Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3498c2b-4aca-474b-9cb1-e4f6d6a9eaed.roa
File:                     e3498c2b-4aca-474b-9cb1-e4f6d6a9eaed.roa (raw, json)
Hash identifier:          ufogKO3nsTS4CwbDKZcE5g9tLxXd2lWCt6BDrcTepLo=
Subject key identifier:   F9:78:70:53:6E:FC:35:65:94:5B:AB:C4:2D:84:DB:40:1A:C7:55:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       378A2F3E689FDB55123C0647B3DC3F8910F561D1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3498c2b-4aca-474b-9cb1-e4f6d6a9eaed.roa
Signing time:             Tue 04 Nov 2025 00:50:56 +0000
ROA not before:           Tue 04 Nov 2025 00:50:56 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.193.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8a:2f:3e:68:9f:db:55:12:3c:06:47:b3:dc:3f:89:10:f5:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 00:50:56 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=48e78291f1a789cbc79499e12bccef8bc7c3585a0fa5893f32b5f727d58bdb8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:31:89:e2:68:36:22:14:a0:d7:47:da:17:
                    86:50:79:48:3c:30:de:8f:28:da:01:9d:a5:bd:ae:
                    eb:c2:20:40:65:17:3c:d4:b3:d3:7e:15:0a:60:2c:
                    58:76:57:d3:b1:79:84:53:9e:26:b3:d8:fa:d0:ec:
                    79:7e:a4:df:cd:14:80:fd:d6:ad:29:58:f7:90:2e:
                    8e:d4:45:79:ec:4a:11:ac:dc:4f:9f:6c:2e:ee:35:
                    e3:3b:ee:f3:61:d0:2c:a8:dc:ae:40:d4:14:94:f8:
                    f0:8f:e4:15:6b:61:bb:54:a0:8f:11:77:2d:3d:f6:
                    37:6d:d2:a0:89:05:b2:b1:e4:2f:61:f1:3a:ab:e2:
                    81:41:26:7e:5e:8e:f7:b0:87:62:92:da:1a:35:1d:
                    8e:62:a5:4d:77:a6:27:77:1b:7a:81:9e:cc:67:87:
                    d8:da:27:05:8d:da:a5:b9:7e:6a:fc:75:bc:23:ad:
                    4e:51:a5:ff:f8:15:4f:ee:e3:e4:3d:0c:6f:89:06:
                    10:60:05:2a:3f:a2:00:ef:d4:c6:56:7a:2e:de:32:
                    34:72:35:fe:ae:d1:9e:ad:39:7b:85:69:c6:70:22:
                    38:51:33:dc:21:20:9b:dd:89:40:d3:f7:cc:ae:68:
                    c5:c5:3c:a3:c2:cf:12:f7:81:09:ce:74:39:c2:c6:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:78:70:53:6E:FC:35:65:94:5B:AB:C4:2D:84:DB:40:1A:C7:55:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e3498c2b-4aca-474b-9cb1-e4f6d6a9eaed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:cb:a2:5d:1c:ae:94:76:ae:8a:ba:08:5a:ea:1b:24:89:
         f7:70:db:bc:b6:4a:ee:e3:70:cc:47:9c:82:ca:56:ab:51:fb:
         4a:8e:8d:69:48:58:ee:03:2e:8e:65:2c:c9:16:66:a3:bb:86:
         2c:df:76:b9:93:73:31:5e:06:ab:b6:64:1a:e3:e4:47:62:34:
         bc:1d:f4:0e:f1:4a:42:e0:ec:e3:54:00:ba:53:c3:80:28:aa:
         ae:3d:ce:60:5c:57:a8:cc:c8:f0:74:b6:d6:a7:eb:ca:c0:07:
         00:8d:30:c1:65:e0:f2:7d:cf:59:13:e4:50:08:08:3b:1d:1d:
         6d:42:58:0d:23:3d:6f:44:af:23:98:de:50:7a:8a:26:8c:bd:
         64:5b:e4:92:17:b3:88:01:8d:6c:42:34:5c:04:e9:ad:9e:60:
         d5:e3:53:af:f3:30:b1:81:01:d0:f9:55:74:cd:09:76:4a:cf:
         79:b4:b8:a7:35:4c:6d:ae:df:6b:7e:63:e5:f8:ae:47:8c:f4:
         bf:06:a8:35:a9:84:7a:c4:d0:af:ea:43:42:ec:d1:27:65:6f:
         a1:52:7d:15:00:19:9e:73:17:47:32:b5:5f:4a:d9:6e:99:66:
         75:38:10:5b:42:14:f0:d9:e7:ff:74:72:22:01:83:55:f3:81:
         4e:17:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:50:10 2025 by rpki-client