Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adbbdeb2-6282-4394-82d2-51972f7d3f13.roa
File:                     adbbdeb2-6282-4394-82d2-51972f7d3f13.roa (raw, json)
Hash identifier:          /+MHi6lWn65Z8UbMb52dpVcvCGpwgOg5EctJ47StIhQ=
Subject key identifier:   1E:85:B2:66:40:86:B5:BB:D7:9E:AB:6A:19:39:49:E8:8A:00:A4:9A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       681EE6651F6DBCA098817E69BF003D469B06ABB4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adbbdeb2-6282-4394-82d2-51972f7d3f13.roa
Signing time:             Mon 22 Sep 2025 21:55:49 +0000
ROA not before:           Mon 22 Sep 2025 21:55:49 +0000
ROA not after:            Mon 27 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.239.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:e6:65:1f:6d:bc:a0:98:81:7e:69:bf:00:3d:46:9b:06:ab:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 22 21:55:49 2025 GMT
            Not After : Oct 27 23:59:59 2025 GMT
        Subject: serialNumber=afdca808846b83fd656b70468ade0e0d16a6a72ade26c60c5f01ee083da3a787, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:07:c8:5d:b2:c5:2c:88:bb:93:7b:8c:15:
                    cf:52:6e:14:0d:e5:e7:35:7d:03:5b:cc:49:5b:1b:
                    93:b7:0b:ff:25:c9:77:b1:c1:ca:aa:72:f2:ff:b0:
                    d1:d9:01:04:38:62:99:16:9a:09:90:9d:9d:5b:1e:
                    64:9b:9a:90:34:8f:c6:8c:e3:f6:2d:bb:91:fd:fe:
                    18:8c:ec:1c:a1:de:62:42:c2:2b:26:ea:20:3c:5d:
                    42:cf:34:d5:e7:71:80:cb:97:7e:fb:a0:fe:b2:52:
                    46:b0:4f:c9:67:2a:d9:fd:52:01:05:bf:de:cf:65:
                    a3:7e:61:fb:21:24:82:02:26:66:fa:e9:0e:bf:c1:
                    fd:8f:93:fc:b0:5f:2c:35:70:7f:76:d3:11:85:12:
                    e0:e5:69:97:53:fc:e1:7a:c7:7c:83:98:d2:4c:91:
                    6c:53:cd:4f:68:bc:7c:5b:45:6f:e4:a5:be:82:c7:
                    98:a0:4f:b9:0d:cb:30:b3:bd:9b:37:52:af:88:2e:
                    ce:aa:96:84:8d:9e:a6:61:4d:e6:75:c6:ca:08:e3:
                    f9:e9:08:76:11:3d:0d:5c:df:f7:48:ab:af:3e:49:
                    bf:bc:99:99:83:8e:78:6d:2a:9c:8b:71:11:c3:d9:
                    1b:72:da:a1:13:8d:dc:75:5c:99:cb:b1:c7:eb:0e:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:B2:66:40:86:B5:BB:D7:9E:AB:6A:19:39:49:E8:8A:00:A4:9A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/adbbdeb2-6282-4394-82d2-51972f7d3f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.239.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:ff:83:e2:e3:6c:2a:dc:29:85:73:31:e2:85:d2:8a:70:
         15:c6:1c:e2:04:37:e5:21:5d:31:fb:d9:82:79:b4:4f:77:74:
         6a:7d:a4:61:be:7c:a8:63:4c:66:a7:67:fc:bc:76:8d:eb:f2:
         e3:1d:61:d5:9b:ee:4a:f7:41:d5:09:4d:24:3a:84:24:ed:99:
         79:3b:13:fa:10:66:46:58:b8:16:d1:ad:18:ca:8d:0c:7b:34:
         e4:77:38:f5:be:c2:dd:3c:22:f7:c8:13:aa:6f:0d:fd:78:a1:
         13:70:49:8d:3b:5e:75:9c:47:e4:b9:0d:63:96:4e:81:67:ce:
         49:f4:f4:81:a6:dd:f7:5b:73:99:b9:7b:34:a7:9e:a8:43:4f:
         3e:a3:f9:3a:22:96:70:53:2c:aa:35:86:af:7d:38:89:3c:17:
         87:e6:fe:9e:cc:36:a8:76:fc:f0:13:66:5f:e2:4b:3a:e1:e3:
         a9:a0:61:06:69:35:4c:a2:f9:c9:f8:8f:8e:a6:d9:7c:e9:99:
         c2:b6:d7:a6:cf:43:27:66:04:87:64:36:aa:da:62:34:54:05:
         48:b3:72:55:8d:3b:70:38:93:ea:4c:d8:f3:87:23:74:4c:d0:
         09:79:c7:b7:26:40:9c:16:fd:f8:61:f8:ed:dc:18:11:36:2d:
         49:1b:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:47:31 2025 by rpki-client