Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c14d5b4-0b79-4ef9-9e6b-1fe240a460df.roa
File:                     3c14d5b4-0b79-4ef9-9e6b-1fe240a460df.roa (raw, json)
Hash identifier:          TmQUHch9e8rs60mb21EnRW/x/suQeBV0WJxP01dA2Y4=
Subject key identifier:   33:BF:95:07:E7:EE:1E:8B:23:B1:0C:33:A5:4F:53:4F:A7:5E:EF:9D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D38769DA7E569D34CC7C4FDD649726858D085A5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c14d5b4-0b79-4ef9-9e6b-1fe240a460df.roa
Signing time:             Wed 29 Oct 2025 06:25:27 +0000
ROA not before:           Wed 29 Oct 2025 06:25:27 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.230.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:76:9d:a7:e5:69:d3:4c:c7:c4:fd:d6:49:72:68:58:d0:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 29 06:25:27 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=72262c5fab082c9031c4ea189dd2fe6b8d44db13c7f405f961b958ea05abcec1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:5a:37:22:cc:11:09:7d:b0:2a:2e:ce:04:
                    2e:4d:70:0c:ed:d3:6e:c2:44:ae:68:97:8f:e2:44:
                    f6:8e:ff:37:5e:7a:45:f6:1f:f6:2b:41:ba:71:b4:
                    b2:3d:de:f8:51:01:04:52:d2:6d:f0:ac:f0:9d:60:
                    ee:d5:97:70:82:d6:97:45:4d:96:2e:72:e3:31:6d:
                    6d:81:0e:13:06:a5:e4:f5:72:09:d4:86:dd:a1:cb:
                    74:41:64:9d:65:0a:39:ea:c2:d5:59:f4:8e:91:7d:
                    1a:c2:98:8d:4b:b4:ba:20:f6:2b:d2:64:31:c6:7f:
                    2f:fa:a3:54:da:56:f3:6e:e4:05:4a:ea:7d:59:03:
                    75:64:9b:ac:5e:be:45:d5:5a:f9:57:65:f1:b9:08:
                    ba:1e:61:ef:05:c4:7a:25:1e:aa:8b:c9:a5:79:5e:
                    fa:b5:1e:ad:13:88:7d:2c:b6:a9:5e:aa:8f:1f:42:
                    d7:f2:e6:67:54:57:b9:2b:4b:92:37:bd:56:99:e1:
                    72:15:36:4d:91:df:68:24:5d:52:90:6e:24:c6:c0:
                    1f:62:b8:02:af:e8:ab:dc:1c:89:e7:06:8e:a2:42:
                    7b:c7:ca:cc:e6:be:76:0c:67:ae:34:ff:23:fa:d2:
                    9e:40:03:8c:fa:93:7b:c5:80:6d:2c:1c:0c:a4:61:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:95:07:E7:EE:1E:8B:23:B1:0C:33:A5:4F:53:4F:A7:5E:EF:9D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c14d5b4-0b79-4ef9-9e6b-1fe240a460df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.230.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:41:67:39:7b:85:54:af:f4:89:39:be:88:a0:bf:d7:0b:61:
         36:eb:41:0d:c6:24:d3:a2:5f:3a:fc:7d:19:09:d2:3e:83:e7:
         49:55:ea:7b:5a:2d:f9:ed:65:a4:ec:57:92:3a:2e:ba:be:59:
         bd:57:75:d0:fd:d1:76:00:ee:29:ee:09:41:6d:c6:6d:a9:0e:
         a7:cd:46:18:68:b6:06:bf:2d:22:ca:fa:42:7a:6a:b5:a3:64:
         2b:7f:22:6b:cf:51:74:d5:fc:5f:d2:d2:eb:4b:e7:a8:4b:db:
         6e:d6:63:33:b0:35:c3:20:a9:19:a3:d8:41:55:b9:68:07:f5:
         3b:ce:e4:bb:f9:95:f4:8d:56:2c:9c:bd:77:52:fd:e2:39:da:
         54:89:da:24:8c:f3:cf:f7:bb:57:67:be:8f:98:99:06:26:67:
         b9:d8:27:c7:8d:ac:55:01:d4:e9:c6:7b:1c:24:5f:04:66:c9:
         97:22:1d:68:18:9f:d7:8e:1d:ae:db:60:30:93:c7:aa:4b:9b:
         da:5f:30:6a:d3:e9:9e:7e:ee:24:86:2c:72:0a:f5:8e:03:15:
         1f:a7:53:8e:8b:44:9b:a1:21:d4:1d:e7:91:cb:a7:d9:49:ec:
         28:5c:71:ac:38:71:bc:c9:00:4b:e8:db:4c:cb:54:53:f3:b2:
         95:f0:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:10 2025 by rpki-client