Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acb2d1d9-8eb0-4cde-9774-7fc9a5495886.roa
File:                     acb2d1d9-8eb0-4cde-9774-7fc9a5495886.roa (raw, json)
Hash identifier:          PZSCRAEVo287HzGsKkL5sRYNANmx5NytkRcMpulli3A=
Subject key identifier:   6D:03:78:E4:52:82:EC:FA:C4:84:52:BF:F2:A7:FF:28:4E:70:8F:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       226DCAB22B2C489155E9C33C9983233FE2ABFDA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acb2d1d9-8eb0-4cde-9774-7fc9a5495886.roa
Signing time:             Tue 04 Nov 2025 02:20:10 +0000
ROA not before:           Tue 04 Nov 2025 02:20:10 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.166.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:ca:b2:2b:2c:48:91:55:e9:c3:3c:99:83:23:3f:e2:ab:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 02:20:10 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=8d42975adb9f9e9e40bed56ee5a6e44ae3235b0889d3c0f8e9f08d69984133ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:82:05:a4:33:16:ad:72:62:5c:27:d4:c2:
                    38:be:88:ea:db:87:5b:fa:59:61:2d:99:aa:46:c2:
                    51:fb:e8:53:2a:ae:5d:09:5c:0d:8d:a4:41:a7:e6:
                    41:8b:38:ea:f0:b3:7c:6f:a1:7c:79:a5:8f:af:6d:
                    65:5c:95:06:60:46:01:fb:e3:96:10:91:95:93:a5:
                    c8:79:5b:af:b2:26:2c:94:27:e4:0a:ad:51:14:74:
                    59:ae:89:0b:60:45:d9:01:ea:04:6c:2a:62:86:61:
                    42:76:a6:02:10:a2:86:dd:30:be:56:35:86:8b:f5:
                    bb:b6:39:0a:8d:6e:9e:96:c3:bc:d9:11:5a:38:75:
                    3e:67:60:39:3d:f1:90:b6:bd:3b:a8:25:bd:5e:86:
                    64:0c:7a:d7:b5:08:09:44:cc:d1:e3:f3:d3:ba:2b:
                    47:60:3c:aa:0c:d0:af:f9:ff:61:78:94:4a:98:dc:
                    6f:cb:d1:70:b3:c4:bb:55:6d:01:9c:96:ec:4f:9f:
                    59:0a:21:f1:9f:ba:0e:b5:13:82:fc:4b:9c:e5:af:
                    6d:64:83:70:04:03:66:f6:10:9c:39:c7:1e:47:a1:
                    a1:a9:9f:e4:f4:f7:0f:81:ea:19:30:e5:cc:a6:c1:
                    76:2f:18:98:af:de:88:b7:2c:e3:4d:a8:ae:51:40:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:78:E4:52:82:EC:FA:C4:84:52:BF:F2:A7:FF:28:4E:70:8F:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acb2d1d9-8eb0-4cde-9774-7fc9a5495886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.166.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:a6:11:d9:64:81:f5:6a:e2:b5:9e:1f:f6:26:25:8a:fd:
         09:3a:b5:94:3b:d9:2c:26:97:e7:63:7e:a7:b2:39:b5:69:3f:
         f6:38:87:32:ee:58:12:1f:65:3f:72:d2:78:c5:6d:40:7d:03:
         f0:17:8d:75:38:a5:be:7c:1f:5b:e2:da:e9:d4:ec:f0:10:0b:
         de:5e:bf:69:0c:b8:8a:86:c3:2f:c4:1a:1a:3a:24:13:54:0e:
         52:0b:dc:c8:f3:6e:99:97:5a:f7:83:d8:2e:8a:76:e7:26:d0:
         c2:20:0a:6c:0f:7c:f3:8d:d3:18:5c:5c:65:ac:4d:07:d4:57:
         0b:b0:39:37:82:e7:13:ca:ed:c8:83:b1:35:4b:a2:5b:3f:7f:
         fe:7b:04:cf:cf:d7:9c:de:1b:89:6b:6c:5b:d3:2a:60:d4:a0:
         80:9a:5a:a1:2c:88:3c:0a:4d:ec:7b:0e:c4:84:5c:39:3b:69:
         7a:2c:a4:86:70:06:37:44:49:5c:65:ac:c2:88:d1:bd:ad:9d:
         0a:ea:e0:f9:51:a4:e3:8c:aa:06:74:35:c5:49:de:11:ab:94:
         fb:fe:3b:0a:4c:57:cf:09:1f:d0:67:a9:aa:ba:d8:a0:89:d5:
         c5:9a:e1:9e:6e:5b:17:02:70:32:f5:29:d0:e9:1c:72:c0:3f:
         05:f3:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:49:33 2025 by rpki-client