Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fabc464-cfc4-418f-8af3-0a2136e58a93.roa
File:                     5fabc464-cfc4-418f-8af3-0a2136e58a93.roa (raw, json)
Hash identifier:          2n5MYU+8q+KAmKDPcPmG7aFH9bUofTUt7sPh9qwOedc=
Subject key identifier:   C8:E9:5F:43:D2:8E:9D:0E:4E:54:27:EB:BF:E2:40:54:8B:36:75:D7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3AA09FE55D71F5A2A8108F1CF2A5EF5C29E953A8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fabc464-cfc4-418f-8af3-0a2136e58a93.roa
Signing time:             Mon 22 Sep 2025 17:27:37 +0000
ROA not before:           Mon 22 Sep 2025 17:27:37 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.155.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a0:9f:e5:5d:71:f5:a2:a8:10:8f:1c:f2:a5:ef:5c:29:e9:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 17:27:37 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=01b1491095d0a93ba54b4e5d23bb08d9b3b8d9f865994cd56380435b958e1793, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:65:2c:a8:b9:b4:15:a1:98:19:e3:16:86:
                    c0:8f:b1:42:a4:19:a8:d7:4e:35:09:31:ab:f7:31:
                    c3:38:d4:8c:dc:a8:d1:6a:2f:b7:f8:b0:8e:e2:b7:
                    20:38:1b:67:a8:bc:28:dc:27:b9:b6:52:f2:7c:50:
                    6b:78:fb:2c:0a:43:6c:79:99:97:4a:ae:ed:81:fa:
                    a6:d9:37:21:73:f4:ae:ad:9e:e1:7b:89:53:fa:aa:
                    62:6d:49:6a:50:2c:84:ac:0d:1c:ed:e5:71:7c:7f:
                    b3:64:9a:7c:83:22:d2:7b:b5:fd:5e:fe:a5:71:07:
                    78:ae:e6:d3:cf:79:cd:c6:b2:8f:9c:e8:b0:d2:8e:
                    6b:28:f0:d9:38:6c:87:8b:a3:39:ad:c9:a0:01:d8:
                    5e:a9:77:cf:1e:7d:69:45:81:3a:d2:cf:df:25:66:
                    26:89:e5:70:59:1a:2d:08:77:99:6a:de:44:3a:96:
                    1b:9f:84:88:e3:e9:6c:96:6d:9b:13:08:38:9f:55:
                    c9:b3:45:9a:6c:fd:a7:a6:78:75:79:8f:57:87:9e:
                    57:b8:84:62:d3:75:93:db:d0:5e:e4:39:03:41:27:
                    94:82:d1:72:3e:c3:4a:63:35:e5:ce:4f:84:7f:63:
                    a7:33:43:38:f8:f6:79:96:f3:7e:50:63:09:db:c4:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:5F:43:D2:8E:9D:0E:4E:54:27:EB:BF:E2:40:54:8B:36:75:D7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5fabc464-cfc4-418f-8af3-0a2136e58a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.155.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b5:e0:63:76:6c:d1:01:75:5e:7e:c8:0e:f3:bb:bc:26:ca:
         9b:9e:14:15:ff:00:05:16:1a:35:2e:e2:02:57:88:18:ec:12:
         d9:04:1d:de:79:8a:4e:d2:f9:d3:7d:6e:05:48:8e:09:65:69:
         0c:a8:a2:c5:e7:2f:74:6c:dd:98:66:66:40:78:6a:0d:8f:34:
         ce:86:65:12:de:a0:ac:52:44:16:bf:ef:13:d5:d7:44:8f:cc:
         79:0f:94:25:c0:39:9c:42:62:fb:a6:56:ca:39:94:9e:94:cd:
         4e:3b:33:d8:32:1e:97:de:1f:85:1b:41:0c:73:6f:0e:ae:dd:
         8f:ce:b7:7d:83:8c:5c:21:03:0e:68:73:01:2e:a9:15:fa:cb:
         5e:ba:37:1f:4d:41:55:be:58:d9:bc:e8:e6:72:8c:26:4d:03:
         0e:de:87:cd:b9:76:18:6c:30:6d:ed:3b:39:b6:fb:bd:c7:44:
         91:0b:b3:12:49:a1:a2:22:b6:04:67:e3:b7:3b:67:ab:8f:6b:
         63:df:8a:f8:a7:9e:4b:d2:1c:6d:c7:17:18:81:81:70:32:2e:
         f9:07:77:64:03:bc:cb:90:b5:4a:de:51:c1:46:82:2c:0e:bf:
         59:e9:5d:72:7d:7e:42:3d:af:2b:f6:73:37:33:68:af:e1:57:
         34:9f:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:58:34 2025 by rpki-client