Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30f2754a-1959-4215-9f38-9abd74667001.roa
File:                     30f2754a-1959-4215-9f38-9abd74667001.roa (raw, json)
Hash identifier:          rbcMFppUx1ODFc643j3H4B9sK2s7KNzAHiIy/PiqnlA=
Subject key identifier:   30:B3:AC:40:8A:07:DC:8B:6D:25:8C:48:0E:96:C7:60:BB:AA:BB:90
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7BF32325057DA8E1DFCC56A5A93AAEB78336E7EC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30f2754a-1959-4215-9f38-9abd74667001.roa
Signing time:             Fri 10 Oct 2025 15:57:55 +0000
ROA not before:           Fri 10 Oct 2025 15:57:55 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.9.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f3:23:25:05:7d:a8:e1:df:cc:56:a5:a9:3a:ae:b7:83:36:e7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 15:57:55 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=4217e1a0f58e716d7f092fcac521c47dcca48fa04495d962d6bceca62012380b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:c9:0e:87:3e:67:e3:01:bf:f9:52:56:ac:
                    8e:79:f5:47:94:d0:d6:30:c8:08:43:67:ea:cf:e2:
                    57:b0:6e:66:0d:db:9c:91:0e:e8:cf:d4:e8:c1:51:
                    95:1b:32:09:55:f1:c5:31:7f:d5:25:cd:fc:56:3f:
                    c8:5f:01:56:44:b7:90:65:12:0d:f8:9a:68:a9:68:
                    1b:33:23:97:c3:74:e0:aa:24:42:ca:d6:1c:85:75:
                    08:8f:3b:88:d8:78:d9:ab:22:c8:69:a9:1c:66:ba:
                    72:eb:12:ee:02:4c:7d:d6:98:ba:5f:1f:3f:f0:f0:
                    00:94:4d:77:4e:5d:f2:1e:33:33:5a:6d:b3:d9:85:
                    4f:01:fb:bc:c9:cc:b9:21:e9:7c:87:35:f9:59:ab:
                    76:8a:ae:58:27:38:f8:2e:3e:b4:69:8d:a3:a0:3e:
                    04:10:a7:76:53:81:2c:60:80:b6:2a:93:92:6a:04:
                    98:ed:26:1c:18:fe:18:5f:30:6f:fa:89:c2:a1:59:
                    dc:7d:ec:97:a1:93:4d:41:6d:d2:26:e3:5a:99:9e:
                    1f:55:dc:41:d7:62:ba:b6:b0:fb:3e:a2:13:9e:d6:
                    01:85:45:ec:e4:23:4c:79:d1:d0:ce:2f:73:f6:ca:
                    24:2a:0a:50:03:a4:9b:2c:47:a5:aa:8a:6b:51:2e:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B3:AC:40:8A:07:DC:8B:6D:25:8C:48:0E:96:C7:60:BB:AA:BB:90
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30f2754a-1959-4215-9f38-9abd74667001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:e5:8e:3a:d7:11:a3:bf:a1:e9:88:79:55:93:68:5a:a2:
         00:ca:67:01:f3:11:62:21:2e:d4:15:05:8d:df:ce:85:89:cb:
         68:32:b9:31:7e:64:e6:c6:ad:96:2b:87:d3:05:06:a1:8a:2b:
         05:20:ef:cb:c5:25:ce:07:5b:51:00:fa:04:9c:36:6f:96:29:
         20:96:ae:b6:09:20:8b:e6:1e:1c:42:26:0d:90:51:2e:d0:6f:
         5a:ef:0c:de:f7:0c:6a:36:fa:69:c2:f6:1b:fb:11:10:7f:2a:
         7d:41:6b:c2:e3:e7:db:2d:49:f9:68:47:e6:3e:e3:f2:ae:43:
         3c:f1:1e:15:8d:e5:63:11:f7:9e:67:90:06:d7:53:58:f8:4c:
         41:6c:6e:73:4b:44:96:11:98:4a:09:26:7a:10:64:1d:71:55:
         ee:b5:72:08:26:17:39:fc:51:bb:e8:c9:d6:b1:e1:db:4f:65:
         c7:11:7d:05:65:d7:3b:26:15:ed:d4:30:25:98:40:df:e2:79:
         fd:19:d3:b7:aa:7e:97:2f:e6:c5:24:98:18:81:d2:36:d2:9e:
         66:81:3a:16:d7:30:e8:d4:00:95:93:12:db:1c:d7:8a:ed:57:
         13:d6:e8:68:85:57:43:08:c2:58:29:3d:d7:6a:b3:e2:3d:19:
         f6:a9:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:19:44 2025 by rpki-client