Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51ba3500-2dbc-4741-bc21-eeff17b75e5d.roa
File:                     51ba3500-2dbc-4741-bc21-eeff17b75e5d.roa (raw, json)
Hash identifier:          b7z8NXhbaRz4SrMFA/0oR9A2j3WOkFgDta2R/I7Fcj8=
Subject key identifier:   39:08:15:04:6E:F4:0D:EF:24:C7:37:52:9E:CD:C2:67:32:24:D2:CE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       668A69CD278EAB0DDC84219635E9305D4704F300
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51ba3500-2dbc-4741-bc21-eeff17b75e5d.roa
Signing time:             Thu 16 Oct 2025 20:32:31 +0000
ROA not before:           Thu 16 Oct 2025 20:32:31 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:69:cd:27:8e:ab:0d:dc:84:21:96:35:e9:30:5d:47:04:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 20:32:31 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=66ce60f2aa5b60ada0ee801818513a99de650649c945a99705abf1d28a5a4f7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:90:30:c7:77:49:6b:da:b2:b6:54:eb:40:
                    28:32:b0:2d:9f:36:bd:f3:d0:da:99:5d:dc:ea:31:
                    72:6d:74:5c:b6:e0:e9:ae:5d:98:3d:a0:62:27:f5:
                    09:d1:8b:c0:3c:04:bb:72:8c:33:c2:03:d8:b7:3f:
                    ff:57:61:5f:44:6a:7e:9c:56:6f:f8:56:b8:e5:3e:
                    b5:db:7f:9a:bd:37:28:0c:4f:e9:1b:6d:22:c1:7a:
                    22:e1:93:c4:0a:a3:64:bf:2d:10:e1:59:75:1a:45:
                    b9:92:c5:9f:54:01:43:da:93:cb:a3:a3:b6:f0:4a:
                    5b:2c:5e:8c:64:27:63:f5:88:fe:b4:5f:1d:8e:28:
                    b9:0a:07:82:7f:55:e2:c2:d0:51:a1:00:1e:de:25:
                    28:e3:80:5a:24:d0:78:69:33:43:98:46:4c:b9:eb:
                    f5:32:df:8c:0c:9c:a9:73:4a:7f:a1:5a:58:75:3b:
                    7e:d1:fb:9a:cd:84:56:ff:7a:12:62:6d:dc:e0:0e:
                    b8:03:d8:ec:3e:f7:e0:43:dc:6e:f7:bb:52:75:3f:
                    6d:e3:5a:18:3b:7d:69:12:a0:e0:61:e8:48:a1:31:
                    b4:f6:1f:0c:33:0e:93:e7:4c:28:cb:b5:9d:fb:e0:
                    4f:92:28:54:3b:47:7a:b5:b4:ae:1c:0c:9e:28:ea:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:15:04:6E:F4:0D:EF:24:C7:37:52:9E:CD:C2:67:32:24:D2:CE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51ba3500-2dbc-4741-bc21-eeff17b75e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:80:42:29:48:02:9e:90:f1:8e:ac:24:fe:c3:af:68:14:76:
         21:c9:a5:f8:62:18:04:d5:bb:c4:e8:ff:85:a1:4d:b2:76:f8:
         85:4f:ff:00:fe:57:0d:62:c2:2e:86:1d:68:a6:b7:b0:cb:14:
         5b:35:ce:6d:b8:f2:23:0a:38:e3:72:7a:33:b6:84:5e:47:ab:
         f6:97:ef:c8:70:91:6f:02:75:46:2e:6a:d9:65:c8:66:9e:23:
         4f:be:90:10:64:12:31:55:c6:4a:46:fa:ee:fa:ee:cd:96:be:
         29:85:ca:e3:f9:25:dd:77:59:42:37:49:d5:94:82:20:eb:aa:
         19:26:4c:2a:51:fe:15:37:a4:f7:c8:0b:ea:94:2a:1a:fb:af:
         57:86:27:4b:74:c3:c6:74:af:c1:28:55:e4:3b:78:ae:02:fd:
         f7:7f:fe:48:44:e1:9d:30:52:c5:0b:6c:0c:20:ac:06:e5:a1:
         a0:7f:18:55:45:c2:2d:76:eb:97:0e:fa:4b:ca:25:07:06:96:
         98:fd:51:09:b3:ab:2e:c4:ba:7e:74:71:79:9a:cb:50:5a:4f:
         a6:b3:b0:e8:ac:5a:2a:a2:ee:17:3c:10:7e:5b:ea:f0:46:b8:
         77:96:7c:9e:ce:2b:ed:d8:c9:67:b7:f8:d2:13:49:d1:b2:5c:
         de:ac:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:12:33 2025 by rpki-client