Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bc94b20-c375-4f8e-8db2-a929e8e5404e.roa
File:                     1bc94b20-c375-4f8e-8db2-a929e8e5404e.roa (raw, json)
Hash identifier:          QEi+VeyBcrmrtedbSj7f1P3cOVpT4GD7Y26tH64y6V8=
Subject key identifier:   5D:80:9B:D0:AB:A7:61:48:DA:CD:78:CB:C5:71:28:BA:5A:02:83:F6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0D52860AA5529D26A5B6C439977185A97704144F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bc94b20-c375-4f8e-8db2-a929e8e5404e.roa
Signing time:             Wed 24 Sep 2025 19:43:17 +0000
ROA not before:           Wed 24 Sep 2025 19:43:17 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:86:0a:a5:52:9d:26:a5:b6:c4:39:97:71:85:a9:77:04:14:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 19:43:17 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=24358af51a7cb11f9a51e684940e0dda77e03b1baeebf58aa9b983dd053934e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:81:95:6f:ef:f7:d6:47:6f:e4:db:f6:fb:
                    a7:e4:a3:c4:c4:09:62:3c:5e:0f:f6:8c:73:c2:7f:
                    98:df:19:61:79:17:ad:a9:03:88:b4:6a:6c:43:4f:
                    bc:98:e5:28:23:af:76:79:b5:db:3f:a1:df:ab:35:
                    3c:4f:41:97:9d:73:2d:5f:7f:83:21:d3:c3:71:01:
                    95:c8:6b:f4:df:71:08:39:d5:bd:13:6c:dd:b6:fd:
                    0b:33:0b:2a:bc:04:8d:92:1b:60:d0:24:9c:02:dd:
                    4c:32:20:d6:a6:0c:ab:23:78:35:b0:44:8b:4f:93:
                    a8:32:14:a0:f4:4b:22:40:f0:3f:1e:83:ce:48:b7:
                    be:a0:10:1f:36:dd:12:70:c2:c4:62:01:00:d9:2b:
                    c9:23:3d:dc:11:55:f6:07:f7:15:5f:33:47:6a:81:
                    e9:d9:62:50:90:98:40:b7:82:fa:32:cf:6f:a0:1a:
                    98:bf:c6:e7:ec:78:5e:6c:49:4e:93:f0:6a:02:76:
                    e5:fa:f3:31:26:d8:db:f5:06:73:d4:d8:11:9d:e7:
                    d6:d9:a5:97:1b:37:e1:de:5e:16:ed:23:ff:d2:e5:
                    b1:23:fd:4e:e0:94:06:f7:6c:c7:ea:96:49:db:70:
                    fb:65:18:23:ef:b3:ef:6b:5a:91:ca:40:78:54:b7:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:80:9B:D0:AB:A7:61:48:DA:CD:78:CB:C5:71:28:BA:5A:02:83:F6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bc94b20-c375-4f8e-8db2-a929e8e5404e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:88:1d:04:cf:30:a6:56:14:e5:b2:5b:15:5b:c1:39:95:
         78:4b:85:b9:cb:6d:27:06:4d:5a:d6:8b:d1:c5:ec:ca:3b:fc:
         a7:37:1a:01:39:6d:31:94:0a:ee:8f:91:02:96:cf:5d:0f:06:
         f1:3e:b4:57:1a:71:d8:70:5a:31:4e:a7:5b:8e:1e:50:4d:81:
         2b:95:66:ab:2e:54:d8:90:4a:60:fe:6a:1e:d5:93:ca:d3:fc:
         2c:f5:e0:9d:6b:0d:fc:10:e3:d6:f5:dc:84:55:c3:b5:24:b8:
         9d:cd:d0:54:c5:16:7b:a1:34:88:d7:20:67:8c:e7:b7:f4:ca:
         09:59:d5:d4:d1:62:d0:22:c2:a7:2c:8e:f1:30:9b:b6:6a:61:
         4d:e4:ff:15:87:82:ac:0e:33:80:ab:82:cb:92:c8:a1:37:07:
         b1:0e:bf:7d:e1:25:99:e8:1d:9b:c8:dd:93:b3:7a:b2:56:26:
         d4:a4:94:62:49:f3:73:76:b2:1c:cc:b9:2c:55:ff:21:c4:ca:
         20:02:2a:9f:79:15:95:02:a6:7b:5c:39:9b:18:eb:ae:a2:5a:
         56:ff:c2:3b:b3:b4:eb:c3:56:3c:9e:6d:48:0c:66:d3:aa:29:
         bc:94:73:7e:ad:22:12:21:d1:a8:d0:c1:71:cc:43:b5:61:dc:
         4a:a6:0c:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDVKGCqVSnSaltsQ5l3GFqXcEFE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTk0MzE3WhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDM1OGFmNTFhN2NiMTFmOWE1MWU2ODQ5NDBlMGRkYTc3
ZTAzYjFiYWVlYmY1OGFhOWI5ODNkZDA1MzkzNGU3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCx0oGVb+/31kdv5Nv2+6fko8TECWI8Xg/2jHPCf5jfGWF5
F62pA4i0amxDT7yY5Sgjr3Z5tds/od+rNTxPQZedcy1ff4Mh08NxAZXIa/TfcQg5
1b0TbN22/QszCyq8BI2SG2DQJJwC3UwyINamDKsjeDWwRItPk6gyFKD0SyJA8D8e
g85It76gEB823RJwwsRiAQDZK8kjPdwRVfYH9xVfM0dqgenZYlCQmEC3gvoyz2+g
Gpi/xufseF5sSU6T8GoCduX68zEm2Nv1BnPU2BGd59bZpZcbN+HeXhbtI//S5bEj
/U7glAb3bMfqlknbcPtlGCPvs+9rWpHKQHhUt7vXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXYCb0KunYUjazXjLxXEouloCg/YwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFiYzk0YjIwLWMzNzUtNGY4ZS04ZGIyLWE5MjllOGU1NDA0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN4jswDQYJKoZIhvcNAQELBQADggEBADjNiB0EzzCmVhTlslsVW8E5lXhL
hbnLbScGTVrWi9HF7Mo7/Kc3GgE5bTGUCu6PkQKWz10PBvE+tFcacdhwWjFOp1uO
HlBNgSuVZqsuVNiQSmD+ah7Vk8rT/Cz14J1rDfwQ49b13IRVw7UkuJ3N0FTFFnuh
NIjXIGeM57f0yglZ1dTRYtAiwqcsjvEwm7ZqYU3k/xWHgqwOM4CrgsuSyKE3B7EO
v33hJZnoHZvI3ZOzerJWJtSklGJJ83N2shzMuSxV/yHEyiACKp95FZUCpntcOZsY
666iWlb/wjuztOvDVjyebUgMZtOqKbyUc36tIhIh0ajQwXHMQ7Vh3EqmDME=
-----END CERTIFICATE-----
Generated at Sat Oct 18 02:16:36 2025 by rpki-client