Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4932cc51-43ac-4217-bcf4-08aa5d993e1e.roa
File:                     4932cc51-43ac-4217-bcf4-08aa5d993e1e.roa (raw, json)
Hash identifier:          f0sY9pPZsy8fCWYauQpDGGDVCZNKHsZjnAKrQktjJ54=
Subject key identifier:   22:E1:1A:2C:A7:35:DC:E4:A8:AB:82:A5:87:3E:93:9F:A4:8C:A6:A6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6675551F2551BB2FBF2FF3FDD7A9E7873EB6719B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4932cc51-43ac-4217-bcf4-08aa5d993e1e.roa
Signing time:             Mon 22 Sep 2025 20:52:02 +0000
ROA not before:           Mon 22 Sep 2025 20:52:02 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.173.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:75:55:1f:25:51:bb:2f:bf:2f:f3:fd:d7:a9:e7:87:3e:b6:71:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 20:52:02 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=07a4b67ce76d1078b437c4d0fe226c268e291541c37d2f7cd6aa823d78b86a74, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:02:c2:8f:38:2e:58:b9:45:b7:f7:4d:37:
                    4f:1d:67:d1:e4:51:38:6a:f3:6a:fe:0d:ca:05:16:
                    2d:c5:83:c9:27:c1:a7:cc:fc:37:f2:70:b0:77:09:
                    39:b9:53:ba:68:6c:9b:87:84:25:e5:e5:f4:81:5f:
                    17:04:fb:7d:ef:b9:c9:c4:b2:db:1f:1e:d3:1e:20:
                    9f:bd:50:05:a0:a3:74:e2:65:14:be:24:e0:62:72:
                    f8:2b:83:cd:5d:b3:bf:81:5d:76:d1:b2:0e:af:ba:
                    12:39:ac:a6:09:50:3b:02:39:c3:25:a7:18:91:9e:
                    5f:95:c4:1b:df:9a:f3:c4:7a:1b:aa:3a:e6:2e:6a:
                    2c:fe:5c:ca:9a:96:df:ac:04:86:63:9a:fa:be:d8:
                    74:32:dc:7c:ab:3d:bd:06:2b:8b:79:00:2f:e2:a6:
                    87:e5:40:d3:f5:29:a8:39:19:0a:c2:11:5f:02:67:
                    ac:67:0c:17:46:e6:8b:9a:a9:30:01:74:de:1a:6d:
                    23:4d:ce:16:8f:4d:72:ec:d3:a7:df:ea:50:23:08:
                    4e:f4:e7:65:0b:2a:37:08:22:d6:b2:af:0e:5a:ee:
                    3e:c1:28:d7:94:91:ac:e7:65:c3:a8:bf:d2:b0:7f:
                    46:e5:cb:53:8d:e1:23:6d:eb:39:c2:63:9e:cc:38:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E1:1A:2C:A7:35:DC:E4:A8:AB:82:A5:87:3E:93:9F:A4:8C:A6:A6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4932cc51-43ac-4217-bcf4-08aa5d993e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.173.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:05:5e:e5:ab:8f:5c:ae:ea:85:63:b8:5b:b6:17:19:44:8c:
         d6:47:c7:cb:e4:66:02:b7:72:31:fc:c7:1a:d9:cb:a9:72:ed:
         bc:ab:0a:38:c3:fc:7b:8d:21:f0:e5:c7:0e:57:9b:3e:99:a3:
         7e:2a:80:d5:bd:de:63:16:5d:48:00:69:04:df:98:82:5a:4b:
         8b:8c:7a:f2:74:fa:b5:e3:78:95:3e:54:39:61:db:5d:a0:95:
         a4:95:b7:a5:bf:8c:96:9c:78:08:7d:dc:53:ec:a7:07:5d:06:
         5d:06:89:16:b1:c9:f3:b4:3b:bf:c9:86:7e:4c:de:f4:f9:13:
         73:31:0a:54:5d:2e:c3:8b:5f:4f:61:f8:a2:e6:11:ba:ff:7a:
         eb:dc:e8:16:aa:95:a4:7f:de:75:94:6f:32:26:24:a4:46:99:
         a0:e5:1e:2e:02:b1:8d:44:d2:a4:31:a0:1b:a0:09:5d:e6:26:
         e3:17:ef:2e:d8:c0:4e:b8:57:8e:ad:db:8a:73:08:b6:af:4d:
         d8:0e:59:bd:35:4b:5b:f5:2d:36:03:49:21:d7:f2:34:ba:08:
         be:86:29:f3:51:55:2a:f3:87:42:bf:96:46:60:88:79:6d:02:
         dc:fe:98:2e:8f:0b:0c:60:75:ee:8f:de:32:13:3d:ea:a9:2f:
         c9:4a:ce:d0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZnVVHyVRuy+/L/P916nnhz62cZswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA1MjAyWhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwN2E0YjY3Y2U3NmQxMDc4YjQzN2M0ZDBmZTIyNmMyNjhl
MjkxNTQxYzM3ZDJmN2NkNmFhODIzZDc4Yjg2YTc0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWlQLCjzguWLlFt/dNN08dZ9HkUThq82r+DcoFFi3Fg8kn
wafM/DfycLB3CTm5U7pobJuHhCXl5fSBXxcE+33vucnEstsfHtMeIJ+9UAWgo3Ti
ZRS+JOBicvgrg81ds7+BXXbRsg6vuhI5rKYJUDsCOcMlpxiRnl+VxBvfmvPEehuq
OuYuaiz+XMqalt+sBIZjmvq+2HQy3HyrPb0GK4t5AC/ipoflQNP1Kag5GQrCEV8C
Z6xnDBdG5ouaqTABdN4abSNNzhaPTXLs06ff6lAjCE7052ULKjcIItayrw5a7j7B
KNeUkaznZcOov9Kwf0bly1ON4SNt6znCY57MOO/VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIuEaLKc13OSoq4Klhz6Tn6SMpqYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQ5MzJjYzUxLTQzYWMtNDIxNy1iY2Y0LTA4YWE1ZDk5M2UxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASrSowDQYJKoZIhvcNAQELBQADggEBAK0FXuWrj1yu6oVjuFu2FxlEjNZH
x8vkZgK3cjH8xxrZy6ly7byrCjjD/HuNIfDlxw5Xmz6Zo34qgNW93mMWXUgAaQTf
mIJaS4uMevJ0+rXjeJU+VDlh212glaSVt6W/jJaceAh93FPspwddBl0GiRaxyfO0
O7/Jhn5M3vT5E3MxClRdLsOLX09h+KLmEbr/euvc6BaqlaR/3nWUbzImJKRGmaDl
Hi4CsY1E0qQxoBugCV3mJuMX7y7YwE64V46t24pzCLavTdgOWb01S1v1LTYDSSHX
8jS6CL6GKfNRVSrzh0K/lkZgiHltAtz+mC6PCwxgde6P3jITPeqpL8lKztA=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:16 2025 by rpki-client