Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fcf79ed-c6f3-4dbe-964b-b308ed35195f.roa
File:                     2fcf79ed-c6f3-4dbe-964b-b308ed35195f.roa (raw, json)
Hash identifier:          SHO2Uw7U1ERQG6STalEQrbBfB0ZMrzr+/94lAZkul68=
Subject key identifier:   CA:1C:03:B4:F8:36:CF:E8:30:F4:E7:06:E8:94:40:A3:86:CA:AE:2D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       635668B5CD58CF486E5A59FA8CB308BF532BFFE0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fcf79ed-c6f3-4dbe-964b-b308ed35195f.roa
Signing time:             Wed 24 Sep 2025 21:42:31 +0000
ROA not before:           Wed 24 Sep 2025 21:42:31 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.66.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:56:68:b5:cd:58:cf:48:6e:5a:59:fa:8c:b3:08:bf:53:2b:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 21:42:31 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=711fd3a2dd8ac1876c4c8846fb5b445e48be293ba59603425735d1ef58ef118b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:44:3f:b1:f9:bc:ab:99:e6:ff:33:6a:ca:
                    27:d4:a6:e7:28:ca:8a:5f:ad:95:4b:0d:c9:56:af:
                    3b:f9:bf:28:62:f0:d7:25:73:fe:81:f2:5e:3f:ed:
                    3b:64:65:37:12:3d:ee:39:11:31:4c:5c:f8:e3:b5:
                    21:a6:ac:4c:6e:6d:09:7e:0a:ad:20:8c:83:81:72:
                    83:88:cc:92:61:f3:0a:52:69:1b:f7:54:88:24:e3:
                    22:de:cc:62:12:f5:61:8f:dc:43:e4:2d:62:88:54:
                    1c:42:35:9a:e8:7b:f4:8c:64:13:c4:99:c0:98:0d:
                    06:30:6b:29:b9:7e:f1:71:a4:9a:ab:c4:48:3f:80:
                    74:e1:05:05:fe:95:5a:ce:0f:a4:1f:18:44:a5:25:
                    6d:06:c5:f4:b3:98:c5:68:2d:a2:97:47:e7:dd:22:
                    fe:74:c4:ce:fb:f6:0c:78:4e:69:41:4c:44:13:df:
                    00:a0:8e:51:ed:8b:a5:88:57:cb:4a:15:e4:d9:75:
                    81:9c:98:37:dc:a6:15:42:81:f6:2c:cd:05:f4:5c:
                    ac:ed:81:70:c3:02:b8:ad:cb:ae:85:04:6e:34:20:
                    fe:33:60:07:bb:df:ba:70:09:ac:a6:40:33:c4:c8:
                    b4:e3:61:b2:7a:44:6b:b4:5c:8d:fb:16:55:e5:d1:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:03:B4:F8:36:CF:E8:30:F4:E7:06:E8:94:40:A3:86:CA:AE:2D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fcf79ed-c6f3-4dbe-964b-b308ed35195f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.66.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:91:54:ea:ae:94:01:86:93:d6:ad:f4:c0:76:39:fb:85:22:
         b1:96:a7:97:81:a7:19:d6:4d:ab:55:7e:22:db:3b:b8:a3:84:
         cf:64:90:3b:57:d6:ba:a6:d4:71:b3:22:43:68:19:3b:fb:a7:
         d7:02:7d:f5:0f:f3:a6:ec:57:bc:78:a9:13:7f:9d:eb:ed:25:
         5b:81:7b:60:8a:2d:34:8f:60:4b:da:4b:72:14:8d:a5:9d:80:
         3f:d6:cc:a6:84:f3:0f:fe:19:3b:4a:83:41:50:0b:9c:82:59:
         18:13:21:d5:50:64:9c:88:b9:a6:f3:dc:8e:4b:48:1b:ef:25:
         e1:e6:f4:f3:af:3e:0a:60:e6:f6:a8:cb:ab:56:8a:81:9d:87:
         9a:06:30:92:3e:d6:2f:7d:6d:e7:63:18:1f:c1:62:8d:ff:6f:
         eb:e8:86:31:26:a5:e8:a2:8f:32:6d:8e:5f:35:a9:19:b9:54:
         b4:54:54:7b:b3:85:10:8f:bf:23:02:80:e4:5f:8b:ec:0f:95:
         99:4d:25:fc:bb:f6:e5:5c:37:a0:e1:3c:7d:71:d3:9f:3f:f1:
         8d:2f:54:36:ec:f0:b5:af:96:24:5f:88:4c:3c:be:a5:ca:61:
         ca:ef:1a:02:32:58:8f:f3:04:98:7a:15:dd:48:a3:b6:2c:a2:
         58:48:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:33 2025 by rpki-client