Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/080866df-610a-4c41-92ee-fc5bcb2d6541.roa
File:                     080866df-610a-4c41-92ee-fc5bcb2d6541.roa (raw, json)
Hash identifier:          Akt0fEzB5/SIN7wJDDWaqjN5HWbd5rLDRywefOSyM/0=
Subject key identifier:   C8:11:52:9E:4F:C7:45:B7:43:69:7C:69:DD:28:09:23:65:BA:69:5D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4BFFAE90DF035E4707469727AF9467BF457DEE49
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/080866df-610a-4c41-92ee-fc5bcb2d6541.roa
Signing time:             Wed 24 Sep 2025 22:05:02 +0000
ROA not before:           Wed 24 Sep 2025 22:05:02 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.67.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:ae:90:df:03:5e:47:07:46:97:27:af:94:67:bf:45:7d:ee:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 22:05:02 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=611d375be7f665d54a982e1959d14f2c5a79566493670fcfeef2895139320bf0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:6e:87:a9:45:02:99:93:cb:a7:5d:90:fb:
                    23:c2:01:58:1a:77:4a:ab:23:68:9f:53:da:74:72:
                    f1:03:24:0c:3d:85:64:db:8f:47:be:c1:82:6f:e0:
                    99:75:55:04:0f:18:39:36:86:90:67:48:26:66:68:
                    71:bb:0e:21:43:60:b5:14:cb:ad:5d:f4:c6:23:14:
                    54:8c:fa:f5:c9:ec:c9:26:ad:c9:98:23:16:48:5b:
                    66:05:a0:c3:d3:b0:46:05:b0:8a:40:ce:6f:70:bf:
                    56:b7:c3:29:69:1e:3c:22:2a:50:b5:30:8f:f4:40:
                    11:cf:8a:e2:dd:7e:fa:ba:ed:0c:14:7d:ca:e1:79:
                    7e:dd:7b:22:b5:78:b9:5e:cd:f0:96:54:ab:d2:46:
                    b7:74:87:7f:51:72:15:58:34:4b:14:1a:f1:64:63:
                    c3:ee:6b:f5:de:b5:d7:f3:a7:99:b1:c6:f0:94:dc:
                    f7:24:34:59:56:68:9e:47:5c:67:01:76:40:fa:46:
                    b9:0d:d9:78:29:f4:14:52:bd:0e:2f:68:6c:f8:a5:
                    28:8a:82:3c:42:c3:00:7a:7a:6a:b8:25:b0:4d:0d:
                    c5:f6:93:46:38:20:ff:48:94:e0:fe:e1:ec:fa:59:
                    8e:44:d2:38:61:20:fe:55:65:d5:9b:74:d9:98:65:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:11:52:9E:4F:C7:45:B7:43:69:7C:69:DD:28:09:23:65:BA:69:5D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/080866df-610a-4c41-92ee-fc5bcb2d6541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:d0:8a:70:30:d1:34:19:a0:93:74:6f:f6:27:fb:86:38:
         36:f1:56:12:05:fe:0c:83:05:7f:75:01:12:c8:17:df:89:5a:
         73:2e:42:0d:3d:0e:9e:3f:47:aa:d1:07:70:8a:1a:b4:62:e2:
         76:05:c8:71:34:00:74:23:33:f5:70:f5:3c:05:9b:7c:ea:09:
         eb:3e:28:f5:b0:dd:41:80:21:b3:c4:a4:6c:30:60:b2:25:a9:
         97:a0:58:b2:2c:04:7e:3f:a1:c9:70:7c:12:8e:06:79:6c:a2:
         c5:e4:be:80:1e:06:4c:07:d6:d2:05:9c:dc:8d:86:2d:38:71:
         b8:b4:d6:94:5a:f4:4a:de:93:7e:4b:bc:bd:04:ad:2b:b9:01:
         ca:df:90:57:bd:d0:e2:ff:c2:38:1a:ac:a4:cc:dd:ad:07:51:
         3e:98:71:1c:0f:8c:31:f8:df:b2:62:c9:11:81:f7:73:17:06:
         ab:ba:5a:d1:f6:2d:12:27:c7:ef:9f:4a:c3:93:30:a1:c9:66:
         9b:dc:8c:32:30:47:43:61:6a:0c:a5:a2:8a:55:4d:cb:21:90:
         ed:d6:64:9e:87:48:b4:8e:98:63:d6:39:b4:12:3a:d7:95:25:
         3a:b5:dd:a7:78:31:ae:23:d3:57:29:2d:69:99:24:f5:b2:f6:
         58:70:94:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUS/+ukN8DXkcHRpcnr5Rnv0V97kkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwNTAyWhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MTFkMzc1YmU3ZjY2NWQ1NGE5ODJlMTk1OWQxNGYyYzVh
Nzk1NjY0OTM2NzBmY2ZlZWYyODk1MTM5MzIwYmYwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSS26HqUUCmZPLp12Q+yPCAVgad0qrI2ifU9p0cvEDJAw9
hWTbj0e+wYJv4Jl1VQQPGDk2hpBnSCZmaHG7DiFDYLUUy61d9MYjFFSM+vXJ7Mkm
rcmYIxZIW2YFoMPTsEYFsIpAzm9wv1a3wylpHjwiKlC1MI/0QBHPiuLdfvq67QwU
fcrheX7deyK1eLlezfCWVKvSRrd0h39RchVYNEsUGvFkY8Pua/Xetdfzp5mxxvCU
3PckNFlWaJ5HXGcBdkD6RrkN2Xgp9BRSvQ4vaGz4pSiKgjxCwwB6emq4JbBNDcX2
k0Y4IP9IlOD+4ez6WY5E0jhhIP5VZdWbdNmYZVKzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyBFSnk/HRbdDaXxp3SgJI2W6aV0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA4MDg2NmRmLTYxMGEtNGM0MS05MmVlLWZjNWJjYjJkNjU0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASQ9wwDQYJKoZIhvcNAQELBQADggEBAJ0l0IpwMNE0GaCTdG/2J/uGODbx
VhIF/gyDBX91ARLIF9+JWnMuQg09Dp4/R6rRB3CKGrRi4nYFyHE0AHQjM/Vw9TwF
m3zqCes+KPWw3UGAIbPEpGwwYLIlqZegWLIsBH4/oclwfBKOBnlsosXkvoAeBkwH
1tIFnNyNhi04cbi01pRa9Erek35LvL0ErSu5AcrfkFe90OL/wjgarKTM3a0HUT6Y
cRwPjDH437JiyRGB93MXBqu6WtH2LRInx++fSsOTMKHJZpvcjDIwR0NhagyloopV
TcshkO3WZJ6HSLSOmGPWObQSOteVJTq13ad4Ma4j01cpLWmZJPWy9lhwlCw=
-----END CERTIFICATE-----
Generated at Sat Oct 18 00:16:09 2025 by rpki-client