Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa
File:                     9e1e8253-d314-4ead-ac84-df69bf57783f.roa (raw, json)
Hash identifier:          JWMKduF0sIOD/UMjDMCMIWuYs47/ADLVtdAFA7A3h00=
Subject key identifier:   80:2D:38:82:17:9E:F5:51:30:CF:91:FF:33:27:7E:A2:69:72:CB:C2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       79815639FBCE37BC639847DE068C26A7F5F200B5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa
Signing time:             Wed 24 Sep 2025 20:36:39 +0000
ROA not before:           Wed 24 Sep 2025 20:36:39 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:81:56:39:fb:ce:37:bc:63:98:47:de:06:8c:26:a7:f5:f2:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 20:36:39 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=174a75021e6b666fa82959c9f1c4d0edf5d210a4731328613f545ab23fc1fb1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:23:7e:d5:01:74:8d:ba:88:94:58:8b:e9:
                    8c:f0:26:4d:2e:63:af:df:7d:15:ae:04:2b:88:47:
                    84:e6:66:26:a6:90:9c:71:4f:17:ed:e9:39:b0:86:
                    ac:da:5d:48:47:3a:12:86:83:ff:18:be:d9:97:6c:
                    92:c8:b1:e7:68:da:82:16:50:04:17:73:2e:ef:6e:
                    46:93:ce:04:99:39:36:d1:99:54:2b:19:a9:e3:fc:
                    d4:85:61:74:37:d4:ce:ac:46:f7:95:b0:62:48:ee:
                    82:cb:cf:06:53:fa:5f:6d:78:a6:6b:c2:fb:cb:8a:
                    d1:bb:20:c0:cc:1c:16:cd:b6:78:35:98:52:59:2f:
                    50:aa:f8:90:9d:d2:8b:cf:6b:9c:0d:f4:07:a4:20:
                    dc:77:20:51:1c:61:e3:1a:90:8b:37:bd:1f:f7:32:
                    05:90:83:ab:da:1b:c7:12:b4:17:45:c2:06:b0:b0:
                    dc:58:e6:25:60:63:43:94:19:23:18:09:9b:b9:41:
                    ca:a2:41:d6:8b:c6:6e:b2:4d:dd:13:b2:3e:a1:8b:
                    75:0c:a0:42:2b:6e:74:b4:0c:92:7a:b4:97:43:15:
                    3d:3a:8c:83:5d:35:e5:4b:34:c0:69:d7:7e:f1:28:
                    1a:75:d6:81:eb:df:44:69:7e:68:3a:e5:eb:36:b5:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:38:82:17:9E:F5:51:30:CF:91:FF:33:27:7E:A2:69:72:CB:C2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e1e8253-d314-4ead-ac84-df69bf57783f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:af:7e:11:15:c7:e3:ea:68:6d:ba:49:c1:50:fb:b1:5d:
         94:b5:5c:8b:d2:18:2c:7a:d8:83:60:85:44:58:84:51:bd:2f:
         16:ee:6a:08:fd:38:35:e7:b0:d7:d5:f1:47:2a:eb:dc:14:81:
         7d:46:0e:90:e4:17:bd:ec:26:e7:85:29:98:30:f4:09:c9:df:
         03:e9:b6:92:77:d0:1f:ae:09:3e:06:6a:6b:c4:4f:a9:6e:94:
         be:6a:42:70:e3:04:c3:5b:f6:88:55:36:ee:b5:42:e9:09:ef:
         3e:30:4a:2f:0f:16:3e:b0:d0:fa:0d:c8:c9:44:c7:a3:83:c2:
         66:21:f2:1e:84:58:05:d0:b1:b8:53:57:4e:12:6c:95:eb:76:
         22:54:2c:98:cb:8b:e0:e4:a3:97:67:15:a5:9d:1e:57:b3:66:
         c7:cb:e0:e6:29:da:84:ab:4f:64:21:47:b5:29:5b:54:48:0d:
         5a:ac:89:87:e3:06:a4:0a:6d:0f:8d:33:94:d6:d4:7a:d2:03:
         b4:57:62:fd:81:4c:ed:20:04:82:4d:a7:43:cb:2e:94:dc:69:
         61:a0:81:10:7f:c5:f8:46:f6:34:1e:bd:ff:55:a5:bf:47:e0:
         d5:d4:cb:cf:c8:b6:56:e1:d5:b7:d4:49:42:65:ca:39:a0:97:
         95:dc:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:47:46 2025 by rpki-client