Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/277f9116-e7ab-4d8f-9c9b-91ce0f3df467.roa
File:                     277f9116-e7ab-4d8f-9c9b-91ce0f3df467.roa (raw, json)
Hash identifier:          YjPwQu22X2irxHPLGs84L0kr4WOXSPjugoTE3i55q4U=
Subject key identifier:   18:DD:11:67:FE:93:CD:D5:BF:0C:B0:A9:34:F1:DC:D7:BE:77:10:C2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1F96DA74F1818B0C324A2596A59A5727A5F28DC5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/277f9116-e7ab-4d8f-9c9b-91ce0f3df467.roa
Signing time:             Mon 22 Sep 2025 22:17:01 +0000
ROA not before:           Mon 22 Sep 2025 22:17:01 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:da:74:f1:81:8b:0c:32:4a:25:96:a5:9a:57:27:a5:f2:8d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 22:17:01 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=7d06e5825c69f6f8f11b48d4193f78ed42b77cbc5c940f47cba7c8839e23e73e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:42:81:89:c6:42:4e:2d:dd:11:4b:15:e9:
                    4f:f4:dc:64:fd:66:d2:e4:96:dd:41:bd:66:fc:5a:
                    d1:51:da:ad:83:c7:8c:01:fb:d8:0a:a3:f3:48:91:
                    3b:ee:98:c3:26:1a:8c:ba:74:45:7a:bf:c7:76:09:
                    60:b0:1f:82:ef:b0:80:98:ce:ed:03:23:d4:56:4b:
                    83:ea:28:63:d4:6a:ad:fd:ff:25:55:d0:88:0c:65:
                    bf:98:1c:9b:dd:91:d1:83:2c:29:78:61:db:2a:8f:
                    13:47:58:ed:18:65:c0:e5:26:ae:14:5b:84:46:df:
                    4b:9b:b7:88:b4:88:5a:53:e3:24:09:be:c3:02:c8:
                    d4:66:d3:35:f6:c0:5a:8b:f7:85:8b:fc:35:04:55:
                    f6:c3:4b:eb:4a:2a:fc:71:96:1c:00:19:2e:43:9b:
                    a2:ff:24:92:a3:e5:33:32:7e:01:e5:a7:f4:38:da:
                    3b:73:47:64:2b:54:3e:57:53:0d:3d:37:e3:f0:fe:
                    f7:80:c3:24:d1:ee:ec:c2:78:3b:49:d3:31:74:77:
                    a5:5c:51:1f:bd:8b:f0:a7:3b:b7:ed:c8:09:88:97:
                    84:89:aa:dd:b9:bb:f0:b7:75:9f:9f:2e:30:45:d9:
                    25:a3:e7:e7:be:22:b3:81:59:67:26:fa:e8:f0:b2:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:11:67:FE:93:CD:D5:BF:0C:B0:A9:34:F1:DC:D7:BE:77:10:C2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/277f9116-e7ab-4d8f-9c9b-91ce0f3df467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:85:e0:c5:c8:4f:65:91:66:a0:86:95:48:87:ff:73:09:
         83:e6:b6:83:19:8e:db:c8:de:a8:18:70:a5:0b:dd:3d:7f:ca:
         71:a1:5e:54:4e:d3:c0:83:bc:7a:73:ae:94:96:1f:ce:e5:71:
         c4:9e:ca:14:e9:9e:44:6a:95:5b:04:99:d5:33:6c:58:fe:97:
         b0:10:de:5b:81:43:9e:9a:36:69:14:9e:f8:cd:59:c4:c3:c5:
         25:a4:2e:18:9a:6c:c0:3e:c8:16:81:08:45:36:f6:f6:61:12:
         a5:23:05:1a:87:b8:02:f1:59:36:68:3f:2a:dc:dd:5b:60:3e:
         72:9a:50:c4:84:e9:6a:ab:0b:72:a2:45:70:ce:26:fb:bf:87:
         55:39:c2:74:24:e2:ca:1b:6c:8a:04:a8:41:0d:48:87:cb:fc:
         23:8b:92:e8:ce:cd:31:72:dc:e0:bb:9d:23:61:82:5f:78:cd:
         ae:11:ab:3b:d8:76:c7:19:b9:8e:ee:55:d7:a2:d0:bf:9d:74:
         2f:46:42:79:5f:3c:70:75:14:8f:15:0b:74:f7:4d:aa:44:af:
         c5:16:e0:63:37:f3:c7:80:d7:b3:99:ea:4f:f3:14:13:d9:5d:
         70:65:9b:12:35:d2:1d:22:3d:00:5e:51:f2:87:db:a7:4b:46:
         38:f4:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:17:59 2025 by rpki-client