Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ae0fee-74b4-4e62-8e39-d163095a70b9.roa
File:                     87ae0fee-74b4-4e62-8e39-d163095a70b9.roa (raw, json)
Hash identifier:          btJVIoLxs629mjw/d5ZSWtnzcmClJINW9mS5IP+BZRM=
Subject key identifier:   82:FA:EE:C3:EB:05:2A:CB:2E:8E:03:22:83:D9:12:6F:50:A6:38:D1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       764B9A4F31D8B13A532591BAFC0B10FE149B6AB5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ae0fee-74b4-4e62-8e39-d163095a70b9.roa
Signing time:             Wed 24 Sep 2025 19:57:57 +0000
ROA not before:           Wed 24 Sep 2025 19:57:57 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4b:9a:4f:31:d8:b1:3a:53:25:91:ba:fc:0b:10:fe:14:9b:6a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 19:57:57 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=2ee35c0d376d037231f0fe0c72b3d8524f10d9adaab77d68ca86ab7a8f96e83a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:30:db:19:35:0c:28:3c:89:e1:92:e6:ab:
                    f4:9d:c7:24:0c:5c:37:0c:0c:6e:6d:6e:bd:93:a4:
                    c8:20:09:b3:82:b4:3c:9b:b0:a8:a9:16:21:b4:f5:
                    93:00:ab:0f:4b:ef:a5:23:a9:b7:3e:00:d4:bb:60:
                    fd:8c:af:8b:0a:35:2d:54:cb:04:ec:ff:78:25:f5:
                    af:8f:21:ef:13:e1:20:3b:fb:28:d9:8e:4e:3e:af:
                    e1:fb:b3:4f:68:cf:cb:63:71:4f:a0:f1:7b:8b:e6:
                    02:ad:b0:f3:41:54:70:33:48:dd:b7:c7:2e:63:af:
                    72:f3:fd:59:c9:c3:45:e4:41:51:af:3c:61:a3:47:
                    00:f2:be:26:bf:45:a1:db:69:59:ae:0c:99:fd:b5:
                    0b:a5:2e:ea:3b:b0:d7:5e:01:96:58:54:72:bf:e2:
                    12:0e:a5:2a:ca:ca:55:01:11:99:8f:a6:55:77:88:
                    6d:5f:5e:7e:e9:25:c2:00:da:e9:a5:24:2b:42:ce:
                    4f:b7:f7:10:81:08:25:6f:9c:7b:f9:d6:da:87:71:
                    d8:cc:bc:2c:0a:7e:62:57:dc:64:34:b4:a9:20:5c:
                    1c:ce:d0:ee:97:8c:5b:7b:71:94:ac:0d:2b:8b:73:
                    1e:73:88:59:2b:63:08:3d:e2:d3:57:12:87:19:31:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FA:EE:C3:EB:05:2A:CB:2E:8E:03:22:83:D9:12:6F:50:A6:38:D1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87ae0fee-74b4-4e62-8e39-d163095a70b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:38:8e:69:0c:48:2f:b6:77:20:80:84:e3:58:3a:37:52:
         3a:92:b2:41:68:c4:65:82:a7:0b:93:13:a2:6b:1a:dc:85:02:
         ab:5a:8c:de:f9:0d:0b:72:56:f5:98:86:3f:c4:5c:28:b5:f2:
         01:4d:f1:ac:63:c9:4b:4c:ac:5c:7c:b2:29:fb:a7:d3:1f:0b:
         62:e5:e1:c8:3b:48:ab:e9:34:70:ef:84:df:08:73:b8:d3:37:
         71:62:71:e8:ac:9d:6e:1c:7c:cd:03:c5:97:cf:f1:96:ca:04:
         0b:5e:c9:41:4a:b1:0c:74:a9:c4:82:52:70:8e:02:9e:74:40:
         9f:7d:b7:a6:b0:b8:7f:a7:31:6f:69:d9:8c:34:1f:7a:c9:c0:
         80:2f:47:0a:d4:75:65:26:52:f0:23:29:66:39:63:1f:6e:46:
         a8:07:90:8e:54:06:83:3b:ca:08:89:98:b7:80:b7:ec:37:01:
         6c:12:ab:63:30:b5:1d:1d:78:72:8f:e7:fd:b3:74:cf:56:1f:
         3e:a5:6c:3f:be:6e:62:22:54:c2:44:02:4f:e8:2f:f3:b3:5b:
         9c:dc:d4:50:02:72:95:4b:21:07:ba:ca:f1:d2:4c:db:dc:4f:
         22:a7:bd:10:68:cb:8b:47:5c:7a:e4:78:40:17:a3:3f:41:e5:
         00:02:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:58:39 2025 by rpki-client