Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7117f453-806d-44dc-9ce5-e3d7a3b36de7.roa
File:                     7117f453-806d-44dc-9ce5-e3d7a3b36de7.roa (raw, json)
Hash identifier:          xt7RJnwMVJKR3h9lprggl5ZK4iE8bjAXHvmbyLLl+nM=
Subject key identifier:   0C:EF:FE:2C:D8:4B:13:FB:EC:A2:77:01:C4:3C:0C:3B:6D:44:64:AA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7AAAF39DC07848225BBF34AF0E8FBEEE41AFF99B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7117f453-806d-44dc-9ce5-e3d7a3b36de7.roa
Signing time:             Wed 24 Sep 2025 18:54:25 +0000
ROA not before:           Wed 24 Sep 2025 18:54:25 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.33.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:aa:f3:9d:c0:78:48:22:5b:bf:34:af:0e:8f:be:ee:41:af:f9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 18:54:25 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=2fd67639c4b514ac823581967f122cabff84b0ded079f5bcd634758afec30bd9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:b4:4f:d6:fe:8b:95:42:86:3c:8a:85:0b:
                    58:69:0a:71:cb:b9:32:49:04:ce:d8:ef:05:7b:fb:
                    27:8e:cc:3d:79:19:9c:4d:38:09:bf:5d:d0:26:ea:
                    54:fd:80:83:5d:a2:b1:de:a2:c5:f8:36:4f:12:b5:
                    ff:eb:ad:5c:68:82:e5:23:db:cf:ab:82:c6:ce:77:
                    5b:03:04:06:b1:51:a6:b2:bf:b4:4d:ee:9d:e5:27:
                    27:5f:f2:da:bc:ea:8c:fd:de:e6:d6:6f:d5:c1:10:
                    e9:a3:ac:42:99:ee:81:ff:3e:00:28:6a:eb:90:72:
                    79:ed:ad:02:3c:02:54:a5:be:bc:3c:1b:f1:ae:77:
                    91:8f:93:40:71:4f:ac:8d:0a:6d:50:95:1b:82:07:
                    a2:5a:54:d5:a5:39:24:6c:b6:bd:dc:a0:8e:54:55:
                    53:f3:44:16:7a:17:af:71:c9:e0:5f:7c:e8:03:3b:
                    b9:f7:cd:4b:ee:0c:a3:b1:dd:29:ad:ed:7b:a2:40:
                    d7:0f:0b:5b:27:72:8f:38:fc:e3:77:4e:6a:d0:94:
                    36:7a:bb:9a:5b:c1:a6:bf:58:02:f6:5f:de:b3:3b:
                    74:6e:5a:78:34:4b:8b:b0:93:f6:ad:47:9c:fc:53:
                    24:8f:57:6c:f7:e0:53:6c:2b:08:69:0b:aa:e0:4d:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:FE:2C:D8:4B:13:FB:EC:A2:77:01:C4:3C:0C:3B:6D:44:64:AA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7117f453-806d-44dc-9ce5-e3d7a3b36de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.33.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:29:80:56:3f:90:e5:97:2e:86:2f:a3:41:bf:a0:cc:d6:
         de:f3:5f:63:bb:bf:ce:dc:32:36:7c:01:a8:c7:94:a7:15:f9:
         b7:a7:58:64:38:a4:27:24:ba:15:83:5a:69:8a:33:ac:5c:1f:
         bc:a5:fb:11:66:17:f8:d1:4f:d0:99:0c:56:c3:2f:d3:25:a3:
         89:45:22:f0:a6:78:a8:ed:d9:91:a0:44:5e:b8:59:fa:35:34:
         cd:fb:51:b5:96:4c:80:a4:a5:cd:a9:20:c0:55:6d:f8:df:75:
         c9:ec:64:ba:04:26:fa:4e:35:b0:02:25:d9:f7:ab:f4:77:ca:
         12:f2:cc:94:17:d1:02:b1:97:1a:7e:be:22:ec:99:79:af:2b:
         1d:5c:34:30:fe:5d:44:e1:3b:b5:e1:26:90:84:b7:4f:32:b2:
         9a:47:2f:d1:63:1f:c6:1b:8a:c8:40:6b:39:d9:b8:78:f1:44:
         1d:56:ad:ef:9f:5a:e6:c6:19:39:22:1a:4e:d3:bf:83:95:a5:
         6c:a4:3f:bc:94:76:ae:f8:0e:5b:dc:8d:b3:15:fe:96:c3:58:
         9b:30:56:da:f0:8c:7a:75:67:07:ff:1d:4c:f1:b0:f4:9b:99:
         c0:ac:35:23:bb:68:16:18:42:05:15:74:d7:64:1b:15:8f:9b:
         96:fa:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:02:24 2025 by rpki-client