Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d9fe0ca-c0dd-481a-92bd-b4f1537a15bf.roa
File:                     6d9fe0ca-c0dd-481a-92bd-b4f1537a15bf.roa (raw, json)
Hash identifier:          cnub76IXIuJsDFGT2k/JIX9U7j+gQyTBiKuNLW3igLk=
Subject key identifier:   5F:69:2B:0D:3B:28:E4:7F:3C:28:C3:35:F1:72:E9:ED:D7:9C:BE:CD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4C6EDA5BA38ADBA1D9FF14E8B47DCFAC1F6D4391
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d9fe0ca-c0dd-481a-92bd-b4f1537a15bf.roa
Signing time:             Wed 24 Sep 2025 19:28:46 +0000
ROA not before:           Wed 24 Sep 2025 19:28:46 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6e:da:5b:a3:8a:db:a1:d9:ff:14:e8:b4:7d:cf:ac:1f:6d:43:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 19:28:46 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=d048bcabeb29b616f9c3201de5fdec8b6a883882b0df2681b4b6625fdcafc106, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:38:91:cc:0a:29:ba:b6:e2:51:ba:97:f3:
                    7f:47:cd:93:7e:cf:c3:69:0f:8f:0f:14:e8:45:99:
                    d6:cb:9d:d1:6c:59:92:d7:cf:54:fe:d8:36:11:97:
                    94:23:db:ac:ea:e9:dc:84:c1:bf:90:56:49:7b:74:
                    09:dc:d3:d3:f6:02:3e:21:72:7a:e1:63:dc:36:8a:
                    15:d3:ae:7a:4f:06:e4:b3:5f:53:84:c9:9f:f3:6e:
                    1f:5f:9f:d9:8e:63:3b:0c:b6:b0:77:36:d4:5a:e7:
                    e6:99:58:84:c8:bb:36:a6:44:7d:5d:93:48:80:68:
                    53:74:21:52:c2:22:0a:08:e5:95:f6:bc:0d:c7:0a:
                    07:e2:88:fd:18:12:89:3a:c7:36:79:03:5a:a2:9f:
                    62:59:9e:27:d4:88:cc:5b:bb:db:3a:95:a1:28:6a:
                    04:df:a0:3c:4e:b2:9d:44:6c:79:ef:99:cd:6a:61:
                    6f:9f:56:e7:18:d9:9a:f2:02:48:de:92:ae:94:dd:
                    00:8a:5b:9a:e7:1d:00:32:25:21:3d:6c:4e:ac:3d:
                    a5:af:e9:42:f3:04:cd:3d:66:a3:37:67:14:ae:16:
                    29:4b:6e:70:43:66:a1:e4:a6:7c:e8:7c:ee:1b:14:
                    03:73:9a:dc:6c:a0:d4:55:3f:86:30:45:cd:91:3a:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:2B:0D:3B:28:E4:7F:3C:28:C3:35:F1:72:E9:ED:D7:9C:BE:CD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d9fe0ca-c0dd-481a-92bd-b4f1537a15bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:b5:0b:4c:48:36:ca:5e:53:6a:c4:36:59:c1:fc:8b:fc:
         48:25:d8:32:e7:5d:0a:d4:9b:f4:9f:02:51:33:36:2b:c0:c6:
         0b:71:71:a7:28:c9:c7:32:29:12:09:51:c4:34:fd:51:20:9f:
         a8:cd:8f:01:65:64:40:23:b3:cc:1d:a8:ae:18:f6:3a:55:33:
         47:4e:c8:5b:5f:3c:35:ec:36:af:61:7e:b5:bf:b6:c0:f0:71:
         0b:1e:49:f2:0d:24:78:66:4e:a8:05:2f:66:49:4f:42:33:e2:
         d3:52:14:35:b0:7c:b1:0f:fc:e4:67:94:80:2d:ed:89:0f:b5:
         44:26:56:8f:82:14:9d:c5:28:46:b3:d9:69:fe:c3:97:73:a4:
         89:65:04:87:24:bb:51:f6:2c:7b:2e:18:ce:2e:9b:a8:70:ac:
         8e:c8:62:a3:e0:7b:7f:0e:b5:c4:3f:fc:44:a8:ba:85:37:bc:
         3f:c3:a1:a0:b7:7a:04:dd:7a:48:c3:4a:38:4e:fc:7c:81:5b:
         77:22:43:87:1c:fd:6f:1d:f8:06:3e:b8:d5:ef:00:a9:53:a9:
         17:b4:49:c8:52:62:3a:6e:29:82:fe:7f:0b:a0:bd:bd:8d:e5:
         d3:83:bc:f0:32:72:31:34:4d:d2:d5:98:f3:bf:6e:bd:cc:5a:
         48:6b:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:01:50 2025 by rpki-client