Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726ab840-91a1-4d06-8d70-66d240e7ea7d.roa
File:                     726ab840-91a1-4d06-8d70-66d240e7ea7d.roa (raw, json)
Hash identifier:          605lOY8P7roZkLieAIquG6xCQMOfP4axLXKk5V8a5To=
Subject key identifier:   E8:2F:F1:E8:87:EB:8B:F5:BB:BC:3E:AA:F2:B9:69:D0:1A:E3:AF:AB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4BB12A1D54095479C56F069A266A7D20340BD028
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726ab840-91a1-4d06-8d70-66d240e7ea7d.roa
Signing time:             Tue 21 Oct 2025 09:31:26 +0000
ROA not before:           Tue 21 Oct 2025 09:31:26 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.112.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b1:2a:1d:54:09:54:79:c5:6f:06:9a:26:6a:7d:20:34:0b:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 09:31:26 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=59b10ee503bcf29247a1645f1efd8c26d01022a06d449f68b441b9f75c238364, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:27:6d:4d:67:3f:f0:48:a7:f9:0f:85:fd:8e:
                    70:fb:f5:20:1c:f0:c4:7b:6c:5b:95:a9:d1:a3:eb:
                    ad:be:77:43:67:bf:0d:3b:0c:fa:3b:35:8a:6d:ec:
                    6b:90:fb:e0:c0:28:40:f1:f4:28:df:b9:eb:98:5c:
                    a4:19:f7:84:2d:ef:14:43:8f:07:6d:e0:b4:c2:78:
                    16:15:18:13:7d:fc:19:fe:35:d6:df:95:f8:b8:5e:
                    ef:5a:d0:dd:4d:b8:ae:b3:f1:68:04:e6:ae:b9:35:
                    5f:8f:7f:eb:76:a4:2a:e9:ac:3a:c0:8a:23:d5:01:
                    28:97:67:38:57:7e:3a:b3:85:d8:0d:b2:7b:cd:78:
                    64:d6:59:54:f2:29:cb:57:bc:cf:18:48:49:32:9c:
                    22:56:d4:e6:10:d9:e1:df:0f:2e:71:59:f8:07:0f:
                    e3:f7:ef:af:33:9f:07:2b:0b:0c:e6:b8:3c:f9:e7:
                    fb:0c:f4:8b:4c:c3:0b:52:0f:4c:d9:4a:be:10:25:
                    e8:6e:02:fc:dd:62:f9:8c:e5:7b:49:35:e8:7d:2a:
                    cc:de:89:5e:11:67:1a:dd:7a:ec:22:b0:f8:f7:0a:
                    2d:fc:6d:5c:4d:70:92:c4:11:93:23:18:0a:ad:37:
                    73:09:e4:53:ef:eb:7e:29:4f:ad:8d:39:d0:03:81:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:F1:E8:87:EB:8B:F5:BB:BC:3E:AA:F2:B9:69:D0:1A:E3:AF:AB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/726ab840-91a1-4d06-8d70-66d240e7ea7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:55:4e:08:98:86:ca:ef:17:fb:59:04:40:4a:9f:ef:3d:56:
         c7:f1:19:1a:31:7b:e0:4c:80:ab:f2:d9:62:11:4d:87:b5:6c:
         1e:37:e9:a6:e1:72:df:0d:fa:d6:11:7e:76:75:d9:cf:03:7a:
         a4:b4:3a:86:5c:84:86:28:f9:e1:0b:86:36:2b:e1:c3:c8:4e:
         cf:4d:21:f4:08:5c:c5:e8:66:42:40:79:f6:e7:5c:74:21:b3:
         0e:1b:e4:29:05:8a:8b:27:a0:6b:4c:66:ff:cd:ac:0f:f2:11:
         7f:50:41:f2:70:9d:d1:fa:e1:c7:61:99:9b:bd:95:49:60:0d:
         72:72:cb:69:44:99:65:f7:8b:8f:7c:4e:2b:43:c9:5d:48:f7:
         97:23:22:a0:00:a3:9c:fb:dd:23:c2:46:fe:0b:b2:b4:5a:c8:
         c1:c1:ba:d2:b6:78:30:f0:f3:01:62:05:e2:2b:ea:c8:c0:56:
         ce:04:eb:b4:94:5e:56:a4:f2:c7:74:b5:86:c1:40:5c:7c:7f:
         6e:c9:7b:f1:75:33:33:37:26:fc:01:df:24:ca:35:3e:24:c6:
         c5:b7:89:f7:fe:65:8e:d8:d8:ee:c5:1a:ba:63:89:79:48:2b:
         5e:59:9e:ce:d7:1c:aa:c5:ee:c6:21:5a:8d:bd:69:6d:cd:e5:
         e5:53:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:18:26 2025 by rpki-client