Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0103b429-de49-480b-b2b5-120983622ad4.roa
File:                     0103b429-de49-480b-b2b5-120983622ad4.roa (raw, json)
Hash identifier:          mM5t5S2VNNr1k5MoIYTmetZCbXJSfcCKQk4uJMynbL4=
Subject key identifier:   E0:C1:DE:59:F4:0B:81:59:A9:FA:00:08:BB:4D:72:48:E0:D8:BB:7E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D1D0D08518C95DE63A423376147C9682A4C3DEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0103b429-de49-480b-b2b5-120983622ad4.roa
Signing time:             Wed 24 Sep 2025 17:54:05 +0000
ROA not before:           Wed 24 Sep 2025 17:54:05 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.35.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1d:0d:08:51:8c:95:de:63:a4:23:37:61:47:c9:68:2a:4c:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 17:54:05 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=67c4bbcdde46d196a01e08b55b0b73059138706f75c784d49205868779cf7d4a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:29:3f:1a:c5:a7:53:c5:05:ef:e6:64:1b:
                    23:41:fd:4f:fb:fb:03:4c:f8:87:2f:e3:30:7a:f7:
                    bf:02:a5:d8:9f:37:be:a5:55:f9:f5:c4:c4:ef:4e:
                    2b:ce:5d:1f:8f:57:0b:0e:cb:d5:bc:5e:18:4d:72:
                    55:bd:f6:3b:fa:df:3a:a9:7a:38:25:61:05:37:52:
                    37:72:06:d3:68:64:38:1c:b2:b0:95:15:17:40:2d:
                    31:18:c1:19:46:7a:27:a5:a9:c5:91:7f:fa:79:d7:
                    bf:02:0b:05:87:72:ba:91:23:bf:77:9a:79:5a:f0:
                    33:62:97:e2:2a:32:71:02:c9:58:dc:fa:d7:c6:d7:
                    df:73:f7:d1:eb:c7:21:07:d2:a0:5e:98:e1:26:76:
                    16:8e:d2:84:eb:82:79:db:4b:c2:47:b3:91:cf:a7:
                    c0:0f:55:17:95:61:53:a1:c6:9d:6d:f8:51:47:92:
                    ea:09:8c:01:76:91:41:7e:92:04:05:4d:14:58:ba:
                    8b:fa:89:b3:79:84:d8:b8:6d:35:40:5a:2a:03:70:
                    46:aa:27:37:71:4e:a1:44:ff:41:99:87:3c:98:28:
                    c8:d5:fb:3a:fa:96:fe:04:0f:89:d4:19:9f:e5:32:
                    16:88:c9:60:ca:fd:ee:23:cf:be:0b:5a:c0:fa:b8:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:DE:59:F4:0B:81:59:A9:FA:00:08:BB:4D:72:48:E0:D8:BB:7E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0103b429-de49-480b-b2b5-120983622ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.35.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:24:83:a8:2a:f6:08:72:1e:51:d5:4a:6d:85:bd:a5:88:da:
         38:c7:93:8c:4a:cf:04:b0:70:a3:02:06:1f:db:4f:7a:d5:7f:
         74:ac:5e:1b:4d:69:bf:4f:2a:08:23:ae:98:b6:aa:2d:e1:6d:
         5c:21:68:b5:c0:5a:28:a1:83:40:26:5a:37:27:af:dc:e8:b4:
         e6:62:33:00:1c:01:f9:08:4c:46:71:31:6a:24:9c:4b:bc:13:
         d6:f1:d8:63:10:3b:11:e9:ca:8d:85:8a:ca:83:56:e0:ed:b2:
         0e:fa:2e:5f:61:70:ad:21:2b:fd:7d:79:db:0c:e4:e7:c9:c9:
         7d:79:0b:0d:de:ef:3d:e0:92:3e:49:d1:4e:eb:3b:c1:12:94:
         07:21:ea:a2:00:da:ec:e5:61:63:5c:d5:d2:cc:aa:1b:cf:8c:
         c5:38:eb:5c:94:b4:07:25:f2:26:85:f8:54:60:e9:cc:5e:91:
         16:b8:87:c2:b7:34:52:44:76:0e:c5:17:00:31:d0:ea:8c:f7:
         c5:14:3d:c4:9a:5e:71:ec:6e:d4:25:7a:7f:e3:f9:9d:ab:2e:
         11:48:bc:05:80:f9:47:63:df:07:7f:22:37:30:02:ee:08:3e:
         c0:10:b5:97:4d:1d:08:f4:c1:b7:94:db:d1:4b:39:27:63:63:
         2c:2a:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:38:03 2025 by rpki-client