Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19ef42ae-b19f-4e22-8aaa-20b8f6806d2d.roa
File:                     19ef42ae-b19f-4e22-8aaa-20b8f6806d2d.roa (raw, json)
Hash identifier:          a1CDgkpBAmqFnLLjqYFMTeCxv+D+ynDpgme8cRXk0+o=
Subject key identifier:   51:1F:42:1B:7D:2D:C1:9F:C4:78:8C:F7:9C:B9:96:24:49:D8:8F:23
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       540892C537DC3AE76E5C10DD0FCB7F7304317FC5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19ef42ae-b19f-4e22-8aaa-20b8f6806d2d.roa
Signing time:             Mon 22 Sep 2025 19:23:37 +0000
ROA not before:           Mon 22 Sep 2025 19:23:37 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.164.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:08:92:c5:37:dc:3a:e7:6e:5c:10:dd:0f:cb:7f:73:04:31:7f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 19:23:37 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=ce9de9d283608f990870fbad3151436d600ef4a6181ad1025d099954e219e429, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:08:88:15:0a:57:5f:0a:92:a5:45:b7:11:
                    83:c9:27:e7:ab:c4:f6:09:38:60:09:55:df:8e:9b:
                    29:57:a3:dc:c1:74:4b:ad:e2:db:f2:96:59:f0:ef:
                    4e:e3:24:30:61:2b:6e:3e:8e:22:8f:51:28:0d:59:
                    f4:71:7d:af:45:e4:39:1f:f3:14:d9:53:e6:98:1c:
                    3c:bf:74:81:07:a1:0c:92:32:b9:ae:23:b9:4a:66:
                    cb:3a:e0:b2:9b:cc:42:42:eb:cf:16:bf:5b:85:7a:
                    c0:d2:af:0a:a0:0c:47:dc:13:55:b5:04:b2:f2:fd:
                    21:af:64:2c:3b:b6:1d:46:8a:85:3a:92:5d:ba:52:
                    16:9b:9b:d1:31:f2:44:61:fe:9a:73:88:e1:be:c0:
                    66:be:c3:e3:1c:4a:7a:33:3e:7c:36:1b:8b:ca:25:
                    90:23:46:70:ac:b8:2c:5c:4b:25:b0:e5:14:b1:d3:
                    5a:dd:7e:47:4a:69:05:53:f6:14:fa:44:7b:e9:ba:
                    c6:02:de:65:e3:83:b2:06:e5:de:a9:9d:2a:fb:8c:
                    26:19:70:4d:ca:bc:0a:a4:e1:1a:c9:aa:9d:d4:4f:
                    d0:6f:46:c7:e6:34:9f:67:0b:00:f4:fa:99:a6:1c:
                    83:9c:8b:7a:74:de:ca:01:47:ce:d1:db:5d:ad:3c:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:42:1B:7D:2D:C1:9F:C4:78:8C:F7:9C:B9:96:24:49:D8:8F:23
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19ef42ae-b19f-4e22-8aaa-20b8f6806d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.164.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:e3:2f:b8:a5:3f:37:44:fa:26:6d:d1:f8:3d:7f:f4:1d:
         f8:21:f6:9f:bd:ba:2b:42:ec:a7:45:8d:e7:0e:fb:0f:2e:a5:
         ff:71:a6:b8:4d:c5:1f:b6:71:f1:8e:9e:a4:a5:9a:fc:81:38:
         c5:52:a6:75:02:0c:c5:02:df:38:e8:8e:d2:b4:8c:ca:e9:68:
         0f:f4:ea:e6:53:38:a6:45:a6:fd:16:f3:cd:0e:cc:4a:cd:37:
         13:f0:be:e0:5d:49:62:b4:16:54:6a:2b:89:b7:4b:9f:a6:fa:
         89:08:e0:0f:7f:c8:8e:e8:0e:1b:31:ea:7b:13:f3:77:b6:dc:
         5f:ee:db:b9:6b:58:51:1e:9c:ed:44:33:1e:c6:7f:29:77:bc:
         5c:8e:d1:79:4d:62:7a:9e:48:05:02:78:b8:40:72:42:0b:a3:
         53:79:88:5f:f0:5d:60:c2:15:8e:5b:bd:5c:86:b4:8b:86:3f:
         63:3a:dc:ec:06:38:e0:dc:8e:7f:20:90:64:81:e6:66:e6:61:
         53:12:b4:cb:9a:25:f8:b4:ca:ff:b1:d5:53:cb:ff:15:c0:1e:
         e3:28:1f:fe:f5:63:10:6b:06:aa:d1:5b:88:05:95:e1:9e:c8:
         1d:a6:9a:df:78:78:ea:87:44:4f:76:e6:56:e8:59:e8:13:eb:
         cd:48:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:09:27 2025 by rpki-client