Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b13970d-f891-4ad0-9ddf-80d568aa3db8.roa
File:                     0b13970d-f891-4ad0-9ddf-80d568aa3db8.roa (raw, json)
Hash identifier:          ALUyAJpoo2DF7Z89kEEy+rzrxbQir/UiIq/pCyOTXT0=
Subject key identifier:   8B:34:5E:FD:A3:C2:9B:3B:FC:6D:25:87:E8:92:43:9B:C8:D6:3C:38
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       35A2CFF18D78275B78A31DB00689449AB27FDF98
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b13970d-f891-4ad0-9ddf-80d568aa3db8.roa
Signing time:             Mon 22 Sep 2025 21:37:22 +0000
ROA not before:           Mon 22 Sep 2025 21:37:22 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:cf:f1:8d:78:27:5b:78:a3:1d:b0:06:89:44:9a:b2:7f:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 21:37:22 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=3f829084b81626f0a6e0bb08898b839ea969e8a78e840031eea6253b8ccc9927, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:ea:bb:12:20:80:48:4c:1f:cc:fa:66:11:
                    d5:ef:74:d1:26:6d:31:19:79:7e:b2:03:b4:23:9f:
                    ea:28:8c:f8:55:fd:4e:07:62:47:9e:dd:e5:59:80:
                    51:da:05:63:46:29:32:0d:52:59:38:28:14:4b:ce:
                    36:70:d6:32:9f:a6:c6:c5:6f:16:5c:77:d1:f3:7a:
                    d1:42:15:d6:9e:d1:59:25:54:ac:df:75:98:88:6e:
                    67:44:9f:d0:4d:7c:e6:67:54:71:71:8d:dd:cf:0f:
                    07:0e:d1:3a:bf:2e:48:df:66:52:6a:0a:2e:2b:ad:
                    d4:2f:05:78:0c:99:39:2d:30:24:dc:b4:7e:22:f2:
                    7a:1f:4c:d5:b7:d4:42:02:33:45:61:35:a2:96:a0:
                    99:38:52:3d:bd:c0:f7:40:41:20:a2:f7:8c:76:70:
                    e0:24:75:c6:83:1e:01:6b:3f:a5:33:eb:9d:43:f8:
                    70:e5:37:98:35:19:1f:ea:a1:7d:f0:3b:63:19:7f:
                    f0:8b:a6:ed:3c:7b:31:c5:3f:26:2c:c0:84:e8:47:
                    be:bf:2b:3c:f5:1b:d0:1b:7c:c6:7d:72:80:44:51:
                    4c:d5:9a:1f:ac:95:3d:5d:ec:3e:cb:3a:51:84:f2:
                    4a:93:97:73:47:d4:af:90:cd:1f:e1:59:ae:90:0f:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:5E:FD:A3:C2:9B:3B:FC:6D:25:87:E8:92:43:9B:C8:D6:3C:38
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b13970d-f891-4ad0-9ddf-80d568aa3db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:bf:3d:92:c4:c5:6b:02:f9:8a:95:a5:4d:39:f1:12:a9:
         89:4d:56:ed:16:11:2b:4c:5d:61:65:8e:43:f7:20:87:cc:63:
         2d:cd:56:64:03:80:ab:53:0f:2c:f3:14:b5:13:4f:83:6e:a0:
         b1:06:54:5e:2b:fe:68:cd:65:63:fd:56:1e:bd:4b:be:6d:77:
         16:a1:2b:15:f6:86:b0:c5:22:59:9b:8c:27:4b:b1:ba:66:60:
         51:07:d3:9c:0e:42:39:fb:1b:a7:26:26:ff:14:4d:68:08:78:
         85:93:a2:01:bc:32:5b:b6:15:62:b5:82:af:7b:b9:19:43:ce:
         56:9d:22:07:be:bb:ff:7c:cd:e5:46:5e:13:59:c3:ab:18:44:
         ce:34:25:ef:46:3c:d1:42:f4:c6:9b:84:5c:61:26:43:70:43:
         36:19:68:60:b5:f7:81:38:17:5b:4b:d3:c6:ec:41:43:fc:05:
         25:3c:46:d5:cd:a8:4f:76:db:37:94:30:97:a7:f4:f2:c9:8f:
         ce:19:6e:5b:7a:30:f2:f1:b2:da:09:0d:83:16:43:fc:48:5f:
         74:65:4c:c4:88:8a:7b:5d:4c:26:99:d6:8d:71:53:fa:4d:fb:
         5f:83:db:2b:75:a6:ee:44:81:5d:5c:e9:f2:fc:a7:c1:b2:46:
         00:f8:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:11:55 2025 by rpki-client