Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18c15362-1b00-4166-930e-84cc442df077.roa
File:                     18c15362-1b00-4166-930e-84cc442df077.roa (raw, json)
Hash identifier:          67orUvLfta4I122SpFEAUsAp6iUWnt2uZTAn8TbOUN8=
Subject key identifier:   E7:55:0E:75:B8:82:FE:E8:92:3C:D8:A2:44:7C:51:92:32:71:09:EE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D9708DF134DDD762DED4CA368F1941E9C63257A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18c15362-1b00-4166-930e-84cc442df077.roa
Signing time:             Mon 22 Sep 2025 19:23:47 +0000
ROA not before:           Mon 22 Sep 2025 19:23:47 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.164.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:97:08:df:13:4d:dd:76:2d:ed:4c:a3:68:f1:94:1e:9c:63:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 19:23:47 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=daf8d914eb4c82ca1c6fee203fddd96fb69929a45707ff5174bddf4bf68cf9b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:17:26:e8:8d:d7:47:44:f0:fb:a3:c5:5f:10:
                    ee:8d:a3:d9:8b:91:53:eb:e8:b6:ed:29:40:b2:43:
                    01:0a:e6:04:d1:c6:5e:30:7a:c8:18:f7:bd:bf:21:
                    a4:d3:6e:b6:23:a4:7f:80:25:e0:b3:bf:6b:e1:d7:
                    03:af:8a:ef:ed:e7:b2:9f:3e:61:0a:24:3b:94:e6:
                    37:e8:25:1b:8e:83:c4:eb:2f:45:e3:00:fe:4e:dd:
                    cf:18:d8:b4:75:53:ad:9e:49:f7:7d:d0:6e:7d:ab:
                    da:ac:ba:34:b0:72:00:02:65:81:8d:dc:d1:4b:52:
                    32:2b:29:de:92:16:b3:5a:27:92:7b:fd:4a:dd:16:
                    06:9d:93:92:52:61:dc:21:ea:c6:47:12:aa:0d:7a:
                    15:d7:25:19:ff:99:8e:6a:07:ff:27:74:74:36:9d:
                    4a:0d:ed:04:5d:d7:13:71:62:36:3c:c2:8a:7d:46:
                    b8:83:65:68:68:ee:30:f8:7b:08:ee:1f:4f:ff:7a:
                    54:1c:47:a2:be:be:59:95:e3:b1:68:d7:48:aa:6b:
                    ef:e4:81:b0:07:bb:00:fe:31:29:18:32:68:48:17:
                    a0:c2:93:d0:8b:bf:16:4c:d1:59:0d:ff:d3:9d:d7:
                    96:cc:cc:a8:19:3b:c9:f6:04:2c:17:b3:8d:5b:4c:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:0E:75:B8:82:FE:E8:92:3C:D8:A2:44:7C:51:92:32:71:09:EE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18c15362-1b00-4166-930e-84cc442df077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.164.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:fa:dc:69:13:e6:b7:01:6e:de:4f:b7:2c:12:78:97:b0:
         eb:af:8e:bb:d6:06:b3:87:6e:ec:05:86:b1:35:76:25:0e:41:
         80:ef:bd:bb:56:f4:a6:e7:68:3a:87:46:7f:96:a5:10:e5:cb:
         5f:62:cf:01:e3:5d:ad:6d:c8:d4:bb:d2:ae:ca:7f:d1:77:b8:
         1e:25:36:ec:2c:a9:e0:af:eb:99:30:f6:2d:3f:8d:94:43:c1:
         eb:f1:95:ff:64:ef:6a:2b:24:d8:87:89:3f:00:d0:6c:36:51:
         b0:bd:4c:be:56:60:f7:a0:65:d4:76:e3:88:3d:79:07:d2:f6:
         82:11:d7:bf:c6:c6:58:ea:45:46:a8:0f:d5:e2:de:bd:d6:27:
         08:d4:c1:30:54:bd:a9:52:3e:fb:71:09:a8:7e:c7:f4:b3:ac:
         6c:1f:47:f8:91:ff:ce:05:12:2d:3d:e4:30:26:2e:2d:22:00:
         09:ae:e7:d6:3a:00:85:4f:dc:0c:21:92:9d:44:c5:c8:6b:6f:
         f0:fa:32:a1:c7:41:5a:9b:97:98:ef:cf:20:56:85:f3:97:c8:
         6c:d7:20:2e:41:32:e4:e5:47:da:23:7c:e0:60:68:43:9c:ff:
         b2:3f:78:3a:07:30:6b:12:c7:9a:8c:35:4d:f5:62:f0:2d:38:
         c5:72:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:35:29 2025 by rpki-client