Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa
File:                     f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa (raw, json)
Hash identifier:          Rw0RgmoHdOJGq1ZA7N55g0T5HWyuIqI48amSHcT4IA8=
Subject key identifier:   7E:D8:DF:33:32:39:A6:3A:52:B1:4B:67:A3:FF:7F:B1:56:D2:40:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0328A4F60A7213F922A0123DDE470D570C7A137F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa
Signing time:             Fri 31 Oct 2025 20:36:52 +0000
ROA not before:           Fri 31 Oct 2025 20:36:52 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.197.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:28:a4:f6:0a:72:13:f9:22:a0:12:3d:de:47:0d:57:0c:7a:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 31 20:36:52 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=cbcb452e11a08d50894b70ca2063e173f1114fdbdeadb413ce1e119d165f6c13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8d:12:32:59:0c:49:5e:ff:c2:ab:f0:a7:f0:
                    a0:95:7f:93:d9:f7:af:a2:c1:de:06:6a:26:c6:60:
                    5d:49:30:75:ad:02:10:8d:1a:03:fb:aa:7c:41:b9:
                    d8:e8:58:47:8b:61:07:74:29:b1:61:8d:18:fc:07:
                    26:52:5f:ba:b7:3f:ac:68:0d:29:cf:26:23:bf:e1:
                    3c:66:15:c2:ae:4d:73:fb:2a:fb:65:56:0d:7a:86:
                    36:ca:54:bf:a8:cb:7b:40:18:7f:98:9a:41:95:f3:
                    8c:e1:a5:60:f7:37:0c:eb:71:a6:e2:0b:88:5b:01:
                    4c:ea:02:1c:57:dc:d3:30:ce:5c:c2:67:20:b6:e9:
                    19:9f:60:42:81:2f:16:82:3a:da:c4:3e:44:a7:33:
                    6a:e8:48:b6:38:f0:38:98:1e:bc:99:e1:d1:d7:60:
                    05:bd:c6:8b:e4:ba:28:e1:8e:68:3e:13:12:5d:80:
                    d2:3b:c6:8e:db:25:93:f3:f0:02:6c:1f:e4:45:7c:
                    49:fc:8e:00:1c:07:90:e5:aa:70:ed:0b:41:94:7d:
                    35:c1:8d:eb:c1:bb:cd:d2:78:85:b3:b1:b3:42:26:
                    7d:e4:68:da:b1:85:f6:22:3b:9a:ac:62:b7:b7:38:
                    48:21:78:f2:aa:fc:c3:f2:48:f4:e7:47:d2:a9:fd:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:DF:33:32:39:A6:3A:52:B1:4B:67:A3:FF:7F:B1:56:D2:40:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:03:83:7d:20:ca:38:08:66:45:27:60:57:c1:4f:bb:b3:
         88:59:10:2b:b9:85:00:9d:ef:6e:9e:9e:97:27:a3:19:1e:2a:
         45:c6:0c:af:ce:84:d1:b3:8d:cd:44:61:22:1b:4d:78:9a:8b:
         d1:e4:ce:fd:aa:ee:ce:eb:f1:48:ff:63:78:b7:0f:08:ec:a6:
         bb:de:51:39:29:99:ac:c7:0c:50:1a:5d:96:92:72:19:16:ef:
         ef:23:bc:0b:ed:d4:b5:a2:23:48:92:af:c6:fb:58:10:0a:5e:
         f4:31:aa:0e:63:15:83:82:0e:38:22:ce:2a:b5:48:ec:3a:72:
         55:49:8d:2b:78:2f:a6:52:54:d3:ac:56:99:cb:52:a8:47:4f:
         72:5a:e4:5e:0b:95:5d:82:80:a8:3e:0b:c7:0e:b7:2c:29:c0:
         cc:bd:55:9d:d2:35:d4:da:58:62:ea:ec:27:57:55:a3:f6:40:
         6d:7e:85:93:56:35:08:4d:67:59:7a:f7:c6:d3:df:b6:23:c8:
         10:44:47:31:6a:de:39:f6:f5:ee:e8:5d:5c:12:d8:e9:49:8f:
         4a:6d:4a:75:37:23:3e:c2:01:b1:e2:23:0b:5f:7a:38:3d:2b:
         88:e5:34:9a:c0:34:2e:ec:12:73:b2:c5:52:a5:ea:8b:9d:0d:
         fe:86:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:05:46 2025 by rpki-client