Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa
File:                     37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa (raw, json)
Hash identifier:          SlE9IS3YJShhtHWlEhB4PEGAZkE61oM5cEPsTptH8eA=
Subject key identifier:   2D:E4:9C:B9:43:6E:A9:CD:69:C6:4E:D2:92:F6:60:00:F8:3C:C8:E2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0DC2B85580418CFAAD93CAF12BF52C6DF0784E69
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa
Signing time:             Fri 17 Oct 2025 22:42:09 +0000
ROA not before:           Fri 17 Oct 2025 22:42:09 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.240.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:b8:55:80:41:8c:fa:ad:93:ca:f1:2b:f5:2c:6d:f0:78:4e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 17 22:42:09 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=8ae2641810b270bff98fca7cb24598ded78fb3d0055d84fa011faf4713ce7519, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:04:32:ce:ed:c4:cb:e1:45:a7:f6:94:09:
                    2c:50:cc:ef:6c:43:d5:68:1f:c6:c3:29:37:53:eb:
                    c3:38:19:69:f8:e0:a6:22:db:0c:2b:fb:be:d0:81:
                    a0:76:2a:b4:b8:1f:87:fd:ac:10:90:68:23:3c:8f:
                    57:41:dc:a2:74:eb:42:23:65:01:17:c3:dd:9f:64:
                    f9:f2:e0:b4:73:aa:92:6d:35:5d:cd:1c:99:81:6c:
                    db:ab:b0:5d:ba:dc:df:29:bd:8c:0c:95:f2:27:04:
                    2f:b4:f7:3d:9e:75:75:13:15:59:f0:d0:a8:02:a5:
                    c4:4d:98:2e:f5:e8:1f:3b:d3:ae:79:74:0f:60:46:
                    26:0f:90:31:6b:62:a1:79:d7:ed:a2:cb:39:46:2d:
                    56:c6:f8:62:81:c7:e3:fa:c4:7b:dd:b8:c1:b3:55:
                    2f:71:2e:84:ce:84:1e:6b:25:43:ca:60:ec:a0:4a:
                    a5:40:8f:ad:4f:1c:70:f8:c5:77:9d:8c:13:ab:d6:
                    6d:0e:cb:d0:40:0b:91:65:01:26:ad:a2:77:aa:65:
                    10:c7:85:f5:b0:41:0d:68:fe:d6:9a:39:da:5a:be:
                    df:8d:05:2e:06:12:24:71:a9:de:50:95:9f:05:c2:
                    08:63:df:d2:cb:23:6e:af:56:9d:f4:76:51:58:96:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:9C:B9:43:6E:A9:CD:69:C6:4E:D2:92:F6:60:00:F8:3C:C8:E2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:33:55:b7:62:c3:26:81:72:8e:ff:24:f4:bb:2d:6d:62:
         0b:92:8f:8a:61:96:e4:19:ee:03:82:dd:87:e5:1b:0a:45:2c:
         d3:7e:f7:26:47:84:dc:a4:59:71:2c:72:56:85:5b:19:b9:b8:
         28:0b:d9:9d:18:46:b7:9c:2f:28:c6:0b:ae:a1:c2:bc:ea:f9:
         f2:3f:77:74:52:68:a3:5e:94:dd:eb:e7:de:48:62:b5:90:1e:
         07:77:d8:b1:4d:a9:d7:a5:e8:ef:34:1d:47:07:f5:fc:d0:76:
         72:13:c8:0f:5b:30:54:5c:58:40:a4:03:91:f4:1a:8f:1f:0d:
         f3:94:08:46:7f:3c:c5:0d:20:2e:fa:86:27:77:c4:f8:4b:ef:
         80:7c:ec:e6:94:cb:a3:d8:71:9b:f7:f8:20:39:66:4b:e9:7e:
         75:b4:e3:4f:b5:21:c7:ee:a0:b7:57:03:3d:46:16:58:b5:52:
         72:cd:db:25:16:a4:29:71:1e:08:6d:c9:d9:4b:e0:c5:17:5c:
         a1:78:a1:9f:8a:58:a5:74:ed:55:0a:22:49:5d:4b:f7:bd:db:
         41:56:a0:ce:e1:f8:d9:c7:2f:33:c6:8b:05:f4:b1:e5:4c:dd:
         29:a3:cd:66:c2:e2:d9:03:fc:05:76:08:ed:cd:7b:09:d7:b0:
         bc:31:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:18:19 2025 by rpki-client