Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96bc9f0e-fdff-4b1b-a4b7-7efbb3356c5f.roa
File:                     96bc9f0e-fdff-4b1b-a4b7-7efbb3356c5f.roa (raw, json)
Hash identifier:          WxHzQfYHLJidB55w761m0Rv6Jklzz5dOE7MMkU/yfM4=
Subject key identifier:   7E:BB:9C:9D:3C:92:6F:D6:B2:CD:EC:44:FC:FF:29:A3:B4:20:3F:A6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3F5C60A91B84A473605980DA35EB58C54E9E7F76
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96bc9f0e-fdff-4b1b-a4b7-7efbb3356c5f.roa
Signing time:             Wed 24 Sep 2025 20:42:20 +0000
ROA not before:           Wed 24 Sep 2025 20:42:20 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5c:60:a9:1b:84:a4:73:60:59:80:da:35:eb:58:c5:4e:9e:7f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:42:20 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=b37679c46f51aee79cfffd809d9ee776f6a8b8ad71d20471b9bca4a29c275998, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:15:09:74:64:11:d0:04:c3:af:2b:1e:74:
                    08:5b:bd:67:5f:be:79:5d:16:2f:dd:b1:c7:05:fd:
                    08:c6:e9:43:4d:fe:48:69:3f:e5:c1:94:e9:d7:74:
                    a3:ef:47:b1:3f:be:8c:04:75:dd:fd:c6:81:3d:af:
                    a2:eb:a3:a3:25:16:6a:1c:27:ac:eb:12:d9:eb:8f:
                    19:da:94:25:7b:cb:ce:e5:7d:8c:d1:cb:45:07:2a:
                    37:f1:c3:48:41:9e:c3:27:68:c5:8b:74:2f:67:9f:
                    71:72:b7:56:c4:8e:00:84:4f:05:ee:ed:21:fa:86:
                    b2:51:94:0f:f9:d9:3c:d3:f9:6b:96:7c:9f:3c:f7:
                    b5:3f:f0:4a:2c:52:2a:77:25:dd:4a:cc:84:ab:65:
                    8a:99:21:88:01:b7:e6:41:eb:a3:e7:e9:08:d1:7e:
                    94:6a:d3:ba:07:5f:13:41:87:23:3a:b4:28:64:53:
                    52:87:a1:db:c4:a9:52:51:16:25:e6:4e:26:18:49:
                    d3:9c:3c:f9:43:71:ea:5b:ac:30:b1:82:52:67:97:
                    2f:5b:6d:25:e6:b5:eb:15:6c:22:84:93:50:77:bf:
                    14:92:8f:2b:46:bc:86:3f:45:c4:03:75:57:b7:19:
                    04:75:df:74:cc:56:d8:32:2e:4d:97:00:cc:a2:4f:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:9C:9D:3C:92:6F:D6:B2:CD:EC:44:FC:FF:29:A3:B4:20:3F:A6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96bc9f0e-fdff-4b1b-a4b7-7efbb3356c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:b1:90:08:bf:a2:0f:30:d8:94:fa:f9:02:43:9a:9e:c0:
         77:a0:af:97:d1:76:73:9e:ba:8f:30:2d:b4:11:78:af:70:4f:
         12:59:50:10:a8:a5:2a:48:29:78:da:aa:67:0b:fa:f0:f6:91:
         df:ec:6a:62:65:9a:6a:ed:ba:63:f6:10:49:41:55:e1:e0:f2:
         22:36:be:e1:fe:84:93:1d:17:6a:0c:18:df:e3:63:c3:5b:88:
         6d:4e:72:01:b8:73:37:dc:34:86:d8:5e:9b:4d:97:ec:28:8d:
         53:c5:11:d1:e1:c8:28:24:da:cf:4a:52:03:95:d0:f6:b8:0e:
         05:1f:74:e0:c4:5d:d9:f0:ce:cc:a9:2b:0a:6c:12:03:d6:a3:
         7a:1a:6d:4f:4a:fe:d6:85:26:68:3d:44:bf:41:2a:e7:25:3a:
         8d:7d:d3:25:a6:ff:d1:b2:cc:34:1b:ae:64:1b:ee:e4:46:8a:
         f8:b3:b9:98:69:96:a4:e9:c0:f7:df:0f:0b:5d:44:70:60:5b:
         3c:bd:87:1c:47:e0:80:5d:a4:9e:ce:32:25:89:a6:1a:c8:ee:
         0c:ec:07:e8:9b:f9:e0:31:33:a1:51:f6:f6:3d:ca:b6:de:d7:
         38:92:94:76:a5:ea:9d:06:81:14:a2:07:e7:af:56:b9:60:28:
         ed:35:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:41:31 2025 by rpki-client