Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa
File:                     0692c8de-d738-45f9-acd5-4946f21264df.roa (raw, json)
Hash identifier:          h8V9AIVuGasMFMrEy1M7gOtTNa4IXUeGLAVx0nrV2PY=
Subject key identifier:   A6:A9:B8:C5:A3:F9:52:71:AD:84:0C:E8:DB:0E:91:BF:A5:62:84:A7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       31D740A72D5745BC7F12B87EF9A09E612BE4CE3E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa
Signing time:             Fri 26 Sep 2025 16:06:03 +0000
ROA not before:           Fri 26 Sep 2025 16:06:03 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        155.38.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:40:a7:2d:57:45:bc:7f:12:b8:7e:f9:a0:9e:61:2b:e4:ce:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 16:06:03 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=cf7e23bdb14cd04854468333ab8c93a902832999f6c7885b9217e71eb2d4f261, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:2b:d3:35:94:5f:80:d1:9f:0a:17:99:ce:
                    80:96:44:df:75:c4:0a:d7:ec:e2:49:ad:cc:58:01:
                    99:8d:69:e4:af:13:06:f8:40:d5:28:d5:96:0f:b2:
                    29:95:f0:43:ac:0b:9d:5c:3d:80:01:7b:03:95:14:
                    d9:eb:c7:b8:30:92:f4:1f:f9:8c:ac:2e:4b:b6:73:
                    c2:5a:02:ad:65:9b:27:5f:14:88:21:67:ff:9e:6b:
                    b7:fd:3e:93:56:c0:3b:69:c4:dc:cc:cb:60:0e:a1:
                    d0:f0:d7:6b:e0:27:7f:ff:f4:d4:b6:52:0d:2b:dc:
                    38:2c:7b:6d:b3:d9:75:0b:b8:bc:6e:93:d6:d7:7f:
                    64:cc:f8:a0:43:c7:27:07:a6:6e:bb:88:1f:df:10:
                    b3:ec:b9:a0:eb:ee:e4:fb:5e:9c:49:28:de:bb:a7:
                    ae:8a:fa:e6:49:db:14:08:a5:41:97:24:d9:44:94:
                    d7:7b:57:20:3c:5f:8d:5b:8f:c4:df:b1:af:10:1b:
                    01:20:2e:ca:4e:63:88:3d:74:60:89:95:83:8a:7d:
                    89:0a:62:51:9b:14:62:a4:c1:ec:83:73:40:b0:b3:
                    78:f4:80:b7:81:4a:fa:37:bc:4e:38:66:af:1f:21:
                    b6:2d:a3:43:e5:5d:69:5a:54:5a:3b:79:04:bc:76:
                    72:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:B8:C5:A3:F9:52:71:AD:84:0C:E8:DB:0E:91:BF:A5:62:84:A7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:55:49:0d:96:13:83:c6:91:60:64:44:4f:52:7c:2a:31:
         63:69:da:d9:d5:b0:90:c4:d5:ae:1d:68:87:04:9e:3f:be:a9:
         b0:86:34:8a:ea:ce:ba:84:f4:c8:ab:3f:b5:58:f3:6d:e9:e8:
         d9:3b:23:9e:25:33:df:2c:6c:0f:c4:5a:cd:af:21:4c:15:bb:
         32:f1:b4:ee:df:ba:58:db:11:db:ff:09:86:5e:a6:ed:68:57:
         e2:f0:30:71:d4:30:19:07:e3:e7:d0:6a:ad:97:76:cf:e7:c1:
         65:b6:b8:1f:33:81:55:f5:91:de:47:9b:ec:33:28:fe:cf:c4:
         76:50:65:d9:f7:22:4c:81:76:05:3a:69:ce:a9:06:49:1e:a6:
         c4:9e:66:14:1d:81:2e:cc:7f:35:8e:54:c6:90:0e:d8:1e:25:
         e8:ad:53:e9:fc:cf:86:27:7f:84:34:71:c7:42:a8:7f:90:d5:
         2a:45:9a:08:80:c5:ef:7f:3c:85:06:bf:92:c4:66:1a:40:d5:
         e6:bc:e0:7a:20:51:04:e6:ab:47:01:86:49:3e:be:37:41:45:
         16:4a:9a:cc:e9:15:5a:16:44:4b:32:b3:3e:86:d7:f6:c5:ad:
         ef:7b:1d:d2:3b:6e:d4:6b:ef:65:b3:b1:68:4a:70:e1:f0:3a:
         b2:66:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:18:10 2025 by rpki-client