Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/493d3987-cce9-4f85-b35a-8cbea921d8e7.roa
File:                     493d3987-cce9-4f85-b35a-8cbea921d8e7.roa (raw, json)
Hash identifier:          J1YNdtal5SlZyiCsN3pvZ6rlSznnvhaw1WhaHpz5ZHY=
Subject key identifier:   7A:C0:B5:D7:72:A4:9F:78:FA:A9:25:24:FF:C1:66:71:71:68:84:92
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       127F932C2F46DBD7FD95DDB561F82ECB04189202
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/493d3987-cce9-4f85-b35a-8cbea921d8e7.roa
Signing time:             Wed 24 Sep 2025 18:28:24 +0000
ROA not before:           Wed 24 Sep 2025 18:28:24 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.35.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:93:2c:2f:46:db:d7:fd:95:dd:b5:61:f8:2e:cb:04:18:92:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 18:28:24 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=bc6ba054e9e57294f19937b1a2864b02631c169cc039e3552b1e2b1c6767d2e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:be:09:4e:8b:82:11:c8:a2:73:c8:44:db:
                    d1:1a:98:c8:0e:79:67:70:0c:b4:76:d0:f2:9b:64:
                    0e:4b:62:b1:a3:f1:96:c5:84:59:83:8d:4e:7e:68:
                    43:e6:f4:b8:67:37:b8:51:61:1c:e3:50:9e:51:3f:
                    3c:01:31:c5:95:ca:20:b0:ef:40:ee:60:f3:4c:1b:
                    a5:24:75:24:74:84:c7:81:45:a9:95:21:74:45:d5:
                    8c:4b:7e:97:b1:c3:b5:c0:4f:ef:16:76:77:bd:f8:
                    b8:6a:9b:6c:6a:b0:1c:99:1c:4e:3b:30:a3:a8:15:
                    71:9f:33:b9:03:ec:5b:16:97:da:10:7a:d9:45:73:
                    9e:64:d9:9d:a9:cb:7b:0a:b8:a3:21:b7:aa:61:1b:
                    1a:c6:4a:5b:c0:ae:e6:c9:e5:ba:3f:80:a8:ac:8f:
                    a4:b7:58:4a:27:8a:a8:f1:9d:20:54:39:f8:7a:d2:
                    fa:02:06:10:f5:ea:7f:88:54:47:0c:4e:53:94:4d:
                    f9:2d:c8:13:5d:4b:af:34:4b:32:42:b0:c8:cd:5e:
                    f5:79:a8:d9:20:ef:f9:6a:1d:97:bf:0c:e1:f1:7c:
                    11:ee:b3:60:b4:3e:6c:0e:13:34:2d:01:25:47:b5:
                    e5:c3:06:be:48:3f:91:dc:48:2b:58:e9:0d:30:cc:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:B5:D7:72:A4:9F:78:FA:A9:25:24:FF:C1:66:71:71:68:84:92
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/493d3987-cce9-4f85-b35a-8cbea921d8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.35.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:43:3b:be:8e:34:8b:db:45:ae:63:3f:65:9e:49:6c:76:7e:
         a8:4e:11:22:aa:16:05:9f:09:72:63:78:0c:fa:fe:de:ff:60:
         c0:86:30:3b:89:65:b9:80:4e:21:b5:22:40:53:06:d5:08:03:
         5d:a8:47:10:7f:26:d2:c3:1b:29:39:be:27:23:e2:0c:f3:8c:
         a9:dc:9c:68:43:cd:aa:21:81:e0:7d:c2:d5:45:5e:f4:59:86:
         2d:1e:12:92:ea:70:35:24:f8:42:14:29:e9:9f:a4:5f:3a:74:
         41:41:64:ba:ca:96:c0:ff:21:24:22:30:7d:a4:6a:53:7c:30:
         d3:c7:75:54:9c:a3:90:d6:e1:e6:77:7e:c1:00:51:5b:b8:42:
         bf:b3:fe:44:7d:69:7b:b7:47:3d:2c:45:37:1f:29:cc:7e:d5:
         5f:53:95:70:e7:de:65:3c:46:ae:3e:63:34:f8:07:81:2c:1c:
         6d:d9:00:d0:26:93:90:db:d6:af:f2:2d:96:05:70:7d:3f:a8:
         41:62:e6:ef:49:6f:ba:aa:47:f8:be:a1:49:7c:1f:77:a1:78:
         ad:d0:8e:c8:5a:e0:e0:71:4f:7b:e0:70:b1:98:8c:15:cd:f7:
         19:b3:b9:08:c3:65:83:3c:00:4d:e4:8c:0b:55:59:d0:1d:fe:
         d1:6c:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:26 2025 by rpki-client