Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55c4081b-286a-4a25-b893-7160dd735422.roa
File:                     55c4081b-286a-4a25-b893-7160dd735422.roa (raw, json)
Hash identifier:          9sqBWRSy6+vXVz6g04c8EdGpDZqmnm7Fn/a+8hhgbRA=
Subject key identifier:   9F:58:05:3F:D5:DF:8E:F8:90:A5:24:4C:5E:17:E5:28:C9:23:3E:22
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62E6E3AE67B717F609765857F3F3DA1D7B32D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55c4081b-286a-4a25-b893-7160dd735422.roa
Signing time:             Mon 22 Sep 2025 21:37:03 +0000
ROA not before:           Mon 22 Sep 2025 21:37:03 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e6:e3:ae:67:b7:17:f6:09:76:58:57:f3:f3:da:1d:7b:32:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 21:37:03 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=c6d132f9f9d9cf628305bdf9c5dc09543bdfc79487edb5895c855cac0338fb17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:9e:f8:6f:b0:71:6a:d5:6d:44:9e:ef:28:
                    fb:af:12:2d:65:7c:64:4b:2f:39:05:de:5c:e6:48:
                    f0:66:ac:30:6a:3b:2a:03:07:e8:dc:71:6d:17:dc:
                    d8:9f:17:60:87:c7:00:94:c8:a3:a9:1d:3d:85:56:
                    3f:0e:d2:92:85:c2:0b:22:44:c2:74:9d:ee:db:5a:
                    06:69:0b:c9:d5:c2:88:a7:d9:45:e9:87:96:c5:f8:
                    42:24:36:21:a5:5c:f7:35:13:0a:6c:ba:a6:82:8a:
                    bb:80:a0:8d:63:fc:0e:a0:b6:7c:44:47:b6:2a:91:
                    36:ca:21:b0:d3:df:35:73:0b:3e:ec:f0:01:f5:7e:
                    7a:de:5b:2f:eb:18:19:46:6a:9a:a8:4f:0f:83:c5:
                    e5:33:f5:03:ea:2c:94:e4:c7:76:e6:fd:54:6d:cb:
                    11:c5:42:9e:73:f3:13:3b:62:25:a9:00:e4:3c:2a:
                    a4:c8:01:14:f7:b0:d7:d5:4e:8f:47:c9:39:90:b1:
                    3c:c1:0e:c1:b7:f6:a6:aa:40:95:d9:37:e4:10:eb:
                    36:df:aa:05:11:79:f8:27:89:2e:de:bf:93:58:16:
                    07:19:ae:a3:68:e6:47:2d:a3:30:98:43:5a:9c:0f:
                    0d:77:e5:c2:6d:36:28:be:76:19:68:e0:ec:d3:a6:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:58:05:3F:D5:DF:8E:F8:90:A5:24:4C:5E:17:E5:28:C9:23:3E:22
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55c4081b-286a-4a25-b893-7160dd735422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:07:7f:4d:11:2e:59:d3:b1:16:2e:24:dc:bd:ee:1f:3b:34:
         64:af:ee:95:c7:da:ab:4f:7f:2a:3a:f3:18:6a:8f:b9:3e:ae:
         70:d7:65:52:14:0e:e4:a3:61:a8:73:a2:4e:f2:1d:48:eb:58:
         9c:f4:b4:dd:ee:3b:f9:ba:64:ea:40:9b:79:fb:42:29:0b:2a:
         3a:69:31:70:bd:52:76:2c:97:7d:54:10:7f:83:3a:c1:dd:6b:
         fe:8b:61:19:12:bc:5c:0d:02:8f:4f:ac:cf:99:1e:1a:ed:41:
         eb:20:71:91:30:fc:06:69:9a:2e:d7:da:4a:ac:92:e9:b8:ec:
         3f:e2:b1:e9:83:11:4f:66:e5:47:07:58:29:dd:87:37:56:4d:
         95:9a:40:88:18:d4:ae:fa:06:0e:f1:74:1c:40:ab:a9:e7:e4:
         98:4d:da:37:17:1f:0f:bd:86:3b:9c:8a:f7:cb:8b:57:13:bb:
         ad:f4:d7:63:91:6d:1c:4a:46:a5:e5:45:86:22:32:8d:d5:79:
         49:ea:d6:5c:3b:89:36:74:9c:93:91:74:74:05:32:cc:04:e0:
         89:ec:eb:79:d8:3c:b6:af:b8:8d:8c:e0:fd:a9:9e:1b:84:5d:
         43:fe:59:07:f9:84:c8:98:65:ef:f5:b2:27:4e:d4:66:80:80:
         81:c9:00:08
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITYubjrme3F/YJdlhX8/PaHXsy2TANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx
ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjIyMTM3MDNaFw0yNTEwMjcyMzU5NTla
MHoxSTBHBgNVBAUTQGM2ZDEzMmY5ZjlkOWNmNjI4MzA1YmRmOWM1ZGMwOTU0M2Jk
ZmM3OTQ4N2VkYjU4OTVjODU1Y2FjMDMzOGZiMTcxLTArBgNVBAMTJDVmMjc2MDQ1
LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALq7nvhvsHFq1W1Enu8o+68SLWV8ZEsvOQXeXOZI8GasMGo7
KgMH6NxxbRfc2J8XYIfHAJTIo6kdPYVWPw7SkoXCCyJEwnSd7ttaBmkLydXCiKfZ
RemHlsX4QiQ2IaVc9zUTCmy6poKKu4CgjWP8DqC2fERHtiqRNsohsNPfNXMLPuzw
AfV+et5bL+sYGUZqmqhPD4PF5TP1A+oslOTHdub9VG3LEcVCnnPzEztiJakA5Dwq
pMgBFPew19VOj0fJOZCxPMEOwbf2pqpAldk35BDrNt+qBRF5+CeJLt6/k1gWBxmu
o2jmRy2jMJhDWpwPDXflwm02KL52GWjg7NOmQoMCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBSfWAU/1d+O+JClJExeF+UoySM+IjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t
GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz
MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4
ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw
OTA0ZTQyZDIvNTVjNDA4MWItMjg2YS00YTI1LWI4OTMtNzE2MGRkNzM1NDIyLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt
NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEABLuFjANBgkqhkiG9w0BAQsFAAOCAQEAFwd/TREuWdOxFi4k3L3uHzs0ZK/u
lcfaq09/KjrzGGqPuT6ucNdlUhQO5KNhqHOiTvIdSOtYnPS03e47+bpk6kCbeftC
KQsqOmkxcL1SdiyXfVQQf4M6wd1r/othGRK8XA0Cj0+sz5keGu1B6yBxkTD8Bmma
LtfaSqyS6bjsP+Kx6YMRT2blRwdYKd2HN1ZNlZpAiBjUrvoGDvF0HECrqefkmE3a
NxcfD72GO5yK98uLVxO7rfTXY5FtHEpGpeVFhiIyjdV5SerWXDuJNnSck5F0dAUy
zATgiezredg8tq+4jYzg/ameG4RdQ/5ZB/mEyJhl7/WyJ07UZoCAgckACA==
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:00:18 2025 by rpki-client