Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
File:                     bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa (raw, json)
Hash identifier:          8cMDaYrwvJeu0bVFe71wpi8ifzvfLiYbT2prw85pwcE=
Subject key identifier:   73:4E:1D:67:93:99:05:EF:92:EF:3A:79:A6:BC:37:89:28:59:04:F8
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       6210AB13A8D04B7952B8D12ABB2DAFBC09864C00
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
Signing time:             Tue 21 Oct 2025 00:10:09 +0000
ROA not before:           Tue 21 Oct 2025 00:10:09 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:ab:13:a8:d0:4b:79:52:b8:d1:2a:bb:2d:af:bc:09:86:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Oct 21 00:10:09 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=329d1d853c1d56d28d0b7f40469c6ae57c131d9b50a5075974c1bf3ffa77f54f, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:4b:ce:68:33:5e:6e:61:3f:a5:1a:01:fb:
                    db:5c:59:b5:74:5a:08:4b:d5:cc:aa:3a:f7:7f:76:
                    52:a1:61:60:5c:68:c2:d3:eb:e8:3a:7b:3c:67:4b:
                    ab:2b:17:54:0e:1e:64:3c:54:fe:72:4c:a2:54:0c:
                    cf:dc:b1:ec:bb:67:a2:8b:6f:cd:71:2b:09:05:9c:
                    fd:b7:8b:2e:34:2b:38:d7:65:5f:82:77:9e:46:c8:
                    99:3d:f6:3b:a5:b0:94:35:30:f1:ac:90:bf:9f:6d:
                    23:c8:31:e8:33:66:44:3e:c8:35:2d:66:cb:2f:69:
                    0b:9a:9a:a4:65:b6:9c:96:e3:3c:6e:1c:92:76:d6:
                    7e:bb:a0:dc:d7:2d:27:4b:e8:ba:2c:ab:38:a6:19:
                    9d:cd:7f:bf:eb:13:7e:4b:98:a4:88:9b:f1:dd:6f:
                    5e:ca:fa:31:10:73:80:61:a7:fa:53:71:0d:d0:bd:
                    02:e4:9c:a5:97:c0:0c:79:cb:bf:bc:cd:b3:f9:48:
                    39:a4:41:f2:ca:cd:4f:ee:07:93:c3:bc:b7:a0:72:
                    f8:48:0b:15:08:9f:88:88:84:9e:ae:6b:c8:35:9e:
                    09:f2:cf:2b:4a:fd:2f:69:d1:b3:9c:7f:72:9f:fd:
                    d0:f4:00:3a:4a:8f:18:6f:1e:b7:69:21:43:82:29:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:1D:67:93:99:05:EF:92:EF:3A:79:A6:BC:37:89:28:59:04:F8
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:87:fd:8e:c4:d4:2b:d7:59:22:e8:a0:36:99:79:27:eb:69:
         8d:cf:12:52:55:ca:5e:02:b5:e5:ac:e7:c3:93:32:df:0a:b0:
         84:43:60:e9:1b:fa:02:2e:23:bd:30:97:d9:8e:fa:6c:c6:14:
         4f:7a:8f:81:57:c2:9e:ba:66:e9:30:f8:ba:12:7f:7c:40:ca:
         57:80:d9:d9:7f:a2:7a:a1:09:26:85:98:3b:1b:60:eb:6a:85:
         09:68:ec:64:30:c4:e5:8e:38:56:cd:28:bd:29:11:d5:c4:a7:
         6c:aa:ea:f9:6a:6b:24:31:33:ee:3c:87:8b:47:3b:1e:63:1c:
         f4:d1:bf:ab:82:a0:75:49:fe:9f:d5:de:a4:6e:10:ff:c2:56:
         03:fc:7a:22:d6:7e:63:94:36:22:cc:7a:1b:c8:30:c6:a4:12:
         64:6c:9d:fc:c1:9f:e0:af:51:32:bb:e3:76:5a:67:45:e2:d1:
         45:42:08:0b:85:58:cb:38:f7:bd:ef:c7:24:d0:c4:83:ef:64:
         06:a1:10:57:77:dc:54:70:6a:63:45:cc:6d:1f:29:dc:7b:ac:
         3b:fd:6e:7e:e0:30:f1:b4:7f:9c:17:35:c7:ac:7b:ad:98:8c:
         61:fe:db:f3:cd:88:d3:43:aa:13:bf:d5:dc:b5:9f:98:7d:c8:
         60:26:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:12 2025 by rpki-client