Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80e8ae0b-b39c-4bf5-a8d1-d91515ca7463.roa
File:                     80e8ae0b-b39c-4bf5-a8d1-d91515ca7463.roa (raw, json)
Hash identifier:          lenNm9kYRfiF1YsB2t/boecEF8R09O5iYEGTv7SD49o=
Subject key identifier:   67:3A:3B:A6:2E:0A:32:30:BE:77:AD:B2:D0:3D:EE:D7:9D:87:6F:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       65B64947A14DB59B82EAC5ECBFE68F287AC321B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80e8ae0b-b39c-4bf5-a8d1-d91515ca7463.roa
Signing time:             Mon 22 Sep 2025 18:40:59 +0000
ROA not before:           Mon 22 Sep 2025 18:40:59 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.161.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b6:49:47:a1:4d:b5:9b:82:ea:c5:ec:bf:e6:8f:28:7a:c3:21:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 18:40:59 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=ae7bcc2adce25b508bae47aa4aecdfc2a93855016bffd9f5d0ab675426fb2368, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:f9:c7:6b:f6:e8:5f:a3:82:01:44:6d:3f:
                    90:be:ee:f3:dd:ed:a3:aa:9c:29:e8:80:6c:3f:47:
                    ed:b4:17:26:db:d7:0e:4b:b1:01:91:fc:2e:6b:03:
                    b5:e0:d9:34:87:0f:72:da:42:24:0a:91:03:e2:38:
                    72:2d:29:37:58:99:3d:e2:77:90:ff:4b:2b:c1:ed:
                    f4:48:42:e1:bb:50:db:47:ed:fe:e6:83:18:6b:f1:
                    93:94:68:64:8a:66:d7:c9:5a:78:7a:22:b7:c4:f1:
                    84:c6:df:89:ff:49:a6:d5:4b:7b:25:b4:a2:24:33:
                    93:21:3b:ca:76:8d:c1:c8:1f:e1:aa:19:f0:df:54:
                    db:38:f3:44:f2:f3:2f:be:5a:f6:b0:55:9c:d3:ca:
                    fb:1c:ce:e6:15:6e:79:16:59:61:62:49:25:0c:06:
                    f4:f5:28:c9:03:0b:76:e1:cb:68:35:9e:33:6e:cb:
                    0f:24:5f:01:4a:58:0b:44:88:ac:02:6a:c6:ac:c6:
                    89:95:c7:46:91:35:40:64:46:f8:c8:0a:60:d1:d6:
                    ab:95:f5:87:50:84:0a:c2:7f:ff:68:20:ce:bf:d3:
                    bd:31:3f:12:48:e6:45:6c:30:95:6e:67:32:cc:31:
                    d3:2d:c1:d1:4d:db:c5:8d:e5:8d:1b:80:2d:66:40:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3A:3B:A6:2E:0A:32:30:BE:77:AD:B2:D0:3D:EE:D7:9D:87:6F:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80e8ae0b-b39c-4bf5-a8d1-d91515ca7463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.161.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:b3:47:3a:6a:0f:9a:46:e2:fb:d0:e9:7a:e9:c0:bd:0b:
         fb:bd:1a:3b:5d:41:e4:84:9a:ec:d9:17:91:65:37:c6:04:08:
         a8:ed:8a:3f:49:bc:fd:e8:a2:92:06:00:33:6f:98:17:68:30:
         93:42:ef:ab:cd:dc:ad:13:aa:d1:2d:6d:28:dd:89:68:28:dc:
         b3:db:ce:3b:f9:f0:8c:11:17:4f:0b:1a:53:2d:12:33:26:38:
         f8:b8:d8:ce:41:a0:66:69:46:50:f6:97:54:89:db:7e:38:80:
         08:b8:05:53:4d:24:d4:bc:b2:8c:18:aa:42:86:72:b6:04:14:
         ab:ad:69:b0:a5:09:cf:36:c5:33:f1:a3:ef:58:23:b9:86:67:
         f8:38:99:a4:b5:e8:8d:27:77:8d:b3:20:7d:9b:71:c4:90:a8:
         7a:85:4d:12:0f:dd:b8:f9:23:bd:01:e1:ac:af:3d:5d:6e:32:
         cc:73:a9:79:db:73:ce:74:4f:7d:a7:7b:05:35:97:2a:8c:d2:
         f2:60:a4:01:59:2c:7b:f1:e6:9b:92:1f:c8:02:e4:1b:19:99:
         95:9f:f1:36:83:94:4a:59:07:c3:d2:18:a1:2d:ca:1e:f5:3e:
         1d:59:d1:ee:fa:4f:a1:9b:50:0f:60:89:63:1c:9f:4c:4f:03:
         ba:97:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:48:13 2025 by rpki-client