Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f08c5bc-cb1c-4d4c-a59d-b3ced007818a.roa
File:                     7f08c5bc-cb1c-4d4c-a59d-b3ced007818a.roa (raw, json)
Hash identifier:          WzN9h5qG5EVqqQyAi78zmwAyyfwPQ75zln0hpIN07mI=
Subject key identifier:   41:4B:B4:1B:94:F0:F8:91:15:1B:77:4B:D2:5D:02:27:2B:61:DD:A4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       63795F26EA12E75044AB3F6DF559BDEEECC8E057
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f08c5bc-cb1c-4d4c-a59d-b3ced007818a.roa
Signing time:             Fri 26 Sep 2025 16:32:19 +0000
ROA not before:           Fri 26 Sep 2025 16:32:19 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.36.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:79:5f:26:ea:12:e7:50:44:ab:3f:6d:f5:59:bd:ee:ec:c8:e0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 16:32:19 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=8bb38854a976a5e31469db95834b58e9432a823c5da9e25fb9c2438e1dd4c42f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:bd:62:65:74:50:ad:e4:03:b1:bc:f9:5f:
                    45:16:3e:98:0c:5f:d2:85:10:50:32:67:14:4b:be:
                    ad:d5:4e:7b:59:ed:37:7c:f9:25:36:66:e3:49:37:
                    c6:10:c5:4c:37:56:29:7d:be:4f:b9:73:bd:ea:a8:
                    0e:36:55:5b:db:4a:bf:56:91:b9:b0:7b:99:8a:7c:
                    68:4f:15:02:12:42:f1:89:06:65:f1:f7:e5:13:2f:
                    77:b0:05:6d:6d:65:6b:5c:4c:3b:78:f7:76:2c:49:
                    6e:83:3e:01:71:23:ce:70:75:c3:cb:f7:55:9c:4a:
                    14:32:8b:32:d6:c7:1d:21:de:da:ea:88:d3:0d:18:
                    58:85:82:46:9b:36:c4:df:7c:7b:d0:dd:50:81:73:
                    e8:7c:37:c1:57:26:5a:74:8f:98:82:f3:b5:1e:27:
                    f2:e8:d5:84:0d:dd:b0:12:86:57:5f:43:ea:85:dd:
                    28:59:25:4e:b0:92:bc:d1:e6:d8:68:77:aa:79:8e:
                    58:1f:52:53:51:71:b1:c8:f5:0c:60:42:96:d5:1e:
                    98:5e:0b:80:1d:1f:54:be:d9:74:fc:7c:1c:58:f4:
                    c6:aa:a6:75:7f:4d:34:4b:5e:48:9f:f8:ad:ab:c9:
                    91:a6:61:4e:15:7c:f9:39:75:dc:7a:59:51:87:d2:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4B:B4:1B:94:F0:F8:91:15:1B:77:4B:D2:5D:02:27:2B:61:DD:A4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f08c5bc-cb1c-4d4c-a59d-b3ced007818a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.36.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:c6:30:07:08:d4:ef:51:da:6a:f9:af:ca:66:07:be:0e:
         bb:22:52:d4:79:91:6c:fa:4b:f9:3c:bf:3c:c4:66:a8:78:bc:
         50:d4:d6:0a:54:dd:c6:fa:73:d6:0c:4d:f2:d1:e2:7b:5b:28:
         81:76:af:36:71:75:72:9f:de:ec:b3:7b:6f:da:d6:ef:73:fa:
         24:df:69:e6:df:57:32:47:df:3e:74:cf:9f:5c:e2:dd:9d:c5:
         96:ea:8e:3a:47:82:a8:5b:3a:37:9d:83:36:66:60:b4:a9:14:
         55:5f:4d:3b:a2:d9:78:05:2e:0a:af:70:42:94:94:66:d6:98:
         41:34:3f:55:03:20:aa:91:b1:db:0d:96:70:00:ce:82:b3:1e:
         7d:cb:41:44:76:5b:ac:14:70:e1:19:14:78:d9:59:1d:99:ce:
         9b:61:cf:41:7f:07:96:55:1e:07:50:05:d8:c4:eb:a1:7e:38:
         32:b4:4a:e2:fa:08:06:e0:77:2d:04:7e:82:ec:27:e0:c4:9b:
         ef:2b:43:33:ea:8e:c0:cb:fe:76:2f:65:4b:6d:fb:67:95:9d:
         93:30:d4:8c:a4:cd:74:17:7c:03:c2:6a:8a:8e:89:8d:74:a5:
         8d:10:1c:54:bd:fe:4c:58:0e:91:20:b6:19:21:e5:35:76:b7:
         84:3b:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:54:17 2025 by rpki-client