Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa
File:                     bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa (raw, json)
Hash identifier:          LKInXqy2iRuacmttOzbNNubM5MpPnZ6DGXlMTcIW2jE=
Subject key identifier:   B3:63:5F:12:B6:CB:EE:06:03:9D:C6:1D:BB:D2:CB:86:D9:DE:EB:FA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1FCC3679B7BDED24F3C5B197052AC3E0F4CA1CA6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa
Signing time:             Tue 04 Nov 2025 02:30:44 +0000
ROA not before:           Tue 04 Nov 2025 02:30:44 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.184.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cc:36:79:b7:bd:ed:24:f3:c5:b1:97:05:2a:c3:e0:f4:ca:1c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 02:30:44 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=611748c71f7bde07461f5de7a1d94dd1b383f223915d85166525a5470fa0ecce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:f8:36:c4:f8:28:3f:88:17:31:11:15:6b:
                    f1:cb:56:82:f1:e4:d6:29:2c:9c:a2:77:84:98:44:
                    09:db:c4:39:75:90:9a:df:82:90:70:7b:09:90:dd:
                    e6:12:8f:c9:89:77:f7:40:62:e6:1f:b8:54:26:52:
                    b7:b4:38:48:7f:fe:f8:f1:04:a0:a6:77:1b:e9:52:
                    c4:7d:38:68:4b:8d:67:f6:db:28:4e:21:de:d9:90:
                    ad:96:e3:60:d5:db:78:62:75:68:ce:37:d9:57:b8:
                    d8:81:54:1a:fe:83:9b:61:ae:0d:bf:2d:8e:0e:1b:
                    75:1c:7e:30:e2:ef:7a:19:1b:39:e7:f9:fd:67:d7:
                    f4:4f:06:28:26:04:38:6a:68:0f:2f:53:14:91:76:
                    d6:b3:44:16:c0:0b:26:92:a6:94:f9:69:34:16:b0:
                    84:a8:e2:e2:d9:e6:4d:ec:d6:72:c2:4d:9b:cb:ad:
                    df:f6:8b:10:b4:7e:4d:12:54:df:59:af:15:1b:75:
                    b7:27:85:75:bb:5e:d1:5e:ef:99:74:7c:da:2c:96:
                    5f:1c:07:a7:ea:44:ec:28:ac:2c:de:9a:3d:fa:45:
                    ea:bc:01:e2:08:3b:58:aa:e5:b3:9c:f9:76:cc:00:
                    00:12:e8:e1:65:d4:1a:cf:3d:dd:67:f7:8d:9a:d9:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:5F:12:B6:CB:EE:06:03:9D:C6:1D:BB:D2:CB:86:D9:DE:EB:FA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.184.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:25:f4:a0:7e:9b:56:4c:50:25:82:dd:57:17:cb:d0:e5:18:
         28:48:e9:5a:c1:78:98:16:f2:32:9a:2c:9d:4e:7a:61:d4:21:
         c5:27:66:b8:6d:62:a8:a1:7f:d7:29:ba:c7:6d:37:03:d2:45:
         de:45:dc:3d:a2:10:c0:fb:ed:cb:6d:5a:0f:75:7c:52:d1:4d:
         cd:0e:42:76:e9:04:14:b4:1c:e6:87:8b:a3:3f:24:25:09:6d:
         2d:23:5a:38:be:69:76:f9:77:c7:58:90:cd:c3:3b:56:97:bd:
         b1:7a:17:66:82:e6:0f:14:e3:38:50:98:44:79:8f:be:7b:08:
         d3:cc:e1:64:a5:97:a1:28:97:27:b3:49:6f:aa:55:da:db:a5:
         59:11:63:2b:6e:9b:75:11:d0:55:1d:69:90:f8:7c:2b:c3:60:
         3c:65:dd:77:5c:52:99:ca:dc:bf:2f:db:1f:9e:0a:18:32:50:
         a9:05:8c:5b:d8:45:5c:d0:0d:73:e9:8f:49:40:17:c0:41:c3:
         28:ee:e8:40:b8:21:df:f2:0e:ed:da:48:3e:20:d5:08:c1:75:
         ee:70:96:65:50:65:1b:cc:30:be:be:01:6e:62:6f:51:d1:6d:
         04:90:e3:3a:c0:6f:bd:31:d9:e6:aa:e2:59:e2:f2:03:75:f2:
         76:ac:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:10 2025 by rpki-client