Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed476547-2d09-41f7-bf7d-96921284c993.roa
File:                     ed476547-2d09-41f7-bf7d-96921284c993.roa (raw, json)
Hash identifier:          KTPqNootg1AmVifhpeiFkp6H1wTabQ6R9XbsZd/PyXo=
Subject key identifier:   32:2C:F6:61:25:46:75:2E:A8:64:44:4D:DB:8A:9B:45:E3:9B:1B:43
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51A601D8A72A79F2F2B366A5028A89E31AC47797
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed476547-2d09-41f7-bf7d-96921284c993.roa
Signing time:             Tue 19 Aug 2025 16:21:41 +0000
ROA not before:           Tue 19 Aug 2025 16:21:41 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.184.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:01:d8:a7:2a:79:f2:f2:b3:66:a5:02:8a:89:e3:1a:c4:77:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 16:21:41 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=1c70d40adb1a34d7354b46f25474628b997f9123d50553ffb7fff636b4653711, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:72:33:f4:80:59:d2:51:3d:41:d6:36:30:cc:
                    0b:fc:56:36:b6:8b:eb:f4:e8:80:bb:a0:e0:e2:e6:
                    f5:74:f1:1e:de:83:fc:7a:a3:a4:9b:36:dd:16:7c:
                    06:45:98:d0:12:ea:77:6e:fc:e9:a6:84:ec:1c:12:
                    62:60:6e:3a:f3:d1:b1:b9:03:d3:e6:7b:4f:12:77:
                    70:3a:49:2e:07:77:9d:7e:65:c5:23:cd:6f:45:23:
                    3f:c4:67:22:80:a6:dc:a8:09:36:20:f5:ab:fc:ff:
                    c0:5b:3f:1b:53:c3:9b:04:f2:90:9e:6f:19:ae:b1:
                    26:82:fd:9e:26:c9:79:65:8f:bd:f3:f7:b0:ae:82:
                    11:52:29:85:81:fa:a5:64:4b:19:66:14:48:00:d4:
                    7f:a4:91:93:43:dc:4f:7b:a5:3a:04:60:0f:3e:3d:
                    99:4a:67:59:69:20:2c:6d:a0:bf:66:53:ed:54:14:
                    7b:32:a4:07:05:a2:4f:f5:45:cc:4a:f5:9e:1a:1a:
                    31:ab:65:e8:7c:3b:9f:08:85:47:b4:c3:6b:d8:f9:
                    88:40:2f:78:84:3f:57:18:03:9c:97:eb:3d:84:4a:
                    ca:8a:cf:5e:27:5a:68:4b:1c:dc:ac:ff:2d:4e:49:
                    30:e4:c4:d6:94:85:75:0c:1d:52:e2:1d:09:6a:a1:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:F6:61:25:46:75:2E:A8:64:44:4D:DB:8A:9B:45:E3:9B:1B:43
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed476547-2d09-41f7-bf7d-96921284c993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.184.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:a3:62:b6:18:93:95:2a:05:0f:96:de:37:b6:7c:ca:5d:
         a8:3a:35:9b:1d:fe:b3:29:d1:45:ae:95:6b:8f:4a:d8:37:e1:
         82:63:32:c5:c1:9a:66:17:db:8d:84:23:a2:aa:ba:f1:8f:60:
         c5:d1:63:d2:29:04:7f:ab:1b:d7:ae:b8:5e:f1:c3:6e:94:c5:
         e4:ac:5d:0d:56:1c:26:09:d1:7f:58:62:bf:de:26:1c:29:94:
         96:d8:33:64:ff:31:e2:63:14:f9:c1:99:63:84:ed:53:a3:44:
         b9:de:f1:db:5f:8b:1d:9b:e7:a2:69:a1:89:70:c9:7b:e0:d1:
         ad:35:ec:4f:7f:d5:a6:16:e1:34:ff:3b:73:43:7d:55:f7:98:
         50:6f:b4:fe:81:49:6f:2d:58:6c:0e:aa:00:85:e0:39:39:97:
         13:4d:27:e7:c5:64:df:4f:78:c2:91:5b:c3:70:9b:88:34:fe:
         60:13:be:dd:78:3b:45:a8:67:a8:94:88:4b:11:eb:28:0b:38:
         a0:70:b8:a1:aa:d0:f6:4f:7b:2f:d6:6b:49:a8:6a:a4:f2:65:
         6f:7e:62:55:0f:8d:50:53:5b:bd:40:51:c9:ed:56:a6:86:98:
         b9:a3:6f:ba:dc:97:b7:b5:01:e5:51:8f:fe:12:0a:c4:ce:5e:
         03:1e:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:08 2025 by rpki-client