Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00f306b-7500-4556-8d94-cdba9f298e94.roa
File:                     f00f306b-7500-4556-8d94-cdba9f298e94.roa (raw, json)
Hash identifier:          8McwRRbaLW02c+EF81OzNJ2/wq2BwDu/uh3qxCOi+7k=
Subject key identifier:   18:95:6F:A0:D9:58:E3:63:17:9D:A6:29:A1:A9:02:A1:3E:88:65:2E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4EFB0C8FD09DAAB9150A8D69B00B98C0C8D08DCE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00f306b-7500-4556-8d94-cdba9f298e94.roa
Signing time:             Fri 19 Sep 2025 00:08:54 +0000
ROA not before:           Fri 19 Sep 2025 00:08:54 +0000
ROA not after:            Fri 24 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fb:0c:8f:d0:9d:aa:b9:15:0a:8d:69:b0:0b:98:c0:c8:d0:8d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 19 00:08:54 2025 GMT
            Not After : Oct 24 23:59:59 2025 GMT
        Subject: serialNumber=ba14add8f367b3ae57d6abe005a97bc2c2d517695a6c687f2fd4849e77105a1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:a8:fd:9e:8e:85:bf:21:9f:e1:c5:37:08:
                    2f:f8:83:ea:67:bf:66:a5:7f:65:98:be:a2:b5:d5:
                    be:e6:06:d5:0a:8b:67:13:d9:61:8e:07:b9:c5:77:
                    b7:1e:7d:64:9a:15:b0:85:7f:6b:81:40:c1:36:7b:
                    bb:f3:83:11:a1:a5:9c:21:08:76:e8:3f:1e:a5:1a:
                    9c:89:c1:02:68:91:da:a3:ac:ba:9a:13:29:16:21:
                    04:2a:bb:12:a3:1f:01:d6:47:14:9d:d3:ed:97:86:
                    22:33:52:fe:3d:71:91:61:21:78:31:9d:57:18:80:
                    78:aa:6f:1e:6a:54:de:41:6f:15:db:cf:86:06:8f:
                    49:f6:21:bd:27:af:94:1f:4b:eb:ca:b9:e9:22:a3:
                    bc:65:a8:4d:61:4d:a0:80:9b:fb:17:0a:a8:a5:a2:
                    1f:16:22:ba:e3:91:ca:85:12:83:77:33:f7:a8:39:
                    8d:03:21:d8:a2:aa:d6:b3:7f:aa:4f:eb:d1:9a:24:
                    93:bf:6a:60:b2:4b:b8:a4:57:47:3d:7b:c3:8b:32:
                    04:da:01:76:92:b4:f2:41:e6:4d:5e:82:75:cb:e7:
                    80:f6:7b:f3:af:05:76:7a:e1:6c:5a:36:df:38:47:
                    7f:6d:2c:e1:d1:6a:2d:d0:b7:34:92:a8:b6:ca:c4:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:6F:A0:D9:58:E3:63:17:9D:A6:29:A1:A9:02:A1:3E:88:65:2E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00f306b-7500-4556-8d94-cdba9f298e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:53:38:de:1d:07:1a:da:ef:1a:79:69:23:34:51:be:5f:
         86:69:4c:d4:48:07:b7:4f:a8:a4:5a:30:10:6a:cc:b8:df:ad:
         dd:2f:68:ae:9a:6e:d2:24:1e:f6:09:01:46:22:64:3a:9f:9b:
         2a:88:e1:da:15:06:de:60:da:90:14:99:42:ea:6e:52:22:13:
         3c:42:99:20:ee:54:62:e3:c8:32:c7:e3:24:97:c7:96:5e:72:
         31:25:60:8a:ac:d7:df:9e:fe:36:f8:46:fd:41:72:8f:e5:c9:
         90:4e:22:d6:c9:b1:4c:75:86:28:1a:46:ab:a2:47:bf:e4:8b:
         fd:7e:8a:a6:87:8a:de:85:85:d7:8e:4a:4d:bc:a0:9e:fb:1c:
         f5:aa:83:0c:d5:b7:54:ff:f4:10:eb:cf:9d:a6:cc:14:24:4f:
         5f:cc:7c:93:05:7c:74:3c:15:58:23:ba:33:c6:84:5d:73:b9:
         8d:90:a0:bf:0f:28:83:00:76:23:fd:39:fd:0e:bb:e2:4c:97:
         ae:bf:91:33:db:d3:78:b2:58:a3:4a:33:53:8d:47:2d:e2:3b:
         8d:8d:55:a7:5d:3d:db:6e:14:bf:8e:3e:de:41:f0:a2:c2:85:
         99:51:22:a4:2a:f3:a3:44:5e:0b:eb:68:a9:87:a9:3b:6e:d3:
         82:66:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:16:23 2025 by rpki-client