Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab186dfa-0d34-41ad-b4e8-2ce0a8fd53ce.roa
File:                     ab186dfa-0d34-41ad-b4e8-2ce0a8fd53ce.roa (raw, json)
Hash identifier:          Ql7L8UiNAawwu5q1rBByLtbliQk3kr3rMSmji8oEYjM=
Subject key identifier:   FA:7B:C8:98:53:1D:BA:71:1D:B4:0B:B1:E6:84:B7:5A:16:80:41:42
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6B92E2C35C64FCCED07F3782389F40AD275C4BC0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab186dfa-0d34-41ad-b4e8-2ce0a8fd53ce.roa
Signing time:             Wed 24 Sep 2025 17:30:55 +0000
ROA not before:           Wed 24 Sep 2025 17:30:55 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.32.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:92:e2:c3:5c:64:fc:ce:d0:7f:37:82:38:9f:40:ad:27:5c:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 17:30:55 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=e93498e7f36d4ac8e617e92bd44610ba194aacc94eb19ff73df83f3eeafbba15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:b2:6e:1b:31:13:f7:13:fd:7e:eb:ec:45:
                    83:eb:28:2b:d0:a8:be:b2:09:bb:e0:87:bc:1d:8f:
                    e1:97:d9:60:db:b4:a6:8d:c9:e3:d5:a5:fe:9d:f8:
                    b2:0e:8a:8c:61:13:d9:84:2d:8d:bd:dd:42:67:73:
                    b1:8c:e0:f8:25:de:b6:f7:56:e1:99:fd:ff:58:b7:
                    61:a4:82:bd:3f:6f:6c:fc:e2:18:e7:4f:f1:0c:1b:
                    98:1d:01:f1:7b:74:f8:fe:e3:73:2e:00:a6:ae:16:
                    91:44:46:ac:04:39:d3:21:69:93:f8:19:e2:ab:d3:
                    1f:75:21:80:bd:2a:98:d4:7a:72:8b:50:29:44:a2:
                    7f:89:46:2c:f7:9a:9d:04:1c:d1:4a:b4:87:2f:4d:
                    1b:6d:81:ac:4c:a4:7a:21:6c:e8:0e:89:36:9f:9f:
                    ea:fc:d9:48:e0:cf:11:04:62:01:83:95:f4:39:f0:
                    d2:b9:19:43:63:79:ba:81:3c:32:73:49:1c:91:d1:
                    2b:2d:90:31:7b:65:ed:3d:9f:22:d3:c5:d2:51:11:
                    9a:f7:fc:21:d6:96:7b:07:01:42:52:e9:d7:ba:f6:
                    79:1c:5e:fd:d4:77:cf:20:0f:97:85:59:2b:aa:50:
                    43:66:18:9d:32:37:37:1f:65:87:1d:6a:9d:08:70:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:C8:98:53:1D:BA:71:1D:B4:0B:B1:E6:84:B7:5A:16:80:41:42
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab186dfa-0d34-41ad-b4e8-2ce0a8fd53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.32.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:77:df:60:82:fd:0d:d0:d0:fd:0c:2b:8b:a4:b2:a0:f7:4b:
         76:b8:2c:d4:9c:17:c7:07:a0:74:1b:19:73:25:ff:59:cb:64:
         b1:94:13:25:c6:95:88:6f:d4:8d:50:d0:94:18:6c:10:ff:65:
         6c:2e:bf:e0:ca:8d:8d:55:41:56:f3:15:d6:a0:d3:e1:90:9d:
         ac:62:1e:41:9b:b3:7a:25:ff:78:85:96:46:52:55:06:c1:6b:
         f7:b9:9b:9b:7e:49:aa:6f:82:e5:32:41:8f:9a:17:6f:e9:fe:
         d5:8c:82:28:78:ab:a5:b5:7f:42:03:99:3c:1c:0a:d7:5c:47:
         41:d8:85:69:4f:3f:d1:58:dc:29:08:b5:26:fb:4c:ae:fa:81:
         12:a8:63:c5:14:36:c7:25:c1:d5:82:78:f5:c9:73:d8:c0:19:
         18:98:26:48:5e:8a:c6:0d:e9:8a:8c:22:1b:93:07:54:30:7c:
         12:42:d5:4c:4e:38:2c:ac:6a:83:fa:b7:9a:61:fc:c0:a6:3e:
         5b:13:2c:57:77:1a:99:35:34:d9:96:2b:41:ac:2a:13:5d:bf:
         56:52:fe:9b:4b:18:c4:8e:a0:04:5a:a5:17:61:2f:e1:ce:2c:
         ac:c1:fb:28:98:cb:a2:bb:45:13:70:f5:97:cf:43:83:8d:2a:
         93:2d:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:19:11 2025 by rpki-client