Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa
File:                     b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa (raw, json)
Hash identifier:          prum5lMTocs2BgVFOVq5+FqPwoWI/hyiOX5GbsdR9nw=
Subject key identifier:   6D:9B:E4:2B:78:04:95:E5:D0:4A:06:96:82:D9:35:99:F6:25:82:D2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       31614F002F6CE4A9D8F666BA46F57F58CEE9193B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa
Signing time:             Fri 17 Oct 2025 22:01:30 +0000
ROA not before:           Fri 17 Oct 2025 22:01:30 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.247.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:61:4f:00:2f:6c:e4:a9:d8:f6:66:ba:46:f5:7f:58:ce:e9:19:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 22:01:30 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=dbead7bad472ed150925dd281620e26921c15bf5f505d05f3c150a22f4f36f03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:39:a4:8f:29:25:ac:9c:31:d8:60:0f:52:
                    23:f4:7a:28:4f:a9:13:43:24:05:ff:c9:82:4c:e4:
                    44:33:84:54:54:33:08:1e:dc:b2:71:26:e5:63:99:
                    26:42:a9:0b:9a:14:c7:9a:30:36:95:a6:3d:ad:c7:
                    3b:17:cc:fd:9d:ca:22:f3:ff:ff:e5:ad:cc:8b:cc:
                    5f:63:43:1a:0e:0e:fa:22:21:6c:f4:90:92:06:c6:
                    09:48:5e:d5:cc:27:22:61:3a:fb:fb:55:98:a1:16:
                    90:2a:4d:84:4c:19:3d:7a:e8:68:2f:6c:b0:eb:61:
                    64:f6:6e:e9:69:5a:32:7c:2a:f9:81:f3:e6:ce:25:
                    2a:39:19:36:56:73:86:8b:49:81:69:f2:f9:32:08:
                    1a:49:50:62:d2:b0:83:36:7f:96:19:c2:b9:b1:fe:
                    8f:97:45:d9:58:53:61:cc:de:69:14:28:27:b5:c6:
                    06:6b:07:eb:08:7e:00:9c:43:27:95:f7:01:1c:d5:
                    32:83:4a:c9:2d:88:3b:c8:f4:e9:f2:77:de:2a:72:
                    d2:87:f2:b2:fe:06:21:88:9c:04:13:d1:06:4a:9b:
                    89:56:42:af:3d:62:85:03:f0:fb:8a:8e:cb:b1:80:
                    80:13:3d:1c:0c:4f:67:3f:74:27:5d:42:7a:96:1c:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:E4:2B:78:04:95:E5:D0:4A:06:96:82:D9:35:99:F6:25:82:D2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b152b0f5-58c4-45c7-8a4c-5db9a0ff8f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:a2:75:48:31:d3:0e:6b:9d:11:67:17:c2:09:22:89:78:
         a7:fd:2a:c4:3c:59:7c:ea:99:53:1e:73:f1:3f:80:96:3b:aa:
         a5:72:0c:41:8c:fe:72:e2:93:19:f4:05:ae:1e:28:36:8a:ef:
         66:df:ad:27:f9:84:fc:5a:0d:80:6a:b4:8c:8d:bd:d6:e0:d2:
         6b:ce:a2:b3:a8:7f:29:2e:a0:cc:44:dd:db:58:c6:8e:ad:0d:
         b5:46:7b:be:ab:4c:1e:5b:5b:2b:77:c2:46:59:90:af:43:67:
         d6:60:ee:df:a4:6a:1f:cf:0c:71:cf:f4:0f:37:21:17:09:0b:
         cc:fa:93:90:ff:18:37:5a:fd:d9:50:89:9c:b7:b9:dd:e1:1a:
         73:65:34:12:47:1b:c6:6b:d0:cf:47:a3:21:b8:f9:a9:7e:0e:
         03:e7:89:77:1e:7d:8c:28:4c:b4:ba:0d:95:47:c8:c6:79:d8:
         a8:a9:0f:f1:47:10:9e:00:02:85:fe:a2:96:3c:c2:5b:0e:5d:
         e9:7e:e6:45:65:94:a1:77:75:d9:7a:76:06:d2:4b:a3:fb:7a:
         8b:43:e8:36:26:19:4c:fb:32:20:79:c8:fc:9e:a1:78:9e:68:
         33:b6:c8:e6:39:57:35:2b:65:33:c0:9e:81:14:9f:10:fb:ce:
         de:e2:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:54:25 2025 by rpki-client