Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ac84983-0387-4504-8307-9365f7b51125.roa
File:                     7ac84983-0387-4504-8307-9365f7b51125.roa (raw, json)
Hash identifier:          AAmO7JH/nIGguEHmla+4QyxSJ2XYGTtmoS5EqqDxUDI=
Subject key identifier:   0C:2D:C9:BD:96:EA:D7:D0:AB:97:E9:F5:A3:A3:54:9A:09:CC:71:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2AF29BC0CB1022F86707F1642715DD0CD57FDE47
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ac84983-0387-4504-8307-9365f7b51125.roa
Signing time:             Thu 30 Oct 2025 00:08:30 +0000
ROA not before:           Thu 30 Oct 2025 00:08:30 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f2:9b:c0:cb:10:22:f8:67:07:f1:64:27:15:dd:0c:d5:7f:de:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 30 00:08:30 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=30c71b07ebfc6289e0bfd18190b27334099ac28b67ef2ed41abcd41b499b9f8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:be:21:3a:e5:e4:e1:11:66:2a:bf:af:2b:
                    2f:79:7e:ea:8b:60:01:12:b0:62:df:c3:fd:71:c3:
                    11:f6:67:b2:01:77:33:84:9e:ad:db:5e:12:ca:b8:
                    25:c4:e9:9f:64:4d:30:c9:43:f6:6f:38:4c:d6:29:
                    31:52:e6:08:48:e6:80:b5:56:6f:9e:85:42:2a:96:
                    30:ea:3a:34:45:9d:7f:bb:1b:28:8d:29:8b:15:7c:
                    11:aa:5c:ce:aa:e8:ee:bb:5c:d0:51:98:32:38:0f:
                    09:d0:6f:f0:3c:2d:93:78:f6:28:2a:6d:f9:45:86:
                    fa:be:bc:41:8e:89:77:bf:57:26:45:6e:b9:58:4b:
                    c4:4f:77:e7:86:c2:94:e4:92:60:8e:9b:df:7c:5b:
                    3d:4e:95:31:e9:0d:32:b6:cb:6d:d8:7d:0f:25:31:
                    4f:0f:f9:6b:d4:c1:d9:3b:03:eb:ce:7e:60:57:d8:
                    b9:da:66:04:57:11:30:d2:2a:b6:d5:a0:6c:f8:fc:
                    8c:e6:6e:67:cd:77:71:66:42:0c:cd:2d:6e:e1:bf:
                    06:2c:f1:23:92:e0:af:0e:67:7b:a8:9b:65:30:12:
                    ec:64:24:51:6e:a3:dc:22:86:16:84:b8:aa:f4:cc:
                    35:44:01:16:2e:f3:98:64:62:c6:9c:ec:a9:47:f5:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:C9:BD:96:EA:D7:D0:AB:97:E9:F5:A3:A3:54:9A:09:CC:71:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ac84983-0387-4504-8307-9365f7b51125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:02:14:66:fa:e4:4b:90:58:a2:28:24:e6:ea:a5:4b:87:
         93:04:61:b9:2c:96:e7:43:f4:70:6d:bc:d9:bb:af:bf:e7:f8:
         f5:20:0b:8e:10:c0:49:75:99:92:ac:23:95:4c:e8:61:7d:5f:
         34:47:1a:44:bd:96:31:1c:5d:5a:fb:67:1b:a2:7c:10:a9:f9:
         06:5a:f2:bd:1a:9c:90:59:c3:80:f9:c5:44:3e:9a:40:66:1e:
         51:ac:da:99:86:85:ce:6d:8d:eb:eb:31:f3:7d:3f:2f:21:00:
         22:5a:2e:3d:aa:10:fb:4c:f2:9c:42:bb:21:dd:97:b8:b3:28:
         75:a9:92:14:5b:19:82:88:c4:93:b0:e0:18:f0:9f:9b:45:ef:
         54:ec:cc:a5:d9:9a:36:e2:ae:6c:a2:b9:29:eb:26:83:35:89:
         89:fe:89:69:13:bf:0b:5b:fd:9c:f8:e4:4c:43:89:53:3a:83:
         0d:b6:36:63:71:48:30:87:82:b6:a8:ab:24:52:22:d7:d1:67:
         b4:a0:b8:86:33:f4:ff:b2:50:00:6d:9d:c8:71:5d:21:ab:c0:
         26:1b:3f:0a:19:41:db:49:b3:81:7f:94:68:17:38:d7:bf:74:
         2e:e9:36:be:61:14:86:40:3d:66:f1:ff:a4:08:dc:22:07:6d:
         65:c5:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:08 2025 by rpki-client