Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a94a1a7e-e3c9-43fb-bb8c-17bb54369ed0.roa
File:                     a94a1a7e-e3c9-43fb-bb8c-17bb54369ed0.roa (raw, json)
Hash identifier:          /8fgOHW+fqzxDGNjVuv1XWXz02aA7jSdsUS241kmZLA=
Subject key identifier:   23:A0:B0:6D:45:D3:91:19:53:00:35:3D:5D:E1:61:45:A6:81:99:C3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0EEA258D1E982A26A0A679C6312D7429E6A29BEF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a94a1a7e-e3c9-43fb-bb8c-17bb54369ed0.roa
Signing time:             Wed 24 Sep 2025 19:15:30 +0000
ROA not before:           Wed 24 Sep 2025 19:15:30 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ea:25:8d:1e:98:2a:26:a0:a6:79:c6:31:2d:74:29:e6:a2:9b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 24 19:15:30 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=c25d745bb378d59da282356a2752b52623901126955625803d10cf6493ecea5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:e5:f0:85:a1:96:13:c0:1e:80:d8:ce:73:
                    7c:6c:55:a6:91:56:bd:9e:3a:0a:4b:91:a6:f0:df:
                    b3:3c:fd:b0:40:81:9f:d3:ac:3d:f3:81:16:82:b7:
                    10:bb:6f:71:af:85:99:fe:57:40:0e:90:e7:7d:c8:
                    4b:f4:b1:67:15:1f:dc:4b:67:ed:87:4b:3d:04:a5:
                    80:d7:b1:53:32:e8:6c:e0:04:cc:3c:e6:7c:e7:d6:
                    8f:d3:59:d1:1d:d9:ce:26:33:9e:11:9e:45:2e:d4:
                    29:36:74:78:22:15:e6:16:75:a3:b5:04:1c:59:f5:
                    b3:19:ee:c5:10:57:55:9e:00:c3:55:b9:f7:e3:91:
                    8c:1a:88:47:56:97:6f:c0:43:32:91:6a:6b:6b:a3:
                    eb:e6:c1:35:44:d9:3f:57:62:e9:db:d6:75:1e:23:
                    6f:69:c7:3e:0f:69:73:6c:b1:96:4e:59:d0:c9:9f:
                    b4:e7:5e:73:c9:bd:90:40:28:6f:93:fd:fd:c7:96:
                    f0:e9:a5:29:01:9e:8e:59:bf:15:56:cd:54:8e:b1:
                    d2:de:88:3a:dc:17:da:ea:45:2e:6c:99:ab:c1:a2:
                    9b:0a:b2:d2:7c:21:df:22:7d:30:41:31:dc:64:74:
                    60:9e:50:4f:3b:2a:9d:ff:14:26:18:51:a2:93:2a:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A0:B0:6D:45:D3:91:19:53:00:35:3D:5D:E1:61:45:A6:81:99:C3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a94a1a7e-e3c9-43fb-bb8c-17bb54369ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:63:11:b0:8f:d8:90:c5:e4:c0:83:da:2e:e7:dc:6f:08:
         68:81:83:30:da:bc:f1:59:7a:26:ab:b3:e9:28:24:72:0b:fa:
         e1:bd:ad:48:0d:5b:0d:8c:f4:4b:23:4f:7f:d3:f6:3b:ed:cf:
         81:d5:31:96:36:13:16:a3:22:5d:c7:4c:7d:0d:83:06:4c:ac:
         10:c7:bf:30:09:0f:93:ea:86:95:7f:94:25:59:29:ba:22:d1:
         12:3d:07:67:2a:28:d5:f0:81:c7:3c:a0:a7:2c:5c:69:4a:25:
         f2:d1:57:0a:d6:97:19:4a:53:da:35:f7:55:fb:28:04:39:cf:
         71:d0:85:dd:58:5d:19:e6:a1:ac:22:ff:ba:86:99:3b:a4:49:
         6f:95:6f:5e:6b:d7:34:89:53:0b:28:69:ae:3f:75:ad:5f:6c:
         f1:4a:02:e0:5d:10:15:47:e8:ca:8f:28:1f:5f:b4:af:ee:b2:
         82:ae:e8:64:98:19:56:eb:41:7c:e0:9b:e6:1b:5d:68:77:0f:
         16:17:18:0b:3f:80:41:61:58:b5:2c:5b:67:ea:b4:ec:b2:03:
         7c:17:01:8b:b0:da:22:35:1a:e7:ad:31:f3:aa:00:75:a8:3d:
         b7:1d:77:cb:6c:c3:ea:1a:c0:fe:cf:e8:25:43:a5:44:8f:1a:
         48:de:a0:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDuoljR6YKiagpnnGMS10Keaim+8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTkxNTMwWhcNMjUxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjVkNzQ1YmIzNzhkNTlkYTI4MjM1NmEyNzUyYjUyNjIz
OTAxMTI2OTU1NjI1ODAzZDEwY2Y2NDkzZWNlYTVkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCehuXwhaGWE8AegNjOc3xsVaaRVr2eOgpLkabw37M8/bBA
gZ/TrD3zgRaCtxC7b3GvhZn+V0AOkOd9yEv0sWcVH9xLZ+2HSz0EpYDXsVMy6Gzg
BMw85nzn1o/TWdEd2c4mM54RnkUu1Ck2dHgiFeYWdaO1BBxZ9bMZ7sUQV1WeAMNV
uffjkYwaiEdWl2/AQzKRamtro+vmwTVE2T9XYunb1nUeI29pxz4PaXNssZZOWdDJ
n7TnXnPJvZBAKG+T/f3HlvDppSkBno5ZvxVWzVSOsdLeiDrcF9rqRS5smavBopsK
stJ8Id8ifTBBMdxkdGCeUE87Kp3/FCYYUaKTKrYvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUI6CwbUXTkRlTADU9XeFhRaaBmcMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2E5NGExYTdlLWUzYzktNDNmYi1iYjhjLTE3YmI1NDM2OWVkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN4XwwDQYJKoZIhvcNAQELBQADggEBAKL8YxGwj9iQxeTAg9ou59xvCGiB
gzDavPFZeiars+koJHIL+uG9rUgNWw2M9EsjT3/T9jvtz4HVMZY2ExajIl3HTH0N
gwZMrBDHvzAJD5PqhpV/lCVZKboi0RI9B2cqKNXwgcc8oKcsXGlKJfLRVwrWlxlK
U9o191X7KAQ5z3HQhd1YXRnmoawi/7qGmTukSW+Vb15r1zSJUwsoaa4/da1fbPFK
AuBdEBVH6MqPKB9ftK/usoKu6GSYGVbrQXzgm+YbXWh3DxYXGAs/gEFhWLUsW2fq
tOyyA3wXAYuw2iI1GuetMfOqAHWoPbcdd8tsw+oawP7P6CVDpUSPGkjeoCw=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:41:32 2025 by rpki-client