Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03cc5d6c-c188-4393-91fc-8bc8f5514b2c.roa
File:                     03cc5d6c-c188-4393-91fc-8bc8f5514b2c.roa (raw, json)
Hash identifier:          QSSyWvb4nxliaswxABQVmlpDWxIaCzHJ2WlaQoqsuJU=
Subject key identifier:   DB:10:56:69:E0:3E:FB:CB:4A:2E:E7:83:8E:A1:C6:C4:44:88:D6:4D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4D19C2AF1B5403B9C66CD7FAEB90FB81C1059437
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03cc5d6c-c188-4393-91fc-8bc8f5514b2c.roa
Signing time:             Mon 22 Sep 2025 20:12:52 +0000
ROA not before:           Mon 22 Sep 2025 20:12:52 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:19:c2:af:1b:54:03:b9:c6:6c:d7:fa:eb:90:fb:81:c1:05:94:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 20:12:52 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=32decc1f2be441d22f5de883a6e9f9b0474669a9be361cd4c88897f41cfa0326, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:24:fa:7f:46:99:b8:b8:8e:c9:00:61:fa:
                    95:26:4e:57:af:2a:e8:3c:04:79:22:86:78:b4:db:
                    e2:5a:62:6f:81:e1:ab:39:6e:a2:54:79:d9:ca:37:
                    b7:93:00:c3:95:00:38:b5:80:8c:8b:09:96:02:d2:
                    b4:71:ea:37:6a:6d:2f:a1:6f:f0:35:fa:e9:9c:2d:
                    ba:be:af:48:a5:60:31:33:0e:4d:a6:5b:e7:3c:96:
                    ef:45:58:5f:73:57:d6:d4:c3:f0:10:1a:a3:ab:13:
                    04:a2:e6:e6:d1:e9:2b:37:dd:77:10:92:d9:9a:50:
                    f8:0e:e1:be:cf:ba:47:cd:b8:e4:73:db:33:29:14:
                    ae:60:f4:5a:0b:19:51:30:67:31:b1:cc:f6:19:46:
                    60:69:a0:bf:91:a1:29:b0:f3:ac:fe:d8:d8:aa:c8:
                    46:50:1b:7f:02:79:a5:1c:32:83:1f:f4:b1:25:09:
                    7e:3e:93:b8:5f:18:b1:91:9f:cb:00:29:d6:1f:12:
                    0b:a6:4b:0d:9e:5f:68:b4:d9:da:a8:23:1f:87:cf:
                    18:62:8b:2b:f6:2c:7a:b0:a9:91:cd:7f:0f:d9:cf:
                    fb:4e:65:40:f8:fa:c0:c5:71:2b:6e:ec:89:9d:e8:
                    b3:01:2c:ec:00:46:e1:d8:c4:b9:9b:6a:16:75:33:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:10:56:69:E0:3E:FB:CB:4A:2E:E7:83:8E:A1:C6:C4:44:88:D6:4D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03cc5d6c-c188-4393-91fc-8bc8f5514b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:46:d8:9c:6e:01:e2:b0:b0:eb:29:58:eb:2e:07:37:94:
         bf:53:b6:d5:ec:7e:cf:8c:45:6d:23:f9:cc:a6:e1:80:6a:2d:
         22:84:4c:5f:1b:23:e6:91:8b:65:1d:b6:62:cd:99:af:13:e2:
         83:ec:d0:99:bb:12:a8:e3:e0:ac:2d:a8:05:fe:3c:b2:c8:fa:
         66:3b:84:75:29:01:47:2f:01:70:4a:91:1f:8e:0f:1b:6b:c6:
         c2:bd:fb:11:5c:d2:0b:dd:79:d6:00:8e:e3:8f:d8:4a:21:5a:
         cf:dc:0e:2c:d0:b0:1b:d6:e3:08:da:47:d5:9c:fa:6a:63:05:
         ad:20:bf:68:9e:07:84:aa:03:1c:09:92:38:50:9a:c9:7b:2e:
         2a:60:f5:8f:9b:7b:0e:8d:3f:29:a3:5a:86:c2:8e:c7:c0:c5:
         a1:32:e0:bf:db:c5:f7:ac:27:e6:39:a2:36:87:7f:23:81:a2:
         56:8c:ec:2b:92:e8:d2:e2:08:4a:c9:24:65:45:6b:77:e4:d1:
         f4:9f:b3:e9:3d:9d:2d:72:95:92:6a:9f:dd:bb:f6:52:7a:38:
         d1:28:56:bb:39:0c:d6:0e:56:14:ae:84:17:fd:a5:a0:20:08:
         3a:11:35:fb:cf:ef:0f:bd:8d:a3:ba:ec:e6:4b:cb:b8:15:ea:
         09:13:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:15 2025 by rpki-client