:7b:b3:57:8f:dc:1f:30:17:04:1b:70:
         8b:2d:f2:3d:0f:0f:8d:66:de:19:e6:af:4b:29:3d:8d:f5:b5:
         8a:c2:e3:2b:79:33:16:a7:eb:61:dd:88:c4:1e:62:d9:9c:70:
         74:29:57:83:24:05:fe:1c:8e:2c:c6:18:fc:25:a2:9d:78:a4:
         10:5f:2f:b2:51:20:2f:5a:06:61:de:df:91:47:b7:c5:6a:d0:
         76:79:f4:f1:99:bd:01:0a:ac:f8:25:32:92:79:02:2b:26:1f:
         68:ce:18:a8:12:83:ec:00:2d:ef:62:bc:dc:4b:33:3e:8f:5a:
         4f:86:b0:b9:6d:9f:cd:cf:a9:43:2e:e3:e3:98:f6:01:eb:2f:
         eb:ce:a6:09:0d:49:1e:ee:50:4c:e4:78:6a:f8:75:23:85:be:
         ca:20:e3:86:ca:e7:0e:f0:c1:7e:89:c8:84:ad:dc:d6:9c:de:
         a0:d5:e9:80:05:19:62:5e:ff:06:ac:40:c2:3d:cd:67:40:21:
         e2:a7:90:3a:b5:75:c4:45:b4:57:bc:45:02:f3:34:d3:ba:82:
         1d:5c:74:04:26:36:c4:42:ec:db:9e:17:39:14:f0:49:4d:0f:
         c6:fc:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:05:10 2025 by rpki-client