Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa
File:                     0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa (raw, json)
Hash identifier:          s6UXL3npiOlAq31tZyYztZMvIQEgXC/0ou82VvqlWhY=
Subject key identifier:   40:D4:2B:00:D5:FA:B9:95:22:9E:81:8F:B6:0F:1B:F2:F2:3B:4F:38
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27C2BA3B187D3FACC3DC73AED7744D59890CCB32
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa
Signing time:             Fri 25 Jul 2025 15:30:18 +0000
ROA not before:           Fri 25 Jul 2025 15:30:18 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.182.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:ba:3b:18:7d:3f:ac:c3:dc:73:ae:d7:74:4d:59:89:0c:cb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 25 15:30:18 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=0f1b9b31f2878a15e74e3ea35ba3a4071b481d56375879fed2c99d061e9f3303, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:a0:e6:e5:fc:0c:68:44:48:a3:61:82:2f:
                    c6:f0:1f:b8:d3:1b:23:4d:bc:25:69:83:91:75:c5:
                    76:17:9f:ed:4b:f2:3a:50:fe:9d:15:8c:a6:f7:71:
                    5a:dc:b6:07:3b:83:50:62:09:4e:7f:ab:cd:a4:2b:
                    a0:ec:d6:87:29:d8:9c:0c:9e:56:15:13:e9:89:6e:
                    7e:31:7d:c0:0c:47:ed:40:64:58:f0:1f:a6:21:b8:
                    c0:b8:af:49:54:6a:0d:9d:12:98:cf:e2:de:8e:af:
                    c3:4b:e7:0c:a8:d5:70:d4:57:37:b5:1d:f7:5a:ae:
                    61:8e:ce:ba:be:af:7b:b8:b8:e7:8a:36:b2:29:cd:
                    3e:75:06:4e:4b:12:07:48:41:bd:2d:c1:48:15:88:
                    2a:6d:49:05:93:59:40:cd:25:f1:29:10:b3:22:f1:
                    f8:0c:f7:70:ea:73:28:de:48:f3:5d:7a:8e:89:a1:
                    56:eb:72:39:93:e4:c3:b5:f0:74:84:4a:c8:08:48:
                    54:53:2d:68:f3:08:7a:7f:87:ce:79:bb:5f:b6:12:
                    8c:29:46:01:6b:ee:7a:c1:c7:17:e6:bb:29:e0:de:
                    da:3b:4e:a7:ab:15:e4:6f:6d:8f:b5:d7:62:41:d5:
                    ca:b6:1e:35:69:13:0f:e1:1d:69:24:f6:46:26:4b:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:2B:00:D5:FA:B9:95:22:9E:81:8F:B6:0F:1B:F2:F2:3B:4F:38
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bd37e9a-d46b-4388-ae57-38ab8bd4f3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.182.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:66:92:81:5e:8a:78:11:7c:56:99:de:f0:ce:e5:e1:82:
         b8:37:74:48:f2:94:ca:fe:16:23:64:2f:d9:1b:ec:08:96:8b:
         90:67:09:7d:8d:ea:b0:34:e3:a8:53:8c:cd:ef:52:7f:e2:e2:
         fb:4f:ff:4b:34:35:e3:36:13:31:56:00:83:e1:4c:2f:e4:bb:
         8f:37:bc:13:4b:f2:06:14:90:89:82:80:4e:1f:d1:50:ae:a1:
         7f:88:d9:48:dc:5c:da:40:4d:79:74:d0:ca:bd:62:3b:5b:34:
         1b:c1:51:bb:c1:71:2b:ed:77:a6:70:05:60:f0:f5:94:79:bd:
         a3:8b:d3:12:b4:e5:3d:ae:e4:e5:71:15:b4:fc:ae:fb:4e:97:
         b3:cc:62:55:43:b0:95:1c:bf:68:ef:65:1b:7f:3d:e9:3a:e4:
         90:d0:48:1b:bb:94:40:29:02:1a:aa:76:11:fc:c8:30:ad:cd:
         11:bf:cb:a4:7e:58:e4:07:ec:64:e6:b4:bf:8c:59:bc:87:4c:
         11:c7:41:8d:0d:7c:d0:32:61:1e:75:97:0d:40:39:a6:92:0d:
         53:70:b7:7d:52:79:25:c2:fe:ae:05:7e:08:f6:18:7a:fb:34:
         5f:0c:83:90:76:4f:60:43:83:97:fc:23:7e:a1:a8:78:55:76:
         a5:22:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:14 2025 by rpki-client