Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a372b8f3-0fea-4dcb-a0f2-d249b9c800b2.roa
File:                     a372b8f3-0fea-4dcb-a0f2-d249b9c800b2.roa (raw, json)
Hash identifier:          xhM1CBmRsAHkJOPj3y8EPkQRoqfni0fhdyIEMJs9IQ0=
Subject key identifier:   A5:92:DB:C5:38:6C:60:B7:2E:F1:2D:BC:75:A6:43:C8:13:3A:E9:42
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C5D99751AEDB548524620F087ABD8001A752430
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a372b8f3-0fea-4dcb-a0f2-d249b9c800b2.roa
Signing time:             Thu 16 Oct 2025 18:22:43 +0000
ROA not before:           Thu 16 Oct 2025 18:22:43 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.222.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5d:99:75:1a:ed:b5:48:52:46:20:f0:87:ab:d8:00:1a:75:24:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 18:22:43 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=ded9e0bc16a7098d140ff2eec6f39689a8dc9ced86329e29b643ba62ad8a78ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:3e:cc:21:82:5d:99:b6:cd:ed:40:9e:dc:
                    5d:cd:19:f0:da:ec:27:6d:ac:d3:86:09:84:a1:c3:
                    d4:b6:92:ed:79:0c:c3:d4:cb:21:3f:f7:8d:dd:74:
                    01:a3:8c:69:47:4b:14:0d:c2:1a:54:e3:43:5f:04:
                    e8:6b:af:dc:c3:ef:c0:5b:2f:33:e9:37:f1:4e:2b:
                    59:40:b3:7e:42:84:17:18:3a:47:6d:fd:dc:83:20:
                    1b:8e:ed:9b:57:88:82:75:43:f4:f4:6a:47:ad:59:
                    6a:27:ab:6b:b7:dd:3e:6a:38:e3:47:3a:59:b6:75:
                    fc:e1:d3:b3:fe:f4:ec:ad:36:36:14:83:35:f5:fa:
                    f4:f7:cf:7a:d9:43:f0:fd:66:5b:2a:8c:92:ac:8b:
                    08:2b:de:64:48:3a:42:1d:61:0b:8d:61:71:90:88:
                    1c:c4:f5:3e:04:9e:f5:a1:60:9a:33:5b:1c:ad:e9:
                    cf:bf:b2:95:2e:d0:f2:ad:13:50:9c:75:4e:2c:df:
                    cf:0b:d2:ed:10:d4:40:3b:4a:d1:55:8f:44:1b:3f:
                    f1:dc:39:e7:0b:00:e8:67:f7:d0:17:5d:e0:bd:07:
                    54:11:10:5b:42:eb:f8:ee:28:fd:f3:47:24:dd:f0:
                    a2:f9:fa:2c:12:f3:3c:8b:1f:c5:43:89:75:7a:d1:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:DB:C5:38:6C:60:B7:2E:F1:2D:BC:75:A6:43:C8:13:3A:E9:42
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a372b8f3-0fea-4dcb-a0f2-d249b9c800b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:fb:71:e1:4f:e0:29:83:53:d3:0b:79:7c:22:f4:ab:5e:
         9a:a2:a2:ba:05:af:f7:b8:a0:66:b0:da:d9:1e:7c:57:dc:57:
         94:ca:c6:e3:30:20:7f:08:0d:ab:33:ac:06:99:bf:5c:09:7c:
         93:19:ce:87:96:e5:e6:04:85:d8:ab:3e:d5:81:8d:08:1b:23:
         b2:2a:78:7a:73:14:f1:17:87:2f:b8:ce:0e:77:84:36:fe:38:
         18:19:0c:f3:cf:e0:19:f0:49:fd:ae:db:0f:b7:41:bb:09:09:
         b8:cb:89:de:12:bb:38:bf:fd:f8:fc:47:68:54:63:8a:15:fa:
         45:42:f6:de:c7:06:21:2d:c3:64:52:bb:1b:c1:2d:0a:ce:41:
         6b:b3:e5:8d:4e:7e:1d:59:18:d6:2e:43:fb:1c:df:6e:1f:ea:
         8b:00:11:9b:7b:25:3c:98:e8:3d:36:a4:7d:19:e2:51:9e:77:
         65:63:32:b6:68:72:01:02:50:fd:d7:15:9f:ec:33:5b:a1:7a:
         54:cb:5c:cb:ec:56:4a:cf:55:c2:b5:a4:31:da:2e:90:b1:40:
         78:ee:8d:a5:7a:99:9f:32:0e:e8:16:58:3c:f2:cf:d6:35:f9:
         c5:aa:e4:03:1f:b0:8a:fe:5c:bc:eb:29:64:8c:1d:53:aa:26:
         cd:2f:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:41:48 2025 by rpki-client