Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/116439f2-9fb1-4e99-96dd-87acfa89a13e.roa
File:                     116439f2-9fb1-4e99-96dd-87acfa89a13e.roa (raw, json)
Hash identifier:          +ruJV9mBxiFY/z5Qs2tnE3g+cYM1K7MbYWC8y/DgAp4=
Subject key identifier:   70:53:9B:8E:79:4E:50:8C:B6:E1:F5:05:57:ED:27:5E:BA:CA:40:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E8220CD4EE7ECAE6FC67D76EA2114C691642913
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/116439f2-9fb1-4e99-96dd-87acfa89a13e.roa
Signing time:             Mon 22 Sep 2025 23:32:31 +0000
ROA not before:           Mon 22 Sep 2025 23:32:31 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.245.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:82:20:cd:4e:e7:ec:ae:6f:c6:7d:76:ea:21:14:c6:91:64:29:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 23:32:31 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=57cd8e3a81c8db6c4f7fbc186102871225bf66c3222de240ccafb3b1f6325069, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:13:78:6f:26:63:fd:6f:b8:ef:94:46:65:
                    4a:cf:c3:52:b6:8a:04:b4:85:2a:51:16:4e:b3:ec:
                    e2:e3:2b:bc:3c:41:1b:64:80:c6:38:89:04:e3:7c:
                    e5:ae:56:5d:d8:31:97:45:2d:0f:53:56:c0:a7:68:
                    da:35:f0:ff:2e:a2:b6:e2:4f:82:21:01:f2:df:87:
                    17:80:43:ec:bc:17:ae:2e:cd:4b:59:72:61:a8:92:
                    b6:b6:e4:61:c3:1b:1b:2c:3f:69:f1:23:f6:99:a6:
                    a3:b3:b3:14:d8:fc:6d:3f:59:4f:aa:c9:49:c8:54:
                    e0:91:1d:8e:75:c1:96:80:df:15:b9:c0:80:88:8e:
                    35:55:b1:d8:61:c7:68:1a:f3:c0:5e:78:3f:81:5d:
                    71:e5:16:b4:ee:99:55:2e:9f:11:ea:39:bf:c0:cc:
                    5c:51:a3:e7:ee:33:78:a2:0f:38:3c:08:06:4c:d4:
                    8f:62:f3:46:59:0f:02:1e:7a:11:de:54:bf:ac:50:
                    c1:a5:96:ec:83:cc:0c:b5:10:83:e0:89:39:23:76:
                    c6:ca:32:c4:a0:c9:08:23:06:6b:ff:67:2c:36:04:
                    c9:06:cb:32:96:7c:48:47:a5:7e:ac:22:d2:d4:6c:
                    0b:b9:ef:ff:e4:ed:12:c9:83:de:a4:71:7d:f8:87:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:53:9B:8E:79:4E:50:8C:B6:E1:F5:05:57:ED:27:5E:BA:CA:40:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/116439f2-9fb1-4e99-96dd-87acfa89a13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.245.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:6e:9d:9a:02:bd:dd:c4:02:10:4b:3c:fd:49:1d:78:7f:
         05:aa:29:bf:6c:80:aa:f2:28:b0:ce:b4:b9:b2:b3:42:ed:c5:
         59:d1:04:83:2c:20:f5:16:9a:83:bb:69:87:25:14:87:60:a7:
         8f:66:7e:86:be:8c:a5:33:23:71:3f:44:da:6c:98:37:53:1c:
         83:b4:6a:37:70:84:37:74:eb:40:43:a8:6b:a2:b9:ef:3d:2f:
         dd:60:7d:2c:b7:70:47:a3:79:12:c4:de:1c:a8:ab:0f:5c:33:
         57:3c:aa:14:ff:85:45:61:50:ae:bc:57:2c:b7:20:6a:98:6b:
         71:42:a7:2e:a4:8d:9f:23:ce:bd:26:63:1f:ae:92:8a:c1:37:
         77:af:41:f1:b5:02:8f:21:79:81:70:5e:41:18:59:1b:09:65:
         87:bc:49:97:b4:6d:d2:c6:5d:32:ea:6b:23:ed:f6:e1:b8:b6:
         a9:1b:09:5c:5b:84:c1:51:a4:42:27:20:6e:5a:af:ca:88:cb:
         30:2f:7b:f7:de:c5:c2:ef:de:0b:f5:48:0e:95:10:17:6f:7f:
         3f:57:90:c1:32:8e:46:d2:04:61:84:b5:16:9f:0a:d1:70:6a:
         b0:7c:68:c5:e5:91:b1:56:4f:67:ee:bd:f6:b1:c0:4f:78:d2:
         7c:07:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:57:42 2025 by rpki-client