Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16510740-007f-4411-b0ff-45fcca13320a.roa
File:                     16510740-007f-4411-b0ff-45fcca13320a.roa (raw, json)
Hash identifier:          Ie44n4oLkm0SyDxrft3OXUNy+uPpQgCwe4PUVaed5YQ=
Subject key identifier:   DB:CA:DF:09:19:8B:B5:33:0A:CB:E3:BD:8E:E5:DA:C1:2F:B9:59:BB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1B04A1B062D190808C4AE7F1445D70335B432529
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16510740-007f-4411-b0ff-45fcca13320a.roa
Signing time:             Wed 24 Sep 2025 20:39:34 +0000
ROA not before:           Wed 24 Sep 2025 20:39:34 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:04:a1:b0:62:d1:90:80:8c:4a:e7:f1:44:5d:70:33:5b:43:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:39:34 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=014e10d7b95150a5af707ed1da48f75b101f8eb037c5870ec6c6601a1f9afbfc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:d8:ac:22:90:ab:10:f7:2e:35:f5:ce:6c:
                    b8:be:bd:ac:e0:f7:11:bb:a3:a4:f2:b0:87:41:2e:
                    60:16:64:b5:74:35:c3:59:04:74:6c:48:9c:51:62:
                    bd:0a:3a:e3:3c:88:35:56:fb:87:79:3a:48:f5:9d:
                    76:c8:53:03:67:29:6f:9a:e4:e3:19:ce:13:04:0f:
                    fc:d4:6e:c7:13:71:b2:a7:27:c4:35:e6:60:fa:58:
                    cd:8d:8c:51:05:83:e4:93:57:df:c7:8d:0b:1c:64:
                    49:e7:47:6d:b4:8e:8a:9e:ca:61:06:40:64:d5:88:
                    f3:95:aa:4c:24:fd:2e:d7:84:c6:ad:1d:59:63:d0:
                    cc:85:c2:dc:8f:46:e1:b8:cb:1c:56:bc:25:f0:33:
                    10:69:be:41:bb:6c:33:62:f5:d4:de:78:cc:34:b5:
                    f8:ba:4f:82:32:3c:36:5f:ee:d7:2c:ca:14:18:04:
                    41:9b:10:1b:72:15:e6:b1:4b:89:0c:99:d3:5e:ae:
                    54:18:ba:43:4f:6e:f7:cb:b9:c5:7a:91:88:3f:3f:
                    76:58:64:3c:3c:11:88:99:e9:5e:52:14:21:e8:89:
                    f7:11:83:bd:a2:a6:f8:f1:b0:e9:69:1f:a9:b0:9d:
                    c5:e6:68:c3:37:79:2c:bc:b9:67:cf:a0:c1:7d:ca:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:DF:09:19:8B:B5:33:0A:CB:E3:BD:8E:E5:DA:C1:2F:B9:59:BB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16510740-007f-4411-b0ff-45fcca13320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:e2:10:51:c9:0d:a5:38:6d:b6:8f:86:b2:df:66:60:e2:
         85:1e:2c:78:28:8a:bc:09:ae:5d:5b:92:74:eb:6b:75:23:52:
         f3:a8:52:8d:5c:a9:a4:3d:7d:78:25:05:71:d1:eb:79:44:9c:
         3c:11:fd:db:af:3d:0d:87:41:2f:16:c8:ce:8e:3c:93:7d:0c:
         73:2b:87:46:e7:95:00:d8:5e:e8:54:59:b9:28:6b:85:55:c1:
         d6:9d:12:91:bc:18:5b:ac:76:2e:7a:bf:10:a1:8b:da:04:5d:
         82:a3:b8:f6:03:17:7e:00:5b:c4:aa:0a:d4:41:66:88:22:1c:
         f2:36:b8:34:a6:0c:da:ea:90:0c:fd:1e:33:24:21:55:cd:2e:
         f4:88:0c:f3:04:2a:8e:1a:65:6d:a8:e8:3e:3a:8e:3f:dc:c1:
         2c:55:b2:fc:e7:f6:d6:5c:b2:20:2d:86:46:b6:ed:23:cc:b8:
         eb:d3:1b:35:d8:c4:ad:b8:db:79:ec:b1:fa:45:bd:44:57:f6:
         93:be:0c:fd:2b:ad:f6:d2:5c:9d:2d:3e:9c:41:07:91:b3:34:
         c9:b8:78:f8:27:d5:19:ab:af:0c:37:3f:42:1a:fb:73:ef:27:
         a0:cc:8e:32:a8:91:ec:f2:df:98:98:29:9f:34:ee:e0:10:f2:
         ae:72:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:16:05 2025 by rpki-client