Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1701405d-766b-4924-b758-cb751ef1da25.roa
File:                     1701405d-766b-4924-b758-cb751ef1da25.roa (raw, json)
Hash identifier:          WJkYdxB7CnjcyWGPIleTjoNVhk9lrwNpMJhrO83nPY4=
Subject key identifier:   08:B1:67:8D:E4:46:D2:83:EC:5D:C3:16:C4:22:B3:DC:07:DD:59:BC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E25C8A58635B5E261D7B051E9E2769BF935FA21
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1701405d-766b-4924-b758-cb751ef1da25.roa
Signing time:             Wed 24 Sep 2025 22:05:11 +0000
ROA not before:           Wed 24 Sep 2025 22:05:11 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.67.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:c8:a5:86:35:b5:e2:61:d7:b0:51:e9:e2:76:9b:f9:35:fa:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 22:05:11 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=fa6218dd565118d909c7a3bc4be71ec330a3b0fcf4943348d0f9ed4ee28b06a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:04:fc:57:7a:b6:a4:c2:e0:93:e3:71:b8:
                    84:ff:60:43:a5:a5:c8:34:0c:ed:a8:b1:92:82:38:
                    cd:dd:61:07:27:c6:cc:c2:5a:68:a7:8d:a1:ea:31:
                    9d:ca:2d:2a:98:3e:01:15:1b:18:aa:1d:8f:f1:66:
                    8d:f4:1f:e0:6f:16:df:1f:56:77:07:78:47:44:c7:
                    07:4d:8e:d9:93:44:0e:4d:e9:7b:0e:ed:48:d6:5d:
                    18:1f:1c:f5:88:54:e9:08:1b:06:41:4c:42:ef:4e:
                    01:73:80:45:86:d1:e6:32:47:5c:49:d0:9f:91:26:
                    07:85:83:b4:3e:66:6c:8f:6f:66:19:46:1f:4f:91:
                    73:28:99:bf:9c:ad:78:98:c8:b1:65:b5:5a:13:f8:
                    1e:17:4e:96:5c:e6:0f:27:18:10:86:9b:f0:82:5b:
                    2e:c0:84:de:1a:38:0c:96:22:45:52:ba:42:6b:0a:
                    2e:df:c3:f2:dd:39:fc:73:72:02:91:87:43:31:57:
                    47:3f:49:d8:63:3a:32:3f:7a:a7:9d:3b:5c:45:7e:
                    65:f6:5f:3d:e3:d1:c3:98:dd:23:f0:14:8c:7b:24:
                    89:2f:58:78:53:27:8f:8d:f8:b8:0f:41:81:b7:dc:
                    05:9a:48:8b:0e:5e:05:4c:98:5e:1e:41:f9:37:f6:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:67:8D:E4:46:D2:83:EC:5D:C3:16:C4:22:B3:DC:07:DD:59:BC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1701405d-766b-4924-b758-cb751ef1da25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.67.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:62:3b:d6:3c:25:50:f1:73:3c:c1:14:e5:0f:7d:b1:f3:
         f8:03:f6:10:76:26:b5:e3:74:14:16:e0:56:d8:13:69:7d:d4:
         19:57:ee:46:73:bd:99:f0:8a:51:5c:b3:7d:9f:2d:e6:a2:7a:
         a5:ff:f5:0f:be:17:0b:07:01:0f:5a:89:92:b2:90:81:f1:8a:
         99:b9:37:34:84:00:59:6e:9a:d1:d4:c5:07:43:dc:00:db:f6:
         66:a7:e6:d5:df:3a:41:48:aa:44:49:18:92:e3:27:76:fe:72:
         40:25:8b:e5:2c:0d:3b:f1:a9:78:67:25:f9:ec:eb:50:b0:57:
         75:ab:95:b6:87:bd:7c:94:e5:3b:b9:63:c3:0d:ad:18:98:83:
         d6:a7:84:a5:47:dd:47:66:66:7e:61:bf:e6:1d:af:e6:fd:37:
         61:ce:84:40:b7:b2:6f:b9:b1:ed:5e:3d:f0:f2:8c:34:e2:c7:
         3b:1a:db:53:60:4b:82:a5:7d:43:3a:86:ce:bd:d5:47:81:51:
         d8:80:ec:0a:3d:3e:fd:96:92:f2:d4:14:7c:94:a9:4a:58:8f:
         ee:fb:be:76:ee:7a:59:0a:f0:c3:65:21:7e:a8:c5:0d:29:f0:
         01:b2:99:c7:ea:5a:20:da:2d:ac:31:cb:7b:88:eb:f1:0a:61:
         52:f6:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:08:46 2025 by rpki-client