Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1706caeb-54d5-436e-a507-07735facb14f.roa
File:                     1706caeb-54d5-436e-a507-07735facb14f.roa (raw, json)
Hash identifier:          vSnr/IucWCxzyw4kUzJUx4AK4zFIrxyZYavh+eqprR4=
Subject key identifier:   96:17:A6:89:0D:6F:94:87:92:17:3C:CD:DA:DB:4E:61:C2:DA:3C:42
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2FB855772762CD62D9C8A1340A1D9CCD8ECFD57A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1706caeb-54d5-436e-a507-07735facb14f.roa
Signing time:             Wed 24 Sep 2025 21:40:20 +0000
ROA not before:           Wed 24 Sep 2025 21:40:20 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:55:77:27:62:cd:62:d9:c8:a1:34:0a:1d:9c:cd:8e:cf:d5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 21:40:20 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=166ae2fa6279247cfe004a44adb36dfb31c05c6240db3b5e3ca8cd810be6936e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:45:9e:b1:c4:09:36:29:f6:7b:5a:e9:bb:
                    79:07:2d:74:02:12:a4:d9:5f:68:d9:2a:58:d6:d2:
                    c9:59:ba:4d:3f:24:7e:6c:0d:b2:b8:ea:66:c2:e7:
                    75:35:82:bb:50:dc:d0:6c:79:5b:f6:b9:48:45:92:
                    23:1e:2e:03:a9:42:a5:5b:8f:00:df:d3:d5:d3:91:
                    b3:eb:60:09:83:dc:5e:54:fd:80:4c:ee:21:05:53:
                    b2:a8:ad:ad:e4:92:ab:20:bd:37:0c:cf:f1:c7:42:
                    e8:ae:be:a5:f5:8e:67:68:10:b1:59:55:1e:9a:a3:
                    dd:2a:e4:03:71:2d:8f:77:15:0b:e7:26:ca:a8:08:
                    8a:ea:71:31:0a:17:f2:1a:00:78:bc:e4:f5:f8:b8:
                    f8:89:98:f1:93:93:56:6e:50:cb:7b:3f:01:3b:0f:
                    22:69:6c:09:fe:ca:c4:22:3f:c5:70:49:f3:1e:6b:
                    e6:78:b4:9e:7d:ea:78:18:f2:2e:a2:24:a1:9c:05:
                    2e:d3:42:9d:03:1c:65:c5:42:5f:5a:1c:20:8e:8d:
                    e7:41:d8:60:8e:3b:27:4e:bf:32:02:cf:1c:bd:a4:
                    65:30:44:31:20:6c:6d:63:14:b4:21:c0:85:33:3d:
                    6a:38:06:a8:a3:2c:ad:e7:36:92:6d:f9:95:f2:fd:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:A6:89:0D:6F:94:87:92:17:3C:CD:DA:DB:4E:61:C2:DA:3C:42
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1706caeb-54d5-436e-a507-07735facb14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:5f:bc:4f:b6:16:34:dc:b8:37:84:6b:a4:47:4b:e5:de:
         08:57:cf:75:80:c7:e0:c7:6f:39:1f:49:9a:6c:fa:3b:32:b5:
         12:b0:d7:41:77:b6:8e:2d:de:e4:18:ba:76:bf:4a:0b:a5:66:
         13:f6:36:8f:bc:1b:63:71:6e:01:54:a4:0c:a5:08:71:a7:3b:
         fb:62:1e:5a:0c:78:d4:f4:6d:f7:55:82:9a:5f:1f:ab:99:bd:
         ad:78:1a:0b:e9:25:46:43:f5:85:95:7d:43:b8:59:97:a6:77:
         5d:4b:c6:07:e9:60:2d:fe:c1:8a:b0:68:f7:9b:6b:e6:8f:59:
         1a:cf:56:61:a9:01:da:0e:32:17:18:6e:86:c4:e2:3e:b6:a3:
         e3:5c:8a:fb:90:19:2e:9a:65:b9:63:0f:5e:f2:02:28:57:98:
         54:c5:53:73:d1:33:20:a4:5b:62:bf:c4:74:1e:71:0e:2e:a8:
         85:5d:ea:df:51:fd:58:48:cf:c7:cc:7b:d3:25:eb:da:c5:19:
         95:76:f2:48:3b:03:65:a9:fa:86:e9:40:99:43:ad:68:c5:5f:
         36:19:ba:10:ae:50:ed:97:3b:19:fd:b1:59:5d:88:b6:5f:30:
         85:8b:5e:d6:36:39:58:bb:b4:a3:17:53:e8:a8:de:22:e1:73:
         99:21:b1:98
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL7hVdydizWLZyKE0Ch2czY7P1XowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE0MDIwWhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjZhZTJmYTYyNzkyNDdjZmUwMDRhNDRhZGIzNmRmYjMx
YzA1YzYyNDBkYjNiNWUzY2E4Y2Q4MTBiZTY5MzZlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKz0WescQJNin2e1rpu3kHLXQCEqTZX2jZKljW0slZuk0/
JH5sDbK46mbC53U1grtQ3NBseVv2uUhFkiMeLgOpQqVbjwDf09XTkbPrYAmD3F5U
/YBM7iEFU7Kora3kkqsgvTcMz/HHQuiuvqX1jmdoELFZVR6ao90q5ANxLY93FQvn
JsqoCIrqcTEKF/IaAHi85PX4uPiJmPGTk1ZuUMt7PwE7DyJpbAn+ysQiP8VwSfMe
a+Z4tJ596ngY8i6iJKGcBS7TQp0DHGXFQl9aHCCOjedB2GCOOydOvzICzxy9pGUw
RDEgbG1jFLQhwIUzPWo4BqijLK3nNpJt+ZXy/eNFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlhemiQ1vlIeSFzzN2ttOYcLaPEIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE3MDZjYWViLTU0ZDUtNDM2ZS1hNTA3LTA3NzM1ZmFjYjE0Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASQWEwDQYJKoZIhvcNAQELBQADggEBAC31X7xPthY03Lg3hGukR0vl3ghX
z3WAx+DHbzkfSZps+jsytRKw10F3to4t3uQYuna/SgulZhP2No+8G2NxbgFUpAyl
CHGnO/tiHloMeNT0bfdVgppfH6uZva14GgvpJUZD9YWVfUO4WZemd11LxgfpYC3+
wYqwaPeba+aPWRrPVmGpAdoOMhcYbobE4j62o+NcivuQGS6aZbljD17yAihXmFTF
U3PRMyCkW2K/xHQecQ4uqIVd6t9R/VhIz8fMe9Ml69rFGZV28kg7A2Wp+obpQJlD
rWjFXzYZuhCuUO2XOxn9sVldiLZfMIWLXtY2OVi7tKMXU+io3iLhc5khsZg=
-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:32 2025 by rpki-client