Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7235aae-47f2-48ad-bffa-7bd6cdf086d9.roa
File:                     f7235aae-47f2-48ad-bffa-7bd6cdf086d9.roa (raw, json)
Hash identifier:          VS6GxpVjXMljfd8ACipu2kbCN6MlLy8jUWte4SY7RKY=
Subject key identifier:   4A:37:62:CE:63:7E:D2:24:8B:F5:D5:8C:BC:2F:EE:86:99:4F:98:AB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7CD378065F8DA1EC008B86C098BDEAB94C1A1229
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7235aae-47f2-48ad-bffa-7bd6cdf086d9.roa
Signing time:             Fri 17 Oct 2025 22:41:13 +0000
ROA not before:           Fri 17 Oct 2025 22:41:13 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.251.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d3:78:06:5f:8d:a1:ec:00:8b:86:c0:98:bd:ea:b9:4c:1a:12:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 22:41:13 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=a9a45ed18a1f82b32fc0bda69103c84744410467bf09192d35d9aa89daccf732, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:6d:01:9e:3c:46:f2:a1:22:91:95:19:92:
                    b9:af:98:ed:65:cf:2a:33:2b:5f:07:8a:c2:d7:00:
                    fc:5f:6b:aa:30:2b:27:5a:79:c7:ec:e9:1d:51:55:
                    9c:1e:36:10:9c:36:41:25:2f:b0:89:11:93:fb:53:
                    8e:09:98:1d:4e:22:4d:47:67:87:26:83:4a:f9:d1:
                    0e:78:d2:ab:eb:3c:84:9d:47:cd:d7:3e:af:25:e9:
                    7c:a4:fe:9e:7f:6f:d2:5a:b3:f0:ba:70:5d:c8:e6:
                    6f:ac:02:76:2c:b0:9a:cf:4b:fb:0f:42:e4:20:19:
                    02:5f:f4:0d:9c:ad:6b:80:8f:60:09:d4:0a:42:86:
                    01:41:ee:e3:d2:f1:ab:2f:4b:36:f6:0d:01:c1:7a:
                    f3:af:d4:d8:3a:12:d3:d2:8c:1a:79:89:7b:0f:30:
                    0f:ed:49:1b:7a:e6:19:cc:e8:66:77:dd:44:da:a9:
                    09:8d:69:ff:ff:5c:66:35:82:19:74:aa:92:9a:ad:
                    cb:c5:0c:ab:dc:7e:5d:6d:38:76:f0:db:00:fb:f2:
                    72:28:33:2f:fd:23:3e:05:2a:6c:3e:bf:da:11:b3:
                    7c:ed:46:18:ec:a1:78:0f:43:de:d7:58:5e:b9:07:
                    a9:b4:53:94:2d:9f:8c:49:37:64:ac:22:88:1f:05:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:62:CE:63:7E:D2:24:8B:F5:D5:8C:BC:2F:EE:86:99:4F:98:AB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7235aae-47f2-48ad-bffa-7bd6cdf086d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:24:18:96:4a:9e:5f:2a:53:7e:64:b0:5d:92:0f:f1:37:
         68:25:78:ea:c5:e2:b5:07:24:92:9c:22:43:a1:a9:45:54:d4:
         d5:4d:54:3e:17:33:72:37:a7:72:b8:eb:ee:89:a7:ea:c2:34:
         e5:ed:cb:f5:ff:18:bb:ee:70:d2:1c:11:74:06:ad:79:ff:c5:
         a2:c1:d1:a2:5a:3d:ba:a5:e2:6c:a5:21:85:1c:aa:2b:41:18:
         18:cd:02:0c:7b:4b:45:d8:f7:41:10:f4:68:e7:41:24:7f:0c:
         99:62:48:79:6e:d0:47:a6:0c:c1:3a:03:80:4b:92:ce:ee:d4:
         2f:f7:ce:c0:ae:ab:8f:0d:67:9a:73:63:25:4d:3a:74:9e:e0:
         de:a1:47:f1:cb:25:4f:1c:d3:f3:bd:a1:58:17:dc:c6:b3:f3:
         37:4a:cc:7e:11:7e:74:fb:5e:08:84:c4:9a:8d:a5:e3:7c:d1:
         c2:5e:7e:c9:9f:f1:b7:fa:69:de:65:b1:e8:45:b5:3f:79:c6:
         5c:77:72:59:2a:4e:8e:0d:32:be:83:fb:2b:3e:d9:90:55:6c:
         d2:bc:7b:84:d8:13:c4:45:42:98:2a:38:3a:9a:53:82:bd:51:
         08:df:11:8f:72:7b:ed:c0:97:bb:08:7a:aa:6f:be:58:01:56:
         08:fe:73:13
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfNN4Bl+NoewAi4bAmL3quUwaEikwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjI0MTEzWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOWE0NWVkMThhMWY4MmIzMmZjMGJkYTY5MTAzYzg0NzQ0
NDEwNDY3YmYwOTE5MmQzNWQ5YWE4OWRhY2NmNzMyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqeW0BnjxG8qEikZUZkrmvmO1lzyozK18HisLXAPxfa6ow
Kydaecfs6R1RVZweNhCcNkElL7CJEZP7U44JmB1OIk1HZ4cmg0r50Q540qvrPISd
R83XPq8l6Xyk/p5/b9Jas/C6cF3I5m+sAnYssJrPS/sPQuQgGQJf9A2crWuAj2AJ
1ApChgFB7uPS8asvSzb2DQHBevOv1Ng6EtPSjBp5iXsPMA/tSRt65hnM6GZ33UTa
qQmNaf//XGY1ghl0qpKarcvFDKvcfl1tOHbw2wD78nIoMy/9Iz4FKmw+v9oRs3zt
RhjsoXgPQ97XWF65B6m0U5Qtn4xJN2SsIogfBcEtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSjdizmN+0iSL9dWMvC/uhplPmKswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y3MjM1YWFlLTQ3ZjItNDhhZC1iZmZhLTdiZDZjZGYwODZkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2+8AwDQYJKoZIhvcNAQELBQADggEBAJJdJBiWSp5fKlN+ZLBdkg/xN2gl
eOrF4rUHJJKcIkOhqUVU1NVNVD4XM3I3p3K46+6Jp+rCNOXty/X/GLvucNIcEXQG
rXn/xaLB0aJaPbql4mylIYUcqitBGBjNAgx7S0XY90EQ9GjnQSR/DJliSHlu0Eem
DME6A4BLks7u1C/3zsCuq48NZ5pzYyVNOnSe4N6hR/HLJU8c0/O9oVgX3Maz8zdK
zH4RfnT7XgiExJqNpeN80cJefsmf8bf6ad5lsehFtT95xlx3clkqTo4NMr6D+ys+
2ZBVbNK8e4TYE8RFQpgqODqaU4K9UQjfEY9ye+3Al7sIeqpvvlgBVgj+cxM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:45 2025 by rpki-client