Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b4c205e-398d-4be2-b78b-d3abb96aeae4.roa
File:                     6b4c205e-398d-4be2-b78b-d3abb96aeae4.roa (raw, json)
Hash identifier:          p/RZ6Wtt7+bELaKall9txQibuPTNQXDBwLzaSovCkqY=
Subject key identifier:   6F:23:ED:9D:A7:D4:99:E8:43:4C:38:E8:A5:D1:49:60:61:3C:87:90
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       79EB47060486D21EA5AAC271FAEEFFC30A0E0E4F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b4c205e-398d-4be2-b78b-d3abb96aeae4.roa
Signing time:             Wed 24 Sep 2025 21:10:05 +0000
ROA not before:           Wed 24 Sep 2025 21:10:05 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.64.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:47:06:04:86:d2:1e:a5:aa:c2:71:fa:ee:ff:c3:0a:0e:0e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 21:10:05 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=d87564d4d8b5dca13d64879ba3983d66b4ed38d5cb0dee849e1a061a27c2a902, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:d9:0c:e1:27:0d:6c:95:c0:af:1b:14:de:
                    8c:ea:46:ef:63:c5:15:50:1d:d2:c8:38:31:49:4b:
                    b3:43:2f:07:cc:25:aa:4b:b4:d1:d6:48:3a:fa:9f:
                    d1:11:e8:11:d2:44:39:4b:27:3a:97:fd:bd:94:2c:
                    1f:e9:3c:d3:da:7c:45:5c:a7:9e:de:2f:59:ba:e4:
                    a8:e0:0b:47:aa:50:ef:7f:b3:e6:78:9f:2e:11:2e:
                    e7:06:e4:4a:1f:50:bb:b8:25:87:fc:5e:68:f2:d9:
                    b5:7b:ed:34:0f:05:a9:ba:43:b9:24:d3:15:d7:61:
                    c0:d8:b6:ff:99:83:af:8e:0e:5f:34:01:24:cb:cd:
                    d1:cb:2b:f6:ff:4e:57:0a:8a:34:44:00:43:c7:39:
                    58:b4:71:23:c7:b2:93:76:f8:a7:68:b4:ff:85:6b:
                    28:c7:82:9c:77:99:3e:0e:83:07:c1:d3:39:de:21:
                    b5:ab:8e:ec:ae:5b:57:d6:87:50:dd:4f:af:4e:a9:
                    ea:8c:0a:62:62:7c:c0:4d:5e:dc:a7:8e:5b:c8:da:
                    73:3c:cc:a8:f3:88:51:86:70:85:51:c4:94:24:39:
                    85:1e:dc:27:35:89:fa:dc:80:04:04:15:06:e8:d3:
                    7b:24:2e:d1:af:fd:61:0b:4f:b1:0a:8f:bc:bc:6d:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:ED:9D:A7:D4:99:E8:43:4C:38:E8:A5:D1:49:60:61:3C:87:90
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b4c205e-398d-4be2-b78b-d3abb96aeae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.64.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:be:74:f0:6f:59:be:f2:82:c8:10:a4:75:e0:0b:05:d2:
         11:48:4e:0a:51:66:b7:fb:ca:30:cf:dc:21:a8:50:18:b9:18:
         a6:50:e2:99:fe:03:e2:67:49:37:0e:02:15:c9:44:d3:06:77:
         9d:c2:db:00:23:20:e5:57:aa:41:72:76:01:54:ae:a8:b1:86:
         41:cf:f9:f7:ec:78:09:76:01:c3:56:1d:8f:62:68:9f:2a:fa:
         4a:35:e3:9a:79:35:ca:e0:be:2c:44:a2:89:57:f1:d8:e2:dd:
         f1:5c:93:77:47:0c:d8:98:83:45:3d:50:00:b9:af:5f:6f:03:
         94:23:df:28:8e:56:89:9d:db:1d:fb:0f:8e:a7:fc:59:8a:06:
         9a:dd:06:b8:77:c8:d1:99:2e:6a:05:97:12:9e:02:07:29:9a:
         71:6f:50:3a:f0:e0:d1:b3:ab:db:2e:13:e4:34:2c:ef:60:13:
         dd:b3:4b:4b:ba:e6:61:55:e5:88:7f:55:5f:66:49:26:84:1c:
         97:d1:26:09:44:77:0c:99:6c:28:bf:e0:c0:31:b2:b3:d2:b6:
         eb:f4:2d:16:07:33:89:00:a6:2d:db:c3:7c:dc:25:5f:43:cc:
         8e:00:62:ae:e9:e3:10:45:a8:2c:51:9e:95:b4:c9:b2:4f:a0:
         16:0e:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:54:31 2025 by rpki-client