Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0b8677-fbde-46bd-85ef-f58d7c713fda.roa
File:                     9c0b8677-fbde-46bd-85ef-f58d7c713fda.roa (raw, json)
Hash identifier:          JOukiCpAOUvxwYG1IElPn5xEUjj+WzM62kiNThcXP3s=
Subject key identifier:   3E:9A:04:32:4E:7D:86:60:FB:EF:52:D7:ED:3E:19:8D:1B:B7:AC:AE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3BB7BAD6861D8E426C280CBB2526614A799B0030
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0b8677-fbde-46bd-85ef-f58d7c713fda.roa
Signing time:             Wed 24 Sep 2025 20:46:33 +0000
ROA not before:           Wed 24 Sep 2025 20:46:33 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:ba:d6:86:1d:8e:42:6c:28:0c:bb:25:26:61:4a:79:9b:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:46:33 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=e4055b309742d84c0bbf290a3404e395644ffd6f0460dd6179bc1519bb8f4327, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:e8:91:38:7c:5f:be:ca:07:f5:48:04:23:
                    2f:c0:b5:0b:1b:d9:8a:92:05:f8:25:32:3b:85:36:
                    8d:87:eb:e6:46:5c:c9:78:af:90:11:de:28:69:95:
                    5f:63:ea:ea:fc:b9:42:0f:2c:33:7e:15:aa:49:0a:
                    1f:93:26:1c:26:75:ef:65:55:31:1a:7a:8b:62:5e:
                    2a:03:f0:b3:c6:31:bf:b1:fc:7a:8f:98:b8:ef:96:
                    f4:f0:38:00:d0:dc:be:c5:56:26:3b:03:f2:1b:30:
                    04:63:11:46:d7:2d:f8:5e:17:8d:fb:e9:d0:c6:fc:
                    f3:c0:f2:ea:63:55:14:cf:6c:69:15:37:6a:ed:14:
                    b9:bf:0c:63:fc:3e:4d:eb:0e:87:b2:6c:e1:0f:28:
                    26:66:99:91:ac:6e:71:ab:7a:d9:3b:99:23:e2:d7:
                    e6:6a:c9:f7:39:2b:c9:df:ac:9c:00:83:59:5c:fe:
                    aa:8f:53:de:49:e3:3b:9c:b2:9e:62:af:ff:61:80:
                    f8:33:97:5b:3f:96:5c:41:14:9a:8b:cf:92:e7:ed:
                    ad:57:d6:c9:5a:6c:c9:6b:e0:6b:cd:05:bc:4f:38:
                    e1:c4:a8:89:01:b9:fd:29:20:c7:97:c7:d4:23:4f:
                    64:33:03:f9:ce:fd:f0:69:e6:6f:9a:e0:8c:fd:34:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:04:32:4E:7D:86:60:FB:EF:52:D7:ED:3E:19:8D:1B:B7:AC:AE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0b8677-fbde-46bd-85ef-f58d7c713fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:dd:81:1b:c8:64:61:20:2e:64:eb:45:6f:bd:47:3c:d2:
         42:39:83:c5:2d:19:1c:77:3d:66:b6:51:dd:58:7b:f3:c3:ab:
         83:f8:00:3b:af:77:75:9f:00:24:2f:0d:cb:b7:bc:e9:bd:e9:
         8c:a9:31:d0:1b:48:bf:bd:93:a1:87:e6:50:de:58:42:d2:e5:
         80:c3:c9:17:9a:c6:ec:ad:75:ef:a6:e6:ec:a7:30:8d:10:89:
         0b:d2:98:15:e7:e9:4e:19:ad:5d:3a:3f:11:3b:f7:23:da:18:
         d4:6b:3c:c7:98:16:e1:29:11:af:8a:3f:36:fc:97:38:1e:9c:
         22:d6:e7:89:f9:b7:41:50:42:77:8a:58:9c:8b:0d:23:a0:0e:
         76:82:10:41:63:fb:43:83:39:b5:88:93:b2:1f:03:12:87:e5:
         42:75:28:09:a7:1d:16:70:9b:8b:18:8c:ce:84:c8:51:df:18:
         5d:30:76:0e:ab:76:1b:ad:c7:e1:e7:8c:a3:a0:f5:48:ab:aa:
         1b:2c:69:e9:e0:20:20:06:6b:25:3b:08:45:89:bd:e7:e4:2a:
         91:e6:e7:da:48:ee:ae:e3:e6:62:ce:0c:8b:a4:38:f5:2d:c1:
         6c:bc:3c:26:78:1f:cb:88:98:fb:73:d8:bf:ee:f5:f2:47:7b:
         e7:1f:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:50:26 2025 by rpki-client