Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c2facb-ce7c-4e97-95e4-6ddb9637fcda.roa
File:                     82c2facb-ce7c-4e97-95e4-6ddb9637fcda.roa (raw, json)
Hash identifier:          gU1XBToJht+phFmwDQiXunGpP1r2F2XKhYqMBsNhSFA=
Subject key identifier:   F1:D7:D5:A4:29:18:6F:D6:B1:E4:F7:71:CC:6F:09:A5:3A:6E:93:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       092B40FB2D0CDAE8B1DFE5364A57CAB7E42F8E9F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c2facb-ce7c-4e97-95e4-6ddb9637fcda.roa
Signing time:             Mon 22 Sep 2025 22:25:57 +0000
ROA not before:           Mon 22 Sep 2025 22:25:57 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.239.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2b:40:fb:2d:0c:da:e8:b1:df:e5:36:4a:57:ca:b7:e4:2f:8e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 22:25:57 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=6026d5844cb334c830961da9e87d5a9f1a1e16ce59ac93c5ce113d0e20d0eac5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:86:2a:8f:a6:ea:de:7c:13:b3:5d:30:e0:
                    46:bc:ab:c0:b2:7a:45:e6:11:87:73:13:0c:d1:72:
                    2b:d8:f5:c5:33:1f:55:1b:ff:1a:96:72:80:5d:2c:
                    92:53:c1:e3:da:1e:55:d9:89:7b:ba:57:e8:ce:d3:
                    f2:07:6f:3d:4a:23:49:01:af:e2:9f:bc:8c:9b:02:
                    d6:0e:75:0e:f9:b6:3c:6e:b6:2c:a1:40:42:79:3a:
                    16:71:ae:9a:69:14:76:ea:15:8f:db:39:82:6f:6a:
                    7c:30:dd:58:c5:90:81:83:5c:61:bc:56:04:fc:4d:
                    35:b8:09:1a:a5:1a:79:2d:71:89:7b:b1:19:46:6c:
                    ce:4f:e7:90:26:09:90:26:ed:4e:19:5b:c1:fc:8f:
                    2f:a1:aa:18:4a:57:c5:33:4c:c4:d9:66:69:20:f5:
                    f1:89:0d:b4:c3:61:58:09:59:d5:1d:7e:5d:00:80:
                    5a:19:0c:54:a2:18:d2:43:08:bb:1b:47:2a:90:82:
                    26:e0:65:f6:59:6b:f8:7a:46:6b:d8:78:55:51:81:
                    c3:26:c5:65:88:a3:e6:51:bf:2b:bc:2d:f6:7b:f3:
                    23:c2:4d:b6:5e:48:b4:96:4c:3c:2f:19:3f:19:7c:
                    64:a8:02:7b:f0:74:ae:a7:9a:cc:1b:12:09:ad:a9:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:D5:A4:29:18:6F:D6:B1:E4:F7:71:CC:6F:09:A5:3A:6E:93:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c2facb-ce7c-4e97-95e4-6ddb9637fcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.239.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:55:d3:f1:bc:f5:db:68:5c:ae:4e:2f:78:c6:cc:b9:af:df:
         4d:68:d6:af:46:02:0f:ed:86:a1:0a:b6:cb:1f:ff:3c:cc:d9:
         5b:bb:e4:a4:32:31:52:8b:da:65:c0:ad:80:57:73:2e:c2:90:
         e5:2b:dd:e8:02:c5:1d:33:77:7c:21:c4:12:db:c1:67:d9:bd:
         62:af:6e:32:74:57:bf:7f:c6:aa:3d:7b:c2:e5:cb:e9:a9:2b:
         51:8d:3f:e4:3b:26:cd:7c:10:6e:79:e0:f1:02:0f:14:6d:44:
         ce:27:48:96:08:b3:93:d1:31:3c:a8:6c:d3:d7:f8:b2:ff:1e:
         e5:3e:37:ea:ba:10:dd:ee:ef:11:40:ac:25:f3:9d:ad:c5:93:
         a7:03:d6:8f:0f:3a:60:89:17:80:aa:73:70:c9:b3:b9:e2:17:
         d6:0f:12:97:6f:a9:93:be:0a:4a:c2:fd:65:6a:84:44:c9:fc:
         8a:4c:ec:9e:2c:1a:5d:86:3b:97:f6:cd:7a:a4:94:0d:ef:14:
         67:ec:e8:d2:c7:d4:c2:63:7a:e7:7b:9b:c2:09:96:3d:08:d5:
         1d:9f:aa:b9:fe:86:4d:82:8e:96:51:27:43:c4:99:3a:e9:04:
         e9:16:f8:f8:6c:fe:b1:29:6c:0f:0e:e3:20:96:00:4e:23:ac:
         b3:e1:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:58:28 2025 by rpki-client