Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e843462-0e1a-4bf4-8348-0fb60038a764.roa
File:                     6e843462-0e1a-4bf4-8348-0fb60038a764.roa (raw, json)
Hash identifier:          S41pnhGGan85IvU6y8w3Mh+HZveLjHJpsMzfZCJ+6l4=
Subject key identifier:   6C:6E:0A:C3:9C:4B:55:DE:DD:65:62:94:C4:15:72:0C:AA:B9:AB:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       08F3E163F3B0AFCA09936F49616EA924BEE6DE24
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e843462-0e1a-4bf4-8348-0fb60038a764.roa
Signing time:             Thu 30 Oct 2025 00:08:39 +0000
ROA not before:           Thu 30 Oct 2025 00:08:39 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f3:e1:63:f3:b0:af:ca:09:93:6f:49:61:6e:a9:24:be:e6:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 30 00:08:39 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=ff781b841c77223dd79aab02dda2d1649f0e1794c4f34d93ec94340437ee7714, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:a5:10:0e:e7:0a:05:f8:2c:a6:e4:e0:3d:
                    ac:51:d6:8b:f1:d4:59:26:ff:02:a0:ca:a8:3e:a2:
                    83:ee:10:79:f0:73:e9:b6:5d:6c:d4:a3:ff:a6:63:
                    c3:39:e5:42:af:75:03:c1:c5:eb:02:4a:21:75:c1:
                    5c:4d:a7:58:17:81:bf:7d:e0:03:7e:f8:46:60:57:
                    1e:5c:8a:47:b7:65:3e:c3:0c:65:1f:a3:90:4f:0f:
                    e2:a9:9d:9f:d7:06:6b:a2:4c:23:b3:b4:b5:bb:8d:
                    21:d7:52:0a:58:70:7a:bc:1b:03:1b:1b:1a:8a:e0:
                    d8:14:0d:52:52:14:4d:21:17:4e:9c:08:f6:35:72:
                    35:0f:ab:67:ef:a0:90:17:9e:53:c4:1a:0f:45:e1:
                    bb:9d:36:e2:61:a3:08:09:8d:ee:8c:af:23:4a:70:
                    34:79:3d:ac:49:ae:5a:5f:1f:b9:57:76:3c:4c:80:
                    f6:f3:f2:24:d2:5f:c2:6c:7c:da:6c:0c:e4:c9:cf:
                    68:40:fd:87:22:84:ce:b4:7d:9f:c2:ca:93:ce:81:
                    86:0d:e3:9e:97:fb:4a:4d:8f:70:dd:e9:25:c5:cb:
                    7f:3b:af:c5:b5:84:15:8e:48:23:e2:86:1e:b9:c2:
                    51:3a:ed:3d:18:ab:4a:fa:a6:7b:55:54:ee:db:5a:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:0A:C3:9C:4B:55:DE:DD:65:62:94:C4:15:72:0C:AA:B9:AB:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e843462-0e1a-4bf4-8348-0fb60038a764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:cf:46:12:15:b6:60:56:c6:b4:a2:c8:3c:d0:b0:f8:ff:
         3c:ef:6a:f3:82:5b:0e:f5:4f:8c:53:1f:40:89:21:8b:ac:be:
         cb:f2:35:a3:eb:69:12:0b:71:2a:59:68:d3:3c:a3:d1:79:52:
         f9:62:a0:13:21:9c:30:42:dd:e4:e7:c0:c5:15:95:bb:2d:fb:
         b9:5c:b4:d3:07:fe:5b:2a:a2:23:27:de:d2:22:49:f5:4b:cd:
         63:c6:bd:52:19:59:c9:dd:d6:60:79:a0:1c:4c:f8:4b:76:89:
         75:48:a9:2f:68:61:43:cf:8c:a0:58:46:fb:b0:d2:3d:cc:35:
         b4:5c:79:df:b6:f2:ee:35:3b:52:b8:54:c7:32:22:66:c4:bf:
         2a:0f:58:85:ef:95:c9:a1:d1:2b:9f:24:a5:0e:a7:31:8a:e9:
         e9:46:c3:dd:13:ab:cb:2f:37:ce:60:d2:98:d9:c9:a5:51:52:
         92:44:eb:d6:01:f7:08:d8:cf:eb:20:b5:b2:c2:94:ec:19:44:
         40:c4:e5:99:b6:45:ac:2d:f0:93:bb:4d:06:1e:e0:f9:9e:97:
         4e:09:9a:56:f2:80:2c:45:0a:1d:ca:01:a6:8e:69:e1:79:cb:
         0f:41:6b:64:b5:7e:c8:8b:4f:a4:93:e4:4d:c6:29:b2:c2:c7:
         94:61:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:28 2025 by rpki-client