Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d6f11b1-2aaf-4a0f-8ad0-f885ce22e3d2.roa
File:                     6d6f11b1-2aaf-4a0f-8ad0-f885ce22e3d2.roa (raw, json)
Hash identifier:          dO8nlMdp8e3nfVKBqhiw69zpou5pp1LglbrvR0Tfv1Q=
Subject key identifier:   3E:A1:07:63:F8:FA:4D:BA:CA:4A:25:C1:60:C7:8F:8D:4D:BA:6D:13
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0B75DF8B8C62DC5A80B943E67DB42C760CA4C24B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d6f11b1-2aaf-4a0f-8ad0-f885ce22e3d2.roa
Signing time:             Fri 10 Oct 2025 00:56:43 +0000
ROA not before:           Fri 10 Oct 2025 00:56:43 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:df:8b:8c:62:dc:5a:80:b9:43:e6:7d:b4:2c:76:0c:a4:c2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 00:56:43 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=cb3ebdc45a38931eebb94a4155b870ed92f44ce993a1a0accb41b1863b3691ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:dd:c3:cf:23:7c:c5:0f:f1:aa:6b:25:95:
                    13:a6:51:55:e6:43:b7:1a:6c:1b:61:28:59:43:95:
                    9a:07:16:47:7b:bb:23:7d:be:fd:62:a5:00:15:a8:
                    6a:9b:f4:c1:c1:4a:64:91:e6:26:ef:83:cb:e3:de:
                    f3:bd:63:5c:5c:fc:aa:cb:ad:a7:0d:1d:78:25:5d:
                    6a:0c:ff:cb:fe:bc:cc:a1:ad:1a:4e:6b:84:6b:7f:
                    ef:7d:47:91:8d:fd:e5:e1:68:48:6e:24:fd:d2:9f:
                    18:6b:99:63:8c:27:af:6b:ab:f9:3e:f0:e0:ec:7f:
                    13:dd:75:12:87:c3:ab:3a:40:a4:dc:2f:02:52:fa:
                    77:8a:6a:05:96:f5:68:85:9d:8b:cc:95:db:84:0e:
                    b5:e9:1f:58:75:b4:7d:f4:31:56:ef:6a:b8:32:13:
                    4a:01:16:3d:84:28:67:dd:16:e2:1b:d2:08:42:9b:
                    22:ca:01:ad:24:b3:52:21:1b:46:7a:1b:65:f4:9f:
                    0f:93:64:5a:a1:d6:e7:89:aa:4d:90:b8:c8:97:56:
                    55:ea:90:8f:2d:ea:04:8d:d9:74:73:c8:d9:ce:39:
                    58:e6:2f:58:6c:de:89:3e:b0:da:43:ba:fd:9b:f8:
                    68:90:30:e3:65:16:3a:15:ce:15:bc:f0:78:c9:39:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A1:07:63:F8:FA:4D:BA:CA:4A:25:C1:60:C7:8F:8D:4D:BA:6D:13
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d6f11b1-2aaf-4a0f-8ad0-f885ce22e3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:13:e7:11:17:dd:c4:fb:c7:d0:97:f6:92:7a:3f:bf:26:
         30:11:b8:85:38:ab:44:a4:77:a8:a3:22:db:c6:7f:95:f8:92:
         c7:9d:52:5d:6f:12:9c:1e:84:98:9d:fb:aa:19:7a:cc:8e:31:
         4b:e0:df:45:27:f1:4c:fb:ef:4c:4e:1c:9e:af:8d:db:eb:5b:
         d0:2a:6e:b6:f9:08:50:da:70:b9:b3:7d:a7:d6:f9:82:be:ba:
         3d:25:36:b3:91:e4:54:53:9e:fe:64:2a:18:d1:bf:f7:f1:aa:
         65:2f:c4:17:70:b5:62:d4:21:1c:59:f5:b8:e0:67:ec:26:a9:
         07:21:2f:32:a2:42:7f:cd:55:9d:52:48:f2:71:72:7d:7f:58:
         de:d2:f9:40:cf:7c:26:c0:88:ed:ed:28:4c:79:44:35:25:91:
         a0:df:43:b6:b1:81:8e:e5:08:f4:60:a6:53:1d:e5:95:49:f8:
         4f:a6:7a:ed:28:53:31:85:a9:aa:88:c4:db:69:9c:1d:8c:e8:
         f7:4e:3b:2a:32:30:35:ae:99:ff:72:0e:af:94:5b:28:fc:a2:
         0c:05:df:2a:6f:7d:43:76:39:c5:8c:7c:3e:da:ff:a5:ca:5b:
         e2:75:59:f8:63:5d:37:7b:91:cc:4b:e0:68:5c:cb:c5:83:05:
         23:f2:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:55:11 2025 by rpki-client