Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a25c4a9-ccdd-4a2f-bf76-65c89a37b676.roa
File:                     0a25c4a9-ccdd-4a2f-bf76-65c89a37b676.roa (raw, json)
Hash identifier:          9nBYqQlMp4C4DzTw7TTGvzhNW7KSsfAIGyLAko0wgjw=
Subject key identifier:   78:2F:5E:C5:A1:51:30:ED:0D:EC:ED:B5:D5:20:67:F1:0D:1F:2C:31
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       13E36C5ED1B12D19F2C4B75A0E0C17C052873361
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a25c4a9-ccdd-4a2f-bf76-65c89a37b676.roa
Signing time:             Wed 24 Sep 2025 21:33:08 +0000
ROA not before:           Wed 24 Sep 2025 21:33:08 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e3:6c:5e:d1:b1:2d:19:f2:c4:b7:5a:0e:0c:17:c0:52:87:33:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 21:33:08 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=ced6e002c9d5f603a59c3c9f3c229cedb42f208587380c434d61d2c708988269, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:12:fd:a3:d7:da:5d:b3:08:cc:80:ee:bc:
                    bd:a7:a2:b4:9b:26:67:57:ee:ff:4b:ca:20:d0:6a:
                    9b:80:89:5a:4c:c2:93:d8:e5:a4:9b:9c:f2:21:8c:
                    81:75:f9:52:a4:cb:c8:23:0b:9e:b5:0e:9e:d1:b3:
                    11:a5:cd:06:2a:f6:0e:6e:b9:7c:97:c5:26:d9:98:
                    dc:e5:57:ce:16:fe:98:2c:1b:fb:43:65:43:ed:41:
                    1f:de:85:b0:f8:f0:15:94:22:41:6e:77:11:30:f2:
                    fa:9e:f3:72:dc:ed:8c:b6:4e:a3:3a:ca:c4:31:4d:
                    31:aa:25:e6:e5:d9:08:93:9d:14:5c:0f:8a:02:d7:
                    17:db:46:f7:49:ae:75:9f:b5:64:7a:a5:61:8c:5e:
                    16:3e:d5:e8:71:47:bd:8e:81:3f:a4:e0:45:a7:92:
                    9a:ce:a6:8b:a0:af:68:dc:ab:7c:49:97:b8:37:c6:
                    0a:97:ea:a8:cd:47:37:83:4a:68:5a:fa:f1:12:53:
                    d0:68:e4:31:63:e2:7d:96:29:30:71:8f:38:9b:9f:
                    ac:eb:6e:81:c8:dd:57:ec:9d:f9:88:42:2a:49:50:
                    0a:b1:9d:6d:2b:18:11:26:79:d5:ab:99:f5:56:7c:
                    74:03:8a:f1:70:75:fe:b0:44:a6:ab:6d:9b:25:3a:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:5E:C5:A1:51:30:ED:0D:EC:ED:B5:D5:20:67:F1:0D:1F:2C:31
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a25c4a9-ccdd-4a2f-bf76-65c89a37b676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:7a:9c:9a:4d:74:21:57:92:73:f7:63:01:21:bc:30:c6:
         78:be:d4:e9:f9:78:3c:96:f1:10:de:d7:db:ba:04:0a:dd:0e:
         2d:55:46:b1:7f:03:cb:e5:6e:c5:15:4d:07:28:0d:19:bd:05:
         02:3c:bb:20:e0:e5:dd:dc:c5:e2:67:a1:3a:fb:c0:3f:38:2a:
         2d:54:c3:f3:29:61:c1:03:61:55:3e:89:3e:fd:9f:01:4a:86:
         fc:13:f3:36:31:91:43:60:e8:75:51:10:ca:d4:18:b1:7f:ac:
         e4:e2:1a:d5:4f:a5:5f:ce:02:79:e7:02:ab:75:2d:7d:55:c0:
         b3:a4:ae:83:29:c0:ae:06:e9:b5:a8:95:9d:75:92:5b:ba:97:
         1a:9b:23:f0:d0:3f:8c:4f:e9:bd:91:2a:22:84:58:c9:ca:0f:
         25:6e:c8:84:3a:ab:25:88:a9:4c:07:8f:bf:72:8d:b7:c5:88:
         ad:05:b7:04:8e:94:43:3f:9c:a6:fd:91:2a:c2:b6:68:d5:64:
         92:78:6c:8a:fc:b7:3a:07:86:d5:7d:33:c1:c2:3e:a3:e4:17:
         b6:dc:87:66:57:2f:56:a4:c0:bd:0c:bd:2a:82:e4:1a:8d:b4:
         96:19:5e:03:8d:46:4c:2a:29:04:c1:d1:cd:b1:93:8d:24:1b:
         31:be:da:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE+NsXtGxLRnyxLdaDgwXwFKHM2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEzMzA4WhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWQ2ZTAwMmM5ZDVmNjAzYTU5YzNjOWYzYzIyOWNlZGI0
MmYyMDg1ODczODBjNDM0ZDYxZDJjNzA4OTg4MjY5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjkBL9o9faXbMIzIDuvL2norSbJmdX7v9LyiDQapuAiVpM
wpPY5aSbnPIhjIF1+VKky8gjC561Dp7RsxGlzQYq9g5uuXyXxSbZmNzlV84W/pgs
G/tDZUPtQR/ehbD48BWUIkFudxEw8vqe83Lc7Yy2TqM6ysQxTTGqJebl2QiTnRRc
D4oC1xfbRvdJrnWftWR6pWGMXhY+1ehxR72OgT+k4EWnkprOpougr2jcq3xJl7g3
xgqX6qjNRzeDSmha+vESU9Bo5DFj4n2WKTBxjzibn6zrboHI3VfsnfmIQipJUAqx
nW0rGBEmedWrmfVWfHQDivFwdf6wRKarbZslOosjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeC9exaFRMO0N7O211SBn8Q0fLDEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBhMjVjNGE5LWNjZGQtNGEyZi1iZjc2LTY1Yzg5YTM3YjY3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASQR0wDQYJKoZIhvcNAQELBQADggEBAEoTepyaTXQhV5Jz92MBIbwwxni+
1On5eDyW8RDe19u6BArdDi1VRrF/A8vlbsUVTQcoDRm9BQI8uyDg5d3cxeJnoTr7
wD84Ki1Uw/MpYcEDYVU+iT79nwFKhvwT8zYxkUNg6HVREMrUGLF/rOTiGtVPpV/O
AnnnAqt1LX1VwLOkroMpwK4G6bWolZ11klu6lxqbI/DQP4xP6b2RKiKEWMnKDyVu
yIQ6qyWIqUwHj79yjbfFiK0FtwSOlEM/nKb9kSrCtmjVZJJ4bIr8tzoHhtV9M8HC
PqPkF7bch2ZXL1akwL0MvSqC5BqNtJYZXgONRkwqKQTB0c2xk40kGzG+2lo=
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:15:34 2025 by rpki-client