Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa
File:                     61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa (raw, json)
Hash identifier:          i6EkC+BBymiyM/Pp7jVVDW4mQ9YZ3uwB4rFu5rQfKqk=
Subject key identifier:   34:A9:6A:CE:21:11:CA:7E:67:6F:09:30:DA:F9:33:6F:D5:B1:EC:23
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       339EFDE52C17526174B4E01073E6B5F29358D9C5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa
Signing time:             Fri 31 Oct 2025 01:20:18 +0000
ROA not before:           Fri 31 Oct 2025 01:20:18 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        52.93.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:fd:e5:2c:17:52:61:74:b4:e0:10:73:e6:b5:f2:93:58:d9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 31 01:20:18 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=436ea48d50bfad2827ef32736852a264e2b554c0651a74c84b280f56b31be152, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:57:02:2a:cd:27:cc:3a:aa:34:7f:cb:ef:
                    97:fb:e1:8b:e8:eb:7f:12:9c:b1:7a:59:d7:de:fb:
                    6d:dc:53:f8:b2:ea:35:81:7a:99:f3:fd:a1:18:e9:
                    c7:24:41:87:d4:01:34:a3:7f:0d:48:6e:3a:16:53:
                    1e:ca:2e:19:6f:14:f4:6e:db:3f:8d:28:bf:c3:cc:
                    cb:09:25:0b:3f:cb:ec:9a:b1:3d:d4:0a:58:4a:d6:
                    38:0d:cd:dd:a2:f2:82:c2:49:dd:62:5f:63:ed:1e:
                    5e:42:fd:d3:21:f9:dc:41:1a:01:09:0d:b9:57:27:
                    0b:fe:6f:38:07:9f:ed:56:3b:28:6a:cf:94:7b:d2:
                    e1:5c:50:ef:f8:f1:35:6e:cd:32:f2:39:aa:50:19:
                    9f:a1:f4:3e:90:e7:2e:e6:d6:88:75:39:b6:70:96:
                    81:52:18:bb:18:93:43:57:55:f8:fd:1a:17:4e:88:
                    ea:68:8a:27:db:94:45:c3:b7:72:f4:a4:f2:6a:6b:
                    32:74:ae:a8:fe:33:49:24:fe:40:77:c4:eb:26:4e:
                    ec:b4:78:03:a8:e5:34:37:9a:a8:48:f7:aa:25:be:
                    c9:27:93:2f:ca:4b:4e:69:ff:57:d6:4c:6a:c6:3f:
                    f1:86:bb:04:d6:db:13:84:64:d2:c1:e2:15:83:5b:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:6A:CE:21:11:CA:7E:67:6F:09:30:DA:F9:33:6F:D5:B1:EC:23
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61df74c7-bc2c-4f0b-9b16-5682fc6ac7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:13:9d:a3:dc:0e:16:64:8c:4e:84:a0:6e:34:b0:45:22:
         ea:75:15:b8:7e:ef:a5:39:a4:df:bb:bb:e5:de:bf:cb:74:6d:
         63:d2:80:45:44:22:63:fc:41:b0:8b:28:b5:a8:20:11:37:6c:
         b4:3a:7c:b5:3f:7d:4b:ae:be:f3:f4:a3:65:ae:01:f0:76:e6:
         ad:cb:9d:77:68:ba:a3:c4:e5:05:ef:8e:12:23:cc:b9:d4:3a:
         f6:81:4d:49:f2:1e:2f:45:d6:bb:6f:17:45:ae:3d:c0:04:e6:
         30:6a:80:d6:f9:7c:f3:56:79:8e:e9:2f:fa:98:2c:ca:12:18:
         95:43:a8:ee:3a:e6:e1:48:c7:4e:65:ea:b2:ee:4a:ef:61:08:
         31:43:37:0c:5e:cb:a9:09:cf:dd:cc:e1:63:1b:eb:86:63:4c:
         77:e1:cd:df:36:2c:1c:a4:bc:d3:93:be:ae:e1:95:1c:bd:08:
         db:f3:8f:f8:d8:ec:89:54:b8:a7:03:10:82:36:c0:1b:8c:2a:
         56:b4:27:38:1f:2c:ca:b4:3b:d3:65:da:81:a9:f8:65:23:25:
         b8:c3:62:10:4e:43:6f:f6:9e:c1:0e:54:99:5f:91:62:ba:6b:
         fe:fb:02:cc:69:7e:50:41:56:79:c0:86:17:15:96:be:ca:42:
         23:a0:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:47:10 2025 by rpki-client