Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa
File:                     67f608cb-5ec5-4705-951e-e51e20a86d55.roa (raw, json)
Hash identifier:          EUESzPozMwpRlzXf6mzkubFPyhuWkQxHZcRMXUANtN0=
Subject key identifier:   F6:D4:50:F6:C4:38:C4:B0:A5:A6:58:3D:A9:FD:2E:65:6F:BE:31:EE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1AE7C7EB3E338B13A22EACFC891A9BD3F9EB005D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa
Signing time:             Tue 04 Nov 2025 01:21:50 +0000
ROA not before:           Tue 04 Nov 2025 01:21:50 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:c7:eb:3e:33:8b:13:a2:2e:ac:fc:89:1a:9b:d3:f9:eb:00:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 01:21:50 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=b7781153465b8b233b3464840866fedd4254f534ed7273efc6667f158cb6ad93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:ea:7f:23:a2:18:22:79:b0:46:a9:11:89:
                    7b:4d:6b:fb:de:82:19:79:bd:d1:a3:62:61:34:87:
                    4d:ca:43:ce:32:9f:07:e4:04:34:ca:78:c6:11:4b:
                    4e:86:84:9f:aa:3b:6d:80:20:62:a2:4d:cb:03:97:
                    88:68:02:0c:d4:bc:ef:4a:da:dc:6a:99:ea:c3:d9:
                    d5:f1:a2:61:b3:b6:fb:33:09:3f:e6:24:dd:32:0e:
                    f3:74:6f:7a:89:10:cd:23:a7:e4:6a:c4:77:f3:43:
                    a1:69:0c:49:ad:25:1f:03:f9:70:ea:94:e9:d7:c3:
                    e2:fe:94:26:cd:f1:1f:9a:ea:08:dd:6f:9a:9f:b2:
                    82:65:5f:4c:27:9d:3b:69:85:af:6f:0b:76:18:c2:
                    34:e3:58:56:70:af:b3:ee:1a:40:66:9e:17:f6:03:
                    8e:6a:d1:b4:77:61:9a:40:34:98:61:d6:26:5a:78:
                    43:da:31:fe:97:82:6d:0b:af:cf:2e:43:59:ea:5f:
                    17:bd:a0:ad:b6:b8:a8:2b:15:07:8e:fa:8b:cc:05:
                    69:e5:b9:52:50:e7:19:12:1f:46:d7:bd:44:e2:e2:
                    13:b6:ae:6d:c1:c9:74:50:17:ae:29:34:3e:7f:59:
                    c1:0d:33:fb:ef:96:8f:bc:a8:92:9a:a4:e6:72:4f:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D4:50:F6:C4:38:C4:B0:A5:A6:58:3D:A9:FD:2E:65:6F:BE:31:EE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:42:5a:cb:4a:07:94:cd:bc:d5:1d:64:a9:0b:d9:c4:15:
         8d:17:fc:e4:c8:f9:7a:48:94:26:c4:80:fb:29:77:29:ea:94:
         87:33:5e:d2:2a:f3:52:7d:b1:ba:e4:71:20:22:f1:7d:a6:3d:
         8f:aa:90:bb:2c:0a:d9:65:da:d3:42:53:c6:5d:ed:06:63:db:
         53:55:4f:b7:b0:d1:66:55:fd:3e:ff:5a:48:c8:70:cb:34:6d:
         75:ce:2b:f2:57:ba:1c:52:74:74:75:cd:da:6b:8a:c1:e9:0a:
         e6:70:28:e0:4c:2f:1f:aa:fa:db:ce:84:42:c1:b3:36:f5:09:
         00:61:c4:7c:f6:68:c9:e6:f3:3b:d6:f2:ca:f3:88:83:ff:9f:
         4e:5e:a4:52:2c:27:41:19:df:e5:7a:38:f5:bc:90:72:89:e3:
         6e:08:25:f8:90:34:a0:70:bf:c7:f7:ab:6a:1d:66:11:07:08:
         84:07:cc:56:04:cb:fb:8d:bc:3c:52:25:11:8a:c0:cd:96:3a:
         3b:06:86:f2:6c:33:90:84:f3:d4:69:e8:88:4c:cb:af:e3:2c:
         2b:17:71:53:47:52:e2:a8:60:26:74:4c:a3:5e:6a:90:89:cb:
         dc:5f:e8:cd:80:da:f8:03:e1:cc:20:38:08:49:bf:ba:0e:67:
         e1:00:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:29 2025 by rpki-client