Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15465410-a2f8-4074-a561-6a6497b07e85.roa
File:                     15465410-a2f8-4074-a561-6a6497b07e85.roa (raw, json)
Hash identifier:          YvEdQY0JWpZ8a7Dn5CEeslzGkv9xJBMCjU4kSFSP9cU=
Subject key identifier:   DC:1E:47:BD:97:08:DF:AC:DC:A4:C3:A8:35:60:85:F8:D5:53:71:00
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7FB11BFC39426C128CDC31449B2EA7EA1DAA8248
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15465410-a2f8-4074-a561-6a6497b07e85.roa
Signing time:             Thu 30 Oct 2025 00:06:50 +0000
ROA not before:           Thu 30 Oct 2025 00:06:50 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b1:1b:fc:39:42:6c:12:8c:dc:31:44:9b:2e:a7:ea:1d:aa:82:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 30 00:06:50 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=4d7ae203ac4f431e51d84171e7e5bb27cd3a6410f7375963e1955c68582bb686, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:f7:ae:c1:3a:52:97:d9:be:5a:32:d9:6f:
                    5e:c1:b6:fa:b3:1f:a3:2d:ab:66:13:06:83:d2:1b:
                    dd:3a:13:78:8b:41:bb:c5:86:6f:b2:ec:4f:ba:54:
                    9e:dd:f1:7c:73:b7:a9:d3:9e:23:49:31:f1:45:a3:
                    66:84:15:52:02:fe:6c:12:61:4d:e7:23:2f:31:97:
                    5c:8c:d6:09:2f:9e:ef:5d:0d:64:27:ef:68:69:93:
                    dc:60:30:d9:e3:fa:39:6c:14:d7:ab:a3:c6:17:1f:
                    4a:f1:64:39:79:e8:af:0c:ec:a8:6f:5c:21:60:78:
                    f7:56:73:07:52:ab:4b:1d:b2:70:8c:81:96:f2:38:
                    aa:5b:0d:b7:60:ec:d5:19:c0:26:88:61:16:30:53:
                    45:de:6a:d8:52:c5:d2:a5:47:0e:03:48:2e:ff:da:
                    ac:e3:29:f0:6d:40:f4:81:8b:eb:49:65:55:8d:ce:
                    48:a3:22:94:1a:95:13:0c:e0:b0:41:e3:21:b0:72:
                    87:ab:49:a7:14:cb:a7:06:7d:8b:f1:6e:fc:9a:33:
                    83:a6:91:32:15:31:fd:ff:cf:fc:e4:dc:a7:69:76:
                    0d:fc:c5:a5:a2:98:fe:6d:3c:56:70:fa:c7:dd:02:
                    aa:2c:4d:c1:70:07:22:15:4b:94:60:1f:55:2e:8d:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1E:47:BD:97:08:DF:AC:DC:A4:C3:A8:35:60:85:F8:D5:53:71:00
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15465410-a2f8-4074-a561-6a6497b07e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:8e:ec:24:35:31:48:c8:04:5c:4e:2a:a7:3e:51:8d:72:
         4b:bc:71:5f:57:87:10:4b:a8:23:af:f4:d3:c3:21:79:26:97:
         a6:4c:23:3d:ce:f8:58:8b:37:80:eb:d9:b3:52:bd:58:45:71:
         f8:9b:37:da:3f:27:03:ca:a5:65:0d:b1:3d:d6:3b:d1:7c:08:
         5f:03:5c:e5:72:fa:f1:2b:22:b3:5f:d7:57:f3:2b:3f:1f:37:
         c0:c5:66:21:df:30:a2:fe:43:85:9c:7c:3c:d3:0c:6d:00:f1:
         89:2a:02:a0:c9:65:34:91:41:e9:56:71:ef:9f:bf:5b:6b:51:
         e1:a5:ca:93:9f:22:e2:3d:24:bc:5b:c6:4b:17:48:94:b7:03:
         0c:de:43:1d:49:94:fa:0e:9d:97:ed:a1:ee:9a:f1:d9:d0:f0:
         35:56:6e:50:07:2d:06:3f:7e:82:64:fb:1d:a0:3a:e5:77:fa:
         65:76:3e:42:35:09:0d:97:0d:3d:2c:47:3f:e9:b1:18:00:92:
         fa:35:1c:31:9d:72:ff:06:10:23:7a:7c:7b:bf:fc:3a:7f:d4:
         82:d1:58:c1:a8:b4:7a:05:26:c3:af:27:99:2c:7b:17:3b:70:
         a3:52:49:ef:fd:ea:4c:db:e5:35:5a:db:22:9b:40:83:1f:c1:
         c7:0a:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:41 2025 by rpki-client