Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9771368-b269-49aa-a89d-85cf48914006.roa
File:                     a9771368-b269-49aa-a89d-85cf48914006.roa (raw, json)
Hash identifier:          mf7qDH0OnhyZMGaiAqW16eTtsxmZKOnW4LayUFROXVQ=
Subject key identifier:   40:94:17:AD:94:B9:A9:FA:F0:85:B5:33:00:36:F2:C0:AC:78:AE:3B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4586834F0B8818510EDF4834E654B12C1B08C9B3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9771368-b269-49aa-a89d-85cf48914006.roa
Signing time:             Mon 22 Sep 2025 17:11:53 +0000
ROA not before:           Mon 22 Sep 2025 17:11:53 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.154.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:86:83:4f:0b:88:18:51:0e:df:48:34:e6:54:b1:2c:1b:08:c9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 17:11:53 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=2b9d428cffcc59a5919ff9b857e7565932615bca294c97e83bd55652940394a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:7a:f6:16:65:77:fc:c9:0f:60:c0:d8:59:
                    4c:f4:1b:ca:7b:20:15:ec:fd:6a:5d:3b:e4:3e:e3:
                    1e:ca:7d:b6:06:5f:0f:e8:a9:c7:17:b2:8f:ef:c8:
                    aa:51:fc:af:3e:5d:f1:4e:1a:cc:44:45:8e:d5:90:
                    c4:60:9e:34:c2:83:02:2d:9b:32:d7:47:24:fa:d9:
                    83:ea:9e:17:eb:a6:1b:8d:3c:96:f0:d6:56:8c:e0:
                    f4:0e:76:87:41:b4:70:dd:e1:af:26:08:b6:f1:96:
                    3d:93:8e:9b:02:62:3a:ec:d6:89:4d:39:38:f9:03:
                    9f:de:9c:64:34:5b:a7:29:9e:6a:c9:d7:8f:67:de:
                    e1:47:37:d8:b7:d1:9f:11:17:52:cc:61:14:ca:6c:
                    8a:c3:9f:d3:17:6d:a6:7b:ad:bc:8f:65:2c:e9:b2:
                    7d:1d:8e:57:d6:12:71:e0:61:ea:13:bf:45:59:bb:
                    24:ae:55:62:51:71:8d:02:8d:f1:0d:eb:63:54:34:
                    0e:91:f9:03:e9:8b:08:98:46:73:28:04:28:8e:30:
                    7e:30:5b:b1:da:4d:00:4c:a7:10:12:71:29:50:8b:
                    94:bb:1e:64:44:69:44:52:0c:a4:b6:51:11:39:77:
                    6f:34:9f:e3:34:65:60:7a:59:d1:5c:6f:e8:88:6a:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:17:AD:94:B9:A9:FA:F0:85:B5:33:00:36:F2:C0:AC:78:AE:3B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9771368-b269-49aa-a89d-85cf48914006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8b:ef:8a:9f:27:32:60:53:81:1c:c1:9e:1d:84:d8:13:10:
         2d:66:ef:43:81:d2:87:b0:c5:93:79:d5:0b:80:62:3d:fe:75:
         96:b7:ac:ed:83:59:cd:55:16:8b:58:27:d3:c0:aa:aa:08:42:
         70:6a:de:c1:bc:21:96:25:72:31:32:5b:86:56:67:00:b0:41:
         48:52:cf:5c:4f:e2:5f:1b:bb:ef:f9:7a:60:6b:c5:a0:6f:fe:
         a5:c6:a1:10:89:43:fc:08:58:ab:15:1c:9a:32:87:ce:1f:e8:
         d4:ca:15:28:a0:a5:42:25:2c:f8:e2:ee:77:45:a0:97:35:86:
         26:58:1b:85:46:fd:fb:a1:86:d9:2d:7a:0e:8b:dd:1b:68:83:
         7a:df:23:24:ad:5f:57:3b:bb:d6:be:7b:f7:b0:b0:50:2b:9c:
         f9:7a:e1:e0:ce:a2:22:f3:38:6e:b5:df:6d:3d:58:4f:c7:e6:
         4d:26:49:dc:7f:a2:8e:dc:ee:39:35:ee:a9:31:f7:82:aa:b1:
         c6:88:22:eb:49:18:dc:38:34:be:a5:58:b0:2d:10:8d:f3:1a:
         92:ae:4a:ed:a7:4d:51:0c:c0:38:87:84:91:2a:f3:28:eb:53:
         be:2b:e0:dc:14:d7:29:99:22:f0:2d:1b:ff:a5:7d:9f:4a:99:
         75:57:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:04:56 2025 by rpki-client