Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2944454a-7b2f-41df-9f36-66a981eb3564.roa
File:                     2944454a-7b2f-41df-9f36-66a981eb3564.roa (raw, json)
Hash identifier:          XlzzsoBA0+W18gtmoLT9IM5NruE5KvaVK4hRNpP0s8s=
Subject key identifier:   F6:24:58:37:DB:07:C4:59:86:A2:0E:77:4F:F5:D2:AC:17:B5:BA:CA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       74FB3745CD75FCF10D8DE2D117E34F5AA8B7FEC4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2944454a-7b2f-41df-9f36-66a981eb3564.roa
Signing time:             Tue 21 Oct 2025 04:31:44 +0000
ROA not before:           Tue 21 Oct 2025 04:31:44 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.72.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fb:37:45:cd:75:fc:f1:0d:8d:e2:d1:17:e3:4f:5a:a8:b7:fe:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 04:31:44 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=c7a2e93cdffc671b24afeee0cf15f03dba73aac08d19d34937e37d27d2c9021a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:bd:1b:97:7f:7a:24:c7:8c:a7:8b:32:95:
                    65:71:8a:06:c8:1c:49:e5:eb:2c:b7:7a:ff:36:4c:
                    a0:28:f9:bf:41:73:03:9f:0d:7c:50:90:58:61:33:
                    9e:c3:66:29:91:45:42:1d:cd:74:4d:31:1e:60:b4:
                    cf:f9:0f:9a:b1:8f:6e:45:bb:27:b1:54:64:da:d8:
                    be:6c:e8:5f:b7:06:3c:16:44:37:59:79:e1:03:82:
                    e1:6e:56:f4:c4:12:10:9c:83:82:b1:65:87:35:2b:
                    89:0c:df:7b:50:bb:79:04:e9:9e:7b:f4:77:81:83:
                    5e:f4:c2:32:bb:15:6f:f7:1f:8d:6e:30:e9:c6:1c:
                    05:fb:b7:cc:66:5c:f3:62:9d:a6:3e:1a:86:66:50:
                    2c:bd:0b:39:70:29:66:23:f9:46:7b:5d:db:3b:7a:
                    bb:23:e1:d4:a9:70:73:81:23:2f:b5:5f:9f:ca:be:
                    21:95:3d:98:cb:54:1a:3d:42:98:36:1e:de:97:e0:
                    fb:c5:53:1b:37:c9:1b:12:0f:94:10:bf:08:ed:9b:
                    ae:dc:21:53:b6:1c:17:42:f9:b9:2c:1d:fc:e8:f7:
                    ae:27:9d:b6:94:72:c3:61:bb:80:20:5a:1c:49:6d:
                    9c:62:38:21:7f:67:1f:c0:f1:7a:34:42:da:dd:d2:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:58:37:DB:07:C4:59:86:A2:0E:77:4F:F5:D2:AC:17:B5:BA:CA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2944454a-7b2f-41df-9f36-66a981eb3564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.72.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:29:79:1e:0c:d9:7a:67:c2:93:9c:1e:37:07:4a:b8:1a:
         f0:6d:fd:60:84:f0:ba:9b:5c:c2:17:53:35:70:6f:9f:ba:ce:
         70:fc:6f:81:0c:ca:42:95:a3:4c:99:d9:f7:98:2b:95:ab:e6:
         92:5f:fd:87:3f:21:99:b2:8f:f8:d9:ce:11:be:b4:ba:e1:8e:
         4c:14:f4:7b:a7:1c:87:e4:62:4f:22:98:7d:91:92:d9:49:2a:
         9e:7f:2e:b1:07:18:7e:4b:c7:07:ec:da:5a:a9:b7:53:b7:3d:
         62:45:a5:fa:df:cb:3f:92:c6:91:bd:de:f7:84:af:d4:d8:30:
         bb:db:6c:c1:a4:92:ec:85:4e:d4:ac:64:0d:40:6c:51:c6:0d:
         b9:86:50:3d:a6:12:b0:80:b4:dd:bf:97:f3:c1:cb:14:7b:68:
         e1:86:0c:8e:0e:0c:e1:1f:15:61:e5:f1:a8:0b:e2:28:f8:03:
         85:8b:59:94:12:6a:68:40:a7:c8:6c:8c:ee:22:06:6a:51:02:
         8c:22:ff:b1:69:ca:86:53:61:68:8d:63:52:8b:8c:e3:af:14:
         4b:2c:cb:8d:30:78:21:3f:5a:de:91:ee:6b:10:ef:62:2e:ed:
         c2:61:10:39:96:88:34:78:ed:6f:8d:07:01:06:bd:08:83:6a:
         c0:c0:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:37 2025 by rpki-client