Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82ec7a27-6d82-447c-972d-88786b73d198.roa
File:                     82ec7a27-6d82-447c-972d-88786b73d198.roa (raw, json)
Hash identifier:          DAT/2AHslo1hmCb3FuJ04adtpDraKkn0q5FSKZCAw3A=
Subject key identifier:   B8:F8:BC:7E:75:17:9C:16:E2:43:D6:3B:76:9D:A8:46:B2:9C:16:43
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E88BA6D7744148D344CD0F3E1B7C558F880CF80
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82ec7a27-6d82-447c-972d-88786b73d198.roa
Signing time:             Thu 16 Oct 2025 20:33:29 +0000
ROA not before:           Thu 16 Oct 2025 20:33:29 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:88:ba:6d:77:44:14:8d:34:4c:d0:f3:e1:b7:c5:58:f8:80:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 20:33:29 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=1ca87a9c1fc867fe67a911fa3b61949194f2e845f8b8fb94077319e7eb8e591d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:f6:7f:b0:e0:09:f9:ff:f6:83:02:d1:2a:
                    ef:fd:3c:b7:ec:63:83:63:8d:3b:45:3d:69:86:81:
                    01:20:de:fe:52:92:fd:0e:77:0a:f3:d1:46:22:41:
                    5a:cf:82:eb:fd:33:5d:ae:b1:b0:fe:99:39:b1:e1:
                    ef:f7:6b:61:fa:6b:f3:ca:21:96:91:9b:9f:e7:4d:
                    2d:79:04:c1:c5:26:5f:16:65:54:b0:31:c2:b5:f3:
                    a8:61:fb:12:b1:1d:a2:c7:26:e5:5e:03:3d:11:85:
                    18:be:00:01:e7:2e:98:f3:f0:9d:e1:ad:30:0f:ed:
                    8f:11:b6:7d:38:0c:1d:dd:90:32:db:c4:40:bc:3b:
                    f2:f5:a3:ef:2b:77:7f:6a:8f:80:94:15:bc:99:e1:
                    94:de:7b:6d:5d:1b:e9:43:55:dd:65:74:3a:d9:51:
                    80:23:c1:d4:e5:74:47:0e:f2:a6:a9:2a:c2:0e:7d:
                    c9:6e:fe:a4:95:cc:e2:23:bc:18:ab:52:ff:8d:fb:
                    ca:73:30:5b:b4:6e:ee:8c:bb:50:e3:06:e6:b9:a6:
                    37:a2:d0:3a:ad:6f:27:4b:8b:e2:b3:9e:cd:b6:56:
                    9c:ce:c0:96:f7:cb:fc:b2:ba:60:c9:92:43:08:9a:
                    c7:f0:d3:b1:c4:5c:d8:bd:b3:5b:8c:2d:ca:0f:27:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:BC:7E:75:17:9C:16:E2:43:D6:3B:76:9D:A8:46:B2:9C:16:43
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82ec7a27-6d82-447c-972d-88786b73d198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:df:ba:0d:65:88:91:d8:82:ad:8e:9d:92:16:f0:1b:4b:
         d7:55:41:6a:71:66:0e:06:64:71:92:bb:dd:43:ff:0d:4f:22:
         97:b9:a1:7d:cc:12:4a:4f:b7:0b:46:2e:7a:6e:0a:f5:c2:f7:
         59:3d:e7:78:f4:85:17:ce:27:5d:40:58:56:78:a0:64:82:e0:
         a2:0b:6c:4d:f9:e6:45:40:1d:52:8e:1a:dd:a8:92:31:ce:4e:
         fd:c3:49:54:8e:ad:89:93:3a:fb:0b:38:08:d8:1d:68:bb:a9:
         06:80:59:56:93:2a:1f:f9:68:c7:4a:ed:09:a8:dc:68:81:43:
         ce:6b:a5:e6:aa:b9:3c:52:65:03:5b:e3:d4:34:7c:09:43:76:
         77:b5:c1:de:b1:99:bd:16:bc:52:2e:df:61:c0:55:3e:20:f9:
         82:55:a2:d9:5c:6b:f0:54:55:9a:db:22:6c:a8:73:aa:dc:57:
         cb:8e:ae:4c:7d:33:13:bc:a2:b8:47:e5:3a:11:9d:f1:56:ea:
         40:f9:d3:c3:5d:2b:5e:67:fe:aa:bd:a6:63:8a:e3:a6:42:12:
         67:8b:dd:cd:32:c3:ef:16:3f:2c:fa:2f:8d:7a:50:1c:d0:0f:
         c0:a5:c1:bb:7a:fc:e1:a3:9e:46:8c:65:2e:98:1a:1e:68:a0:
         56:a2:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:47:33 2025 by rpki-client