Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/103945e4-1eda-4a0c-b787-585185fa6c7d.roa
File:                     103945e4-1eda-4a0c-b787-585185fa6c7d.roa (raw, json)
Hash identifier:          wWnZFjQXB3DLtm99FY8x8RIw6tgJENhIbH+YpQZZUGo=
Subject key identifier:   FD:02:D7:37:46:98:CD:EB:18:91:C3:F6:72:51:4C:8B:AE:FD:BF:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       249F49E80907566CDD2A4C374BE4C4DFC62FF74F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/103945e4-1eda-4a0c-b787-585185fa6c7d.roa
Signing time:             Mon 22 Sep 2025 22:21:44 +0000
ROA not before:           Mon 22 Sep 2025 22:21:44 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.239.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9f:49:e8:09:07:56:6c:dd:2a:4c:37:4b:e4:c4:df:c6:2f:f7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 22:21:44 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=d78f285870f7285692261069708aed8983b5221f9ba1d843fed065b88cd0e13e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:f8:02:62:a2:e4:51:2f:a0:c7:37:83:ac:
                    47:d9:67:7e:d8:53:41:4b:e8:bf:6a:82:ad:96:76:
                    a9:e5:8d:a1:9d:94:af:d7:c3:83:d0:37:96:0d:cb:
                    b9:24:25:33:9b:e7:42:e9:e4:5b:a2:02:67:cb:e5:
                    7d:09:f4:a3:ac:28:bd:88:46:82:f7:a8:cf:12:ae:
                    cc:4e:f8:72:e8:ab:64:29:cb:c3:88:19:dd:2e:d1:
                    cc:4b:85:71:b7:1d:ed:52:57:76:87:e7:15:d6:e6:
                    aa:ab:b7:b4:d7:d1:11:2d:cf:86:49:6b:1b:ad:c4:
                    70:3d:b7:7b:26:f9:39:7d:2d:1c:31:3f:d5:11:9d:
                    f7:60:bb:fa:58:6f:00:bb:0a:0a:6b:f4:f2:08:93:
                    22:de:c9:88:2e:05:b9:1c:b1:1c:4a:e3:21:31:dc:
                    a7:70:20:aa:bf:ba:7a:ac:0a:aa:df:46:11:6d:50:
                    20:93:c9:ce:c1:da:eb:3d:42:e3:cf:b0:63:f4:07:
                    ae:ec:c9:41:3e:8d:7a:4f:6c:8d:b5:c5:ba:6c:39:
                    7d:f9:04:66:ca:be:1f:f7:aa:9a:7e:39:8f:2a:b4:
                    29:8f:c6:0a:f1:a4:d7:5e:b4:39:84:75:ac:2e:56:
                    46:41:0a:2d:12:6e:75:a0:e2:56:3e:71:b4:8a:75:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:02:D7:37:46:98:CD:EB:18:91:C3:F6:72:51:4C:8B:AE:FD:BF:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/103945e4-1eda-4a0c-b787-585185fa6c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.239.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:71:d7:86:3a:22:90:67:49:da:19:f0:81:8a:ab:60:49:74:
         21:56:22:75:15:f2:69:3a:3b:62:b8:ba:86:92:88:38:7a:c6:
         ca:28:52:09:ca:20:67:01:5d:d2:fb:2e:4e:7e:44:6b:c7:44:
         57:a8:e6:ed:95:07:92:5b:5e:41:a3:c2:08:45:b2:a1:27:43:
         4a:3e:ff:3d:03:46:3c:b0:37:5b:20:3e:b9:4c:d2:ba:cf:a8:
         bf:9e:48:0c:a7:1a:c2:ab:f8:9d:82:53:5d:c8:40:e1:aa:53:
         4c:bf:bc:8c:e2:60:6f:1b:53:83:20:08:91:15:35:7a:32:ec:
         df:be:7a:0f:c3:b7:77:52:94:3b:a2:a6:0d:cc:b2:08:db:a5:
         5d:54:dc:7b:f1:6c:7d:f8:45:31:1f:f6:62:32:65:bf:bc:32:
         b0:d9:66:19:67:34:7f:c5:03:8f:01:ca:bd:f0:85:36:51:b6:
         cf:22:2c:12:7a:ab:e3:44:ee:db:96:c3:9c:01:24:b5:85:51:
         a3:40:e6:23:37:46:7c:8a:4c:a1:c1:7b:14:54:3e:be:8d:f6:
         c2:2a:57:46:bf:c8:3c:f4:27:5a:74:97:2e:91:02:8d:77:70:
         3c:6c:45:fd:13:0b:4b:29:68:31:35:0a:24:78:e8:18:57:91:
         d5:35:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:32 2025 by rpki-client