Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
File:                     26f01fa6-15d2-49a7-876d-51a9c30772e8.roa (raw, json)
Hash identifier:          sjPWAW51hJ5APQa1jTh9HFTy1n8ghbdr1WGFw94q/Ow=
Subject key identifier:   87:65:51:B8:66:A8:C6:F5:AC:59:70:34:9B:82:4E:E4:5A:1C:D6:DC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       23EC75D495C9A45DA977A6FC0BC2F6751BB9E9AA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
Signing time:             Fri 10 Oct 2025 00:30:47 +0000
ROA not before:           Fri 10 Oct 2025 00:30:47 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:75:d4:95:c9:a4:5d:a9:77:a6:fc:0b:c2:f6:75:1b:b9:e9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 00:30:47 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=38cf063484e159d33399aa81a75f08c3ff5b7339c55b142380eab9ff3375243c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:c7:2b:a8:55:42:f8:2e:cb:ba:e2:0d:11:
                    94:9b:50:55:c4:8b:10:28:7f:fe:39:46:11:8c:5b:
                    b0:23:a7:25:93:c0:e8:d1:f7:d6:d0:20:b9:24:95:
                    fc:73:86:56:b1:05:bc:47:97:4d:27:5d:0d:ea:9d:
                    85:e4:60:f2:b5:50:ff:b6:14:3a:cf:ec:9a:cf:61:
                    65:28:99:cf:c7:04:24:02:da:95:d7:e4:28:01:da:
                    36:f9:da:cc:6a:ec:d3:47:07:a0:3f:eb:c8:d4:c5:
                    b2:df:4b:fc:66:9a:a0:d0:37:05:ef:a8:f7:ee:80:
                    a1:8d:75:c5:cd:5a:81:2d:36:8d:4e:72:5d:7f:e8:
                    0b:69:72:c3:5f:3e:e9:3e:38:84:1f:04:d5:25:66:
                    1e:4c:2d:2c:7f:39:a5:c2:45:5b:78:97:dd:58:4a:
                    4b:8b:39:87:a8:98:e5:30:22:c8:59:8e:24:dd:48:
                    a0:f3:56:53:f8:60:0e:10:25:e3:35:60:a8:22:09:
                    58:38:f8:02:ed:7f:9c:97:79:1a:e4:13:c0:1c:e9:
                    02:b9:a0:b0:16:c4:bd:2f:70:24:6d:db:50:5f:35:
                    88:7a:ee:83:d4:83:c3:94:34:c4:ae:aa:d6:da:99:
                    01:22:a7:03:ce:91:28:28:ca:a1:76:20:3a:02:2e:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:51:B8:66:A8:C6:F5:AC:59:70:34:9B:82:4E:E4:5A:1C:D6:DC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ec:71:69:aa:30:d7:89:12:c9:23:54:4f:14:01:da:b3:a4:
         ab:e6:d2:64:1a:90:43:66:26:4e:bb:9c:09:bb:78:19:2e:d0:
         f6:a2:c1:49:38:aa:c8:1e:b6:88:5d:59:45:5a:39:6e:68:10:
         20:f1:b6:b7:be:13:34:99:b8:43:d5:09:61:cd:a1:9a:48:9e:
         ee:98:15:9f:b0:3b:d5:be:00:a7:63:b2:5a:40:73:76:09:2e:
         20:1f:27:41:bd:15:8f:57:40:4f:d4:d3:a4:a9:98:73:8a:b1:
         a1:8e:ac:b7:97:39:2e:4b:e0:fa:35:c7:f4:b9:ed:32:07:64:
         b6:a2:9a:41:1e:6e:33:d1:0f:c9:65:ca:44:bd:83:b8:aa:3f:
         02:87:e3:e7:a0:3b:44:8a:a3:86:ea:ea:ec:5b:f4:36:c9:5f:
         8a:86:ce:4d:03:95:33:ac:51:25:5c:0f:56:ce:ec:11:1b:29:
         b6:67:ad:d7:78:8e:e0:b8:79:01:aa:d6:e1:ec:cf:b7:35:37:
         a3:09:18:9d:5e:ef:7f:1b:39:c4:05:06:2f:a4:cd:8a:93:00:
         90:07:39:83:95:10:28:a6:77:1e:f8:22:a7:12:da:4f:ec:cc:
         8f:52:06:2b:83:85:2e:0e:13:8f:9d:e5:3a:0e:ee:37:3c:f5:
         46:f0:9e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:18:35 2025 by rpki-client