Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea292304-ae9f-4534-80fd-13bbb94cd836.roa
File:                     ea292304-ae9f-4534-80fd-13bbb94cd836.roa (raw, json)
Hash identifier:          5zacove5F0RHxhw3C6CHmWHuUCxDyWGVOhhXPDR8E6Q=
Subject key identifier:   EC:96:2E:8D:BA:04:22:B2:51:00:14:86:34:43:45:DD:E9:5E:74:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       082BBBA856C294A9C27324512B739D6A182E9DB6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea292304-ae9f-4534-80fd-13bbb94cd836.roa
Signing time:             Tue 29 Jul 2025 18:20:06 +0000
ROA not before:           Tue 29 Jul 2025 18:20:06 +0000
ROA not after:            Tue 02 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.94.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2b:bb:a8:56:c2:94:a9:c2:73:24:51:2b:73:9d:6a:18:2e:9d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 29 18:20:06 2025 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: serialNumber=e1d440e7ed28641fe44b8f9f7224ed0c70be7c08111f68100f319a4d366d1492, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:b3:33:34:51:63:ff:3f:17:ce:bb:93:96:
                    d9:0b:0f:e7:19:9e:fb:bf:4c:bc:db:bb:cd:65:13:
                    13:8b:21:7d:7f:85:1c:a1:f2:6d:b4:6d:58:95:87:
                    2d:40:2f:f9:39:a7:0d:98:64:9a:49:79:bc:3a:1e:
                    cf:3a:6b:bf:a5:b1:13:16:fc:4e:59:fc:52:3a:b7:
                    97:f7:60:19:8c:8e:7b:ea:9d:ab:7b:3e:10:7f:c1:
                    f5:5d:46:43:90:8f:0b:3d:e0:08:f0:32:0d:a4:24:
                    8a:ca:e7:9b:bc:30:31:aa:72:cc:a4:00:67:06:3f:
                    40:5e:fe:5c:d2:6c:4c:c7:35:c4:2c:6e:6c:13:e5:
                    dd:ef:db:1a:ad:6b:97:a1:45:cc:a6:7d:e8:89:ce:
                    3a:19:8b:26:ef:39:49:83:fc:68:25:3f:8f:f9:0a:
                    59:46:15:b1:ca:f0:0f:e0:4c:6f:99:75:ac:72:2e:
                    f7:69:1c:e7:be:09:59:74:4d:12:98:d1:6e:49:7a:
                    15:ce:32:99:95:d3:b6:d3:cd:0c:ec:4b:60:6d:98:
                    21:d3:91:70:b4:f8:17:36:a5:d7:d8:c2:13:70:c0:
                    86:ea:8a:1a:55:c4:d0:dd:dc:92:40:50:59:33:ff:
                    45:7c:0c:3f:4c:6f:6a:09:36:0f:44:c4:7f:23:4d:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:2E:8D:BA:04:22:B2:51:00:14:86:34:43:45:DD:E9:5E:74:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea292304-ae9f-4534-80fd-13bbb94cd836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.94.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:c6:7e:6e:85:26:20:c2:4b:25:31:28:58:4c:dd:13:c2:
         be:7e:ed:52:f4:36:24:72:19:7d:bf:25:3b:31:b1:c9:21:9b:
         ad:ec:7e:79:88:42:e3:b7:2f:fb:ef:a4:64:a9:cd:cc:6a:a8:
         92:3a:5f:fa:bc:a2:95:50:27:54:dd:30:2a:f5:24:16:6d:1b:
         98:91:b1:59:03:af:c9:31:79:94:51:b3:cf:d3:0b:96:2b:a8:
         20:15:a1:d8:60:db:e6:90:20:6a:28:6c:bd:d7:11:51:58:09:
         9e:b5:79:84:dd:72:06:af:e7:e9:1c:6f:3b:95:21:43:0a:75:
         c1:ca:53:4a:a0:fc:f0:ce:9e:4f:21:8b:e7:ee:09:87:93:db:
         4f:b5:9d:c7:f3:24:39:78:a6:26:c4:6a:df:08:09:8e:07:45:
         66:cb:59:cf:7b:31:e0:c7:b0:91:7d:5d:69:d3:dc:04:a1:8b:
         87:48:21:f3:9d:fe:37:d8:1a:9b:e7:4a:8b:88:1a:87:8e:59:
         34:f5:14:cf:12:ce:85:21:9c:16:13:84:75:9a:5a:14:96:77:
         a2:93:f4:9f:c5:65:ce:ab:61:e1:20:8c:ee:56:47:2a:66:bc:
         a4:f4:20:19:ef:72:88:aa:82:22:ea:79:6f:fd:ff:c1:1d:3f:
         61:98:84:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCCu7qFbClKnCcyRRK3OdahgunbYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTgyMDA2WhcNMjUwOTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWQ0NDBlN2VkMjg2NDFmZTQ0YjhmOWY3MjI0ZWQwYzcw
YmU3YzA4MTExZjY4MTAwZjMxOWE0ZDM2NmQxNDkyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYMbMzNFFj/z8XzruTltkLD+cZnvu/TLzbu81lExOLIX1/
hRyh8m20bViVhy1AL/k5pw2YZJpJebw6Hs86a7+lsRMW/E5Z/FI6t5f3YBmMjnvq
nat7PhB/wfVdRkOQjws94AjwMg2kJIrK55u8MDGqcsykAGcGP0Be/lzSbEzHNcQs
bmwT5d3v2xqta5ehRcymfeiJzjoZiybvOUmD/GglP4/5CllGFbHK8A/gTG+Zdaxy
LvdpHOe+CVl0TRKY0W5JehXOMpmV07bTzQzsS2BtmCHTkXC0+Bc2pdfYwhNwwIbq
ihpVxNDd3JJAUFkz/0V8DD9Mb2oJNg9ExH8jTYMfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7JYujboEIrJRABSGNENF3eledFUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2VhMjkyMzA0LWFlOWYtNDUzNC04MGZkLTEzYmJiOTRjZDgzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2XkEwDQYJKoZIhvcNAQELBQADggEBAAdNxn5uhSYgwkslMShYTN0Twr5+
7VL0NiRyGX2/JTsxsckhm63sfnmIQuO3L/vvpGSpzcxqqJI6X/q8opVQJ1TdMCr1
JBZtG5iRsVkDr8kxeZRRs8/TC5YrqCAVodhg2+aQIGoobL3XEVFYCZ61eYTdcgav
5+kcbzuVIUMKdcHKU0qg/PDOnk8hi+fuCYeT20+1ncfzJDl4pibEat8ICY4HRWbL
Wc97MeDHsJF9XWnT3AShi4dIIfOd/jfYGpvnSouIGoeOWTT1FM8SzoUhnBYThHWa
WhSWd6KT9J/FZc6rYeEgjO5WRypmvKT0IBnvcoiqgiLqeW/9/8EdP2GYhHk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:28 2025 by rpki-client