Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1cebeb-6d17-4d22-a527-afb10d4e2b2b.roa
File:                     0e1cebeb-6d17-4d22-a527-afb10d4e2b2b.roa (raw, json)
Hash identifier:          VA98clHtIapBUGj0Kd8bM6WtnbNmgnCbapgs5++JWdE=
Subject key identifier:   DA:66:CE:E6:70:A1:B1:05:0F:91:3C:EC:D6:2F:F1:06:22:FA:F9:35
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       69706569DADACCD027C99EF9C2781D65315EAA6B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1cebeb-6d17-4d22-a527-afb10d4e2b2b.roa
Signing time:             Wed 24 Sep 2025 23:14:34 +0000
ROA not before:           Wed 24 Sep 2025 23:14:34 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:65:69:da:da:cc:d0:27:c9:9e:f9:c2:78:1d:65:31:5e:aa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 23:14:34 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=8f745af44b6cf44f04d822bf0ab4327b7613ca96d910921672d8f1ddc9949b42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:39:b2:8e:72:e2:38:c4:6c:4f:66:22:71:
                    32:62:ef:ee:24:68:70:71:4c:bd:66:b9:17:43:5d:
                    37:18:2c:bd:5b:6d:35:57:77:60:71:f1:c4:72:a1:
                    9d:9d:ac:5a:5f:ff:65:e1:14:23:dd:68:b4:44:b2:
                    2a:53:46:1a:a7:0a:98:18:44:7a:5b:c9:05:63:2a:
                    ac:88:2d:ee:ef:71:1c:e3:b6:d3:7f:4a:94:4d:72:
                    fc:6f:90:a1:b1:89:fa:07:ff:cd:a7:2b:18:5b:b2:
                    07:17:52:8f:88:94:8c:f9:5d:cc:b0:c5:dc:4f:1f:
                    cf:2a:a9:03:b2:21:c8:2d:0b:d2:bb:cd:1c:0b:d9:
                    88:e9:c4:b6:03:1f:ba:7e:ad:30:82:fb:6b:31:62:
                    cc:1e:50:4d:c0:eb:9c:d6:fd:74:58:80:ac:a2:c6:
                    6b:da:39:90:f1:9b:8b:aa:89:b0:65:c9:86:a5:95:
                    a7:3e:1b:8e:59:93:4e:e1:88:15:8c:2c:bf:60:6f:
                    30:64:6c:5c:4d:7a:89:af:b3:cf:d7:75:87:23:5a:
                    fe:75:13:21:6c:46:89:cc:f3:18:19:19:51:45:78:
                    56:57:1b:f2:ce:08:20:05:4e:69:a3:c4:26:35:5a:
                    54:2b:80:50:b4:c2:b8:32:c3:6c:fe:da:13:b5:cc:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:CE:E6:70:A1:B1:05:0F:91:3C:EC:D6:2F:F1:06:22:FA:F9:35
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1cebeb-6d17-4d22-a527-afb10d4e2b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:62:59:a1:69:fb:57:71:d2:b4:2d:ae:33:54:b5:7e:90:35:
         3e:c3:8d:48:11:d8:6a:d7:ba:49:c1:ec:f3:2d:3a:10:f1:80:
         98:e7:9a:92:b0:66:9a:4f:a2:9d:8f:ce:99:0b:80:15:ac:a0:
         fc:d4:e3:72:17:cb:ff:fd:3f:a3:73:04:f3:68:94:4c:71:5c:
         54:41:b5:0d:6d:9f:86:c8:c4:9d:d3:e0:8b:2f:7f:29:7a:ec:
         03:e4:0e:7e:bf:f6:8a:53:83:5a:02:e6:e9:b8:32:ee:04:ea:
         a2:09:77:58:65:0c:31:1b:68:e9:1e:2e:a7:4f:23:d6:a8:09:
         9b:ac:cc:0d:40:53:56:43:ff:83:df:dc:5e:4b:78:84:c8:cb:
         3d:7b:ed:04:0f:c9:af:46:cc:ed:5b:7e:6e:c4:b1:30:ca:f0:
         e0:92:45:14:57:aa:29:b3:b6:bd:9f:74:9d:e9:a7:fe:13:bb:
         08:50:52:f2:d8:64:09:66:c2:16:46:5c:e6:66:36:b7:32:bc:
         57:53:0d:d1:27:cd:9b:8d:75:40:f7:5d:aa:73:6e:7b:5d:c5:
         91:3d:d9:7d:af:f5:2b:04:e5:6a:ad:a4:b6:26:9e:c8:62:66:
         f3:cf:84:62:54:e3:5f:29:22:84:c5:05:90:56:37:3f:10:cc:
         73:4c:0b:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaXBladrazNAnyZ75wngdZTFeqmswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjMxNDM0WhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Zjc0NWFmNDRiNmNmNDRmMDRkODIyYmYwYWI0MzI3Yjc2
MTNjYTk2ZDkxMDkyMTY3MmQ4ZjFkZGM5OTQ5YjQyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9eDmyjnLiOMRsT2YicTJi7+4kaHBxTL1muRdDXTcYLL1b
bTVXd2Bx8cRyoZ2drFpf/2XhFCPdaLREsipTRhqnCpgYRHpbyQVjKqyILe7vcRzj
ttN/SpRNcvxvkKGxifoH/82nKxhbsgcXUo+IlIz5XcywxdxPH88qqQOyIcgtC9K7
zRwL2YjpxLYDH7p+rTCC+2sxYsweUE3A65zW/XRYgKyixmvaOZDxm4uqibBlyYal
lac+G45Zk07hiBWMLL9gbzBkbFxNeomvs8/XdYcjWv51EyFsRonM8xgZGVFFeFZX
G/LOCCAFTmmjxCY1WlQrgFC0wrgyw2z+2hO1zPRTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2mbO5nChsQUPkTzs1i/xBiL6+TUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBlMWNlYmViLTZkMTctNGQyMi1hNTI3LWFmYjEwZDRlMmIyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYSQQAwDQYJKoZIhvcNAQELBQADggEBAFJiWaFp+1dx0rQtrjNUtX6QNT7D
jUgR2GrXuknB7PMtOhDxgJjnmpKwZppPop2PzpkLgBWsoPzU43IXy//9P6NzBPNo
lExxXFRBtQ1tn4bIxJ3T4Isvfyl67APkDn6/9opTg1oC5um4Mu4E6qIJd1hlDDEb
aOkeLqdPI9aoCZuszA1AU1ZD/4Pf3F5LeITIyz177QQPya9GzO1bfm7EsTDK8OCS
RRRXqimztr2fdJ3pp/4TuwhQUvLYZAlmwhZGXOZmNrcyvFdTDdEnzZuNdUD3Xapz
bntdxZE92X2v9SsE5WqtpLYmnshiZvPPhGJU418pIoTFBZBWNz8QzHNMCyE=
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:10:50 2025 by rpki-client