Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/392edff3-c76d-4228-a340-23de06b2d1e3.roa
File:                     392edff3-c76d-4228-a340-23de06b2d1e3.roa (raw, json)
Hash identifier:          w48LWeO2naK02mEIQNT8zfF5C/Zx/vlTTPcRwCfoZ5k=
Subject key identifier:   16:18:B0:89:AE:CF:B9:02:09:D5:5C:6D:A3:88:8D:A3:B2:E0:C9:B3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5F94A7A64AA64F47224855497D5FC09D4C07CD06
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/392edff3-c76d-4228-a340-23de06b2d1e3.roa
Signing time:             Wed 24 Sep 2025 20:53:47 +0000
ROA not before:           Wed 24 Sep 2025 20:53:47 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:94:a7:a6:4a:a6:4f:47:22:48:55:49:7d:5f:c0:9d:4c:07:cd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:53:47 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=bb16e7f967ed2b26895922325dbfae4ca819ad7b8120cef6058f003d06a13356, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:e6:cb:1b:e9:0a:97:70:df:99:d2:f5:1f:
                    16:c8:d5:51:92:db:2e:56:76:de:a1:20:e4:dc:1e:
                    5e:c6:ce:0c:77:39:b3:1d:3e:22:22:ce:7e:b5:54:
                    99:ac:c0:cc:81:79:b5:6c:ef:9e:f2:a7:2d:22:94:
                    72:00:24:6b:fe:47:f2:35:b7:3d:4b:4d:49:8e:c9:
                    8e:5a:04:db:7b:1d:8e:3e:a7:e8:dd:92:f4:01:0d:
                    2c:66:1d:24:05:b7:3a:92:62:68:13:6b:75:e9:2c:
                    ba:9e:6b:11:33:68:25:bd:df:b9:2f:be:f1:c2:fa:
                    84:b3:36:db:ab:37:23:20:18:11:68:fa:73:47:9b:
                    61:41:36:c1:80:13:0b:50:50:2f:87:27:b8:6c:9a:
                    1c:42:bb:79:3c:5e:cb:5d:1a:89:4f:ab:f3:e6:51:
                    07:e3:1f:ac:95:dd:59:6c:f1:51:bf:c5:64:c5:57:
                    80:d3:90:5c:5c:ec:9c:e1:aa:0f:bb:be:d0:55:f6:
                    2a:0f:9f:98:a0:39:a3:c7:c7:9f:30:48:eb:5a:a9:
                    71:9a:76:82:d2:fe:f3:a8:46:72:47:5e:da:48:47:
                    e8:e5:50:46:60:8c:b5:01:47:7d:41:47:db:0e:81:
                    4c:b9:88:a1:f4:fe:5c:d4:13:b4:34:a1:2a:88:d8:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:B0:89:AE:CF:B9:02:09:D5:5C:6D:A3:88:8D:A3:B2:E0:C9:B3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/392edff3-c76d-4228-a340-23de06b2d1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:9b:f1:5b:d4:14:10:1a:dc:30:fa:d0:d7:59:3c:f7:32:
         8d:96:39:d2:20:8f:fc:8a:ac:5a:5b:7b:92:ea:ca:85:51:93:
         45:a3:fd:22:d4:a9:05:b5:af:95:22:de:0f:49:28:b9:1f:c0:
         9f:70:89:7b:f2:52:9a:0f:e5:a4:7c:2d:d4:60:f0:b9:71:60:
         18:e9:d7:09:a8:30:52:41:7a:7d:a3:88:d2:e8:fb:6f:39:30:
         ef:df:7b:5e:68:fc:4a:9c:b6:76:53:3c:eb:e1:2a:1a:a2:32:
         c1:55:c2:da:a6:46:e4:aa:ca:c5:4d:38:2e:06:48:20:aa:8d:
         35:59:14:17:34:6a:30:51:37:86:e0:f7:25:92:50:f9:b9:5f:
         56:08:90:89:84:8d:6a:8f:bd:85:9a:cd:11:49:cc:83:56:41:
         28:fc:77:ca:15:43:45:1d:9d:64:60:89:99:4a:01:dc:ec:e7:
         d2:5f:ec:1d:31:8c:56:78:54:87:f2:ee:88:7a:82:a5:e0:91:
         a0:59:74:19:d3:f4:f9:fd:5c:27:80:7c:8d:87:05:b0:25:d0:
         b0:c7:34:1b:94:02:f7:c9:f4:17:63:03:d9:a8:6f:37:9c:ec:
         d0:85:09:57:38:16:69:69:65:05:90:03:4a:15:43:ba:9a:b7:
         14:4b:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:59:46 2025 by rpki-client