Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa
File:                     6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa (raw, json)
Hash identifier:          2QA8c7TZd5SK8UGc6N6Ib8/hldQc8+8wsb6v7OsuQH8=
Subject key identifier:   7B:A2:2C:AF:E6:73:6E:09:BC:CE:5B:4A:F4:75:08:3E:DC:6C:39:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6ED90D5091B087D5764A56B8992C13E0C7320030
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa
Signing time:             Tue 04 Nov 2025 02:00:09 +0000
ROA not before:           Tue 04 Nov 2025 02:00:09 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.19.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d9:0d:50:91:b0:87:d5:76:4a:56:b8:99:2c:13:e0:c7:32:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 02:00:09 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=7bfdc34732660045bdecc1822c29f2ea0e2bcebf7f6f05c80c3c452d1654fad6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:e6:6e:4c:16:ab:f8:72:7d:1e:d0:23:21:
                    71:38:c1:68:c6:8f:7d:4e:2e:e8:70:c0:fd:ba:cf:
                    83:70:84:f9:ef:22:42:c7:45:44:16:d5:f2:cf:8a:
                    02:7a:67:76:e4:db:1a:c5:a2:4d:61:fd:56:75:17:
                    1a:2d:48:09:02:b2:8e:ee:75:36:26:7d:ee:93:be:
                    7d:83:a4:50:f8:b6:c9:8f:26:5c:33:32:9e:f5:a0:
                    22:c7:dc:52:4c:33:6c:3d:2f:f8:70:08:52:62:c2:
                    fe:ba:01:dd:8d:2a:2b:cb:d5:f9:2d:bd:44:87:cc:
                    ed:d2:c8:07:e6:03:a8:40:95:6a:19:e8:b6:db:b1:
                    ba:fb:96:a5:f1:d9:2a:44:67:6a:d9:1b:d5:94:f0:
                    07:84:f3:eb:47:0a:1d:9a:93:82:dc:f0:16:b6:d8:
                    c8:78:4c:bb:8b:2e:d4:6d:86:e4:cf:6f:98:82:95:
                    1b:18:ae:11:07:b2:d7:27:15:33:42:8d:44:9c:db:
                    6c:3f:c2:d7:2b:90:a9:be:92:97:da:2a:93:5d:8a:
                    05:1a:43:7f:7e:86:0f:06:e4:8e:19:a2:dc:4e:68:
                    b8:27:06:43:42:3a:e0:32:ee:25:d2:40:62:85:51:
                    f8:a7:48:d2:4a:32:54:8e:ae:c4:ce:af:23:e4:84:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:2C:AF:E6:73:6E:09:BC:CE:5B:4A:F4:75:08:3E:DC:6C:39:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a4c769e-4b67-4e0c-8dd7-7507006a0849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.19.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:44:5b:c7:8a:ff:41:6d:42:01:6d:c0:d2:d6:b8:70:ed:
         8e:42:72:0c:cf:f4:5e:6e:f3:94:f6:90:bf:37:bd:82:01:36:
         7e:e9:94:c1:f4:e4:ca:73:c4:3c:62:bb:09:0c:dc:d7:d5:dc:
         2b:8a:28:fa:0e:7f:fd:82:53:b9:64:29:20:b9:fd:f9:7d:7e:
         53:f5:e4:68:8e:be:e7:c6:5d:0e:66:af:c7:25:34:69:9b:46:
         c3:fd:1b:a3:48:7f:09:61:fa:fb:76:f5:6c:84:8b:a4:6a:ab:
         c5:9f:23:dd:22:aa:20:04:8e:57:5a:65:88:9d:40:8b:c1:92:
         d1:8c:8a:e9:e8:89:0a:1c:9d:4c:79:ce:66:ce:35:13:a3:90:
         7f:03:b7:66:a0:8c:36:70:45:bc:21:63:26:52:65:a0:59:ab:
         57:55:9c:4e:29:bb:6b:ae:8c:23:9f:a5:9e:3f:85:33:0d:e2:
         1f:67:06:f1:8d:26:ef:aa:e8:a1:0f:d6:b7:4f:84:ef:b2:ae:
         b2:4b:f9:27:4a:7e:5b:bd:e3:1a:a7:3c:5a:6e:28:9d:e0:10:
         f3:b9:fb:92:c8:fb:b1:d6:59:2a:67:a7:9f:ff:3e:0e:ec:0d:
         39:cc:3b:7e:e0:a6:85:25:76:d0:82:1b:e8:c3:80:db:82:ac:
         3f:b2:48:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbtkNUJGwh9V2Sla4mSwT4McyADAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIwMDA5WhcNMjUxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YmZkYzM0NzMyNjYwMDQ1YmRlY2MxODIyYzI5ZjJlYTBl
MmJjZWJmN2Y2ZjA1YzgwYzNjNDUyZDE2NTRmYWQ2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQxOZuTBar+HJ9HtAjIXE4wWjGj31OLuhwwP26z4NwhPnv
IkLHRUQW1fLPigJ6Z3bk2xrFok1h/VZ1FxotSAkCso7udTYmfe6Tvn2DpFD4tsmP
JlwzMp71oCLH3FJMM2w9L/hwCFJiwv66Ad2NKivL1fktvUSHzO3SyAfmA6hAlWoZ
6Lbbsbr7lqXx2SpEZ2rZG9WU8AeE8+tHCh2ak4Lc8Ba22Mh4TLuLLtRthuTPb5iC
lRsYrhEHstcnFTNCjUSc22w/wtcrkKm+kpfaKpNdigUaQ39+hg8G5I4ZotxOaLgn
BkNCOuAy7iXSQGKFUfinSNJKMlSOrsTOryPkhCupAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUe6Isr+Zzbgm8zltK9HUIPtxsOWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZhNGM3NjllLTRiNjctNGUwYy04ZGQ3LTc1MDcwMDZhMDg0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ0E+AwDQYJKoZIhvcNAQELBQADggEBAEH+RFvHiv9BbUIBbcDS1rhw7Y5C
cgzP9F5u85T2kL83vYIBNn7plMH05MpzxDxiuwkM3NfV3CuKKPoOf/2CU7lkKSC5
/fl9flP15GiOvufGXQ5mr8clNGmbRsP9G6NIfwlh+vt29WyEi6Rqq8WfI90iqiAE
jldaZYidQIvBktGMiunoiQocnUx5zmbONROjkH8Dt2agjDZwRbwhYyZSZaBZq1dV
nE4pu2uujCOfpZ4/hTMN4h9nBvGNJu+q6KEP1rdPhO+yrrJL+SdKflu94xqnPFpu
KJ3gEPO5+5LI+7HWWSpnp5//Pg7sDTnMO37gpoUldtCCG+jDgNuCrD+ySKk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:40 2025 by rpki-client