Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29634c67-7a26-4d18-89ef-aee114e24c3c.roa
File:                     29634c67-7a26-4d18-89ef-aee114e24c3c.roa (raw, json)
Hash identifier:          5k5wkaVgwwTTXKFzmn5g3/jpo7JHm9iaAlLq4tIMD2A=
Subject key identifier:   9E:34:91:1E:B3:18:45:A6:E6:74:B0:7C:FB:AA:CF:87:6C:42:4F:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       193E214A5B7E7BE58412A900EDEE3741EA139A4D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29634c67-7a26-4d18-89ef-aee114e24c3c.roa
Signing time:             Mon 22 Sep 2025 22:16:56 +0000
ROA not before:           Mon 22 Sep 2025 22:16:56 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3e:21:4a:5b:7e:7b:e5:84:12:a9:00:ed:ee:37:41:ea:13:9a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 22:16:56 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=753f4bb3d100f3befad5b13aa6f06d37f7ca1454047360e4aff3b323d34bbf54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:00:ac:b2:1f:6d:a3:93:df:cc:48:32:92:
                    ac:ee:3b:61:4f:c0:9f:8a:ce:f6:7f:c1:aa:1b:28:
                    90:6a:04:ae:be:d5:37:63:a5:8e:3a:7c:67:7d:ba:
                    99:dd:cf:82:09:b9:36:61:9a:da:9c:c9:55:c3:54:
                    75:67:2d:3f:bc:73:a0:53:e5:6c:89:53:2b:81:df:
                    09:3a:f6:67:3d:56:dd:98:26:6b:1a:cc:9e:5c:d6:
                    42:21:76:a3:7c:6d:ee:77:2d:9e:a2:51:f5:85:aa:
                    a6:05:b8:79:c8:a0:5e:57:85:29:b1:fc:78:f8:61:
                    6b:97:98:08:ee:82:20:86:d8:da:b6:c7:3d:2f:ce:
                    22:de:da:a2:c2:8b:7f:f5:dc:6c:d1:c8:62:c7:ed:
                    9d:35:71:22:20:dc:63:fc:b1:08:ba:94:eb:60:38:
                    cc:d6:98:84:f4:4f:21:69:74:4c:aa:28:65:cb:f3:
                    09:6e:29:ab:30:ae:51:32:58:da:b4:76:d5:5a:7d:
                    37:92:7b:41:79:bc:95:ad:73:c5:80:df:8f:ff:a3:
                    ab:ec:82:e9:23:a8:da:ac:ac:96:03:c2:49:1e:81:
                    38:9c:ed:fe:47:54:94:c3:1e:43:29:9a:d8:28:12:
                    3e:33:06:11:39:b0:d6:3e:2a:4c:3c:03:47:42:6b:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:91:1E:B3:18:45:A6:E6:74:B0:7C:FB:AA:CF:87:6C:42:4F:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29634c67-7a26-4d18-89ef-aee114e24c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:a2:b6:a0:64:0f:46:91:e3:89:70:f2:f8:4f:46:82:15:
         aa:5e:5c:ab:81:d2:ba:f7:9e:90:87:67:f5:f3:02:fd:6c:dc:
         60:aa:e0:49:ad:b6:70:f7:c8:fa:40:67:6a:26:ea:06:75:26:
         52:b3:87:eb:67:6a:b4:24:9a:4f:5b:fa:0e:b2:45:cf:62:ab:
         62:80:cc:79:4a:45:3b:2f:c9:f6:87:cc:fe:24:87:a4:4c:2f:
         2d:36:11:a5:3a:eb:2b:b6:34:60:04:76:45:cd:b4:46:91:e9:
         13:9a:47:7a:4b:67:82:25:13:30:79:73:63:c5:dd:02:e1:2c:
         85:7f:a5:83:7f:81:5e:cc:c4:33:8d:e0:aa:b2:28:74:e5:ea:
         cf:9b:5c:a7:03:f0:48:bd:05:56:fc:64:d5:86:d3:82:c4:c9:
         4a:53:e2:0a:a5:fd:0f:9c:15:af:52:22:08:95:c1:32:b1:73:
         ab:b7:7a:a4:4a:a3:00:84:ab:6e:16:78:0e:54:29:a6:ad:eb:
         fe:40:95:3a:15:a9:e5:55:5d:02:56:29:80:f1:c7:85:fb:a3:
         f4:d2:da:af:cd:24:c5:2d:8a:b9:dd:5a:8e:31:a1:2c:c3:f8:
         c6:cc:7d:26:22:80:06:30:6e:b4:52:84:5f:c5:e2:4c:6d:5e:
         53:c8:67:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGT4hSlt+e+WEEqkA7e43QeoTmk0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIxNjU2WhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NTNmNGJiM2QxMDBmM2JlZmFkNWIxM2FhNmYwNmQzN2Y3
Y2ExNDU0MDQ3MzYwZTRhZmYzYjMyM2QzNGJiZjU0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJZACssh9to5PfzEgykqzuO2FPwJ+KzvZ/waobKJBqBK6+
1TdjpY46fGd9upndz4IJuTZhmtqcyVXDVHVnLT+8c6BT5WyJUyuB3wk69mc9Vt2Y
JmsazJ5c1kIhdqN8be53LZ6iUfWFqqYFuHnIoF5XhSmx/Hj4YWuXmAjugiCG2Nq2
xz0vziLe2qLCi3/13GzRyGLH7Z01cSIg3GP8sQi6lOtgOMzWmIT0TyFpdEyqKGXL
8wluKaswrlEyWNq0dtVafTeSe0F5vJWtc8WA34//o6vsgukjqNqsrJYDwkkegTic
7f5HVJTDHkMpmtgoEj4zBhE5sNY+Kkw8A0dCa/uVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnjSRHrMYRabmdLB8+6rPh2xCT1gwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI5NjM0YzY3LTdhMjYtNGQxOC04OWVmLWFlZTExNGUyNGMzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIS7kAwDQYJKoZIhvcNAQELBQADggEBAHjqoragZA9GkeOJcPL4T0aCFape
XKuB0rr3npCHZ/XzAv1s3GCq4EmttnD3yPpAZ2om6gZ1JlKzh+tnarQkmk9b+g6y
Rc9iq2KAzHlKRTsvyfaHzP4kh6RMLy02EaU66yu2NGAEdkXNtEaR6ROaR3pLZ4Il
EzB5c2PF3QLhLIV/pYN/gV7MxDON4KqyKHTl6s+bXKcD8Ei9BVb8ZNWG04LEyUpT
4gql/Q+cFa9SIgiVwTKxc6u3eqRKowCEq24WeA5UKaat6/5AlToVqeVVXQJWKYDx
x4X7o/TS2q/NJMUtirndWo4xoSzD+MbMfSYigAYwbrRShF/F4kxtXlPIZ74=
-----END CERTIFICATE-----
Generated at Sat Oct 18 04:21:35 2025 by rpki-client