Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File:                     e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier:          Ls28BzuUPpxpzbyQNVJk8tW161B2JJpBw/AkjCBMKgY=
Subject key identifier:   57:C1:AB:4E:1D:BF:4A:8A:41:6C:79:80:16:9D:1D:D5:53:7C:58:35
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       643BF1556915E2A88800CB11C1803C63B36AC68E
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time:             Fri 26 Sep 2025 00:50:36 +0000
ROA not before:           Fri 26 Sep 2025 00:50:36 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:f1:55:69:15:e2:a8:88:00:cb:11:c1:80:3c:63:b3:6a:c6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Sep 26 00:50:36 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=b4178979a34e2f9ead85e77feeca066002e36b831e4c9cee7847c16f55342bfc, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:08:5d:9d:db:80:4b:ac:b9:d3:42:35:86:
                    d7:ce:18:7e:ca:00:c1:a5:16:ef:ca:f8:5d:32:77:
                    19:1e:47:2c:33:02:9c:21:98:c7:4e:18:0c:fe:43:
                    0e:0a:20:7a:c5:3b:ed:c6:c4:0e:85:ba:86:11:d3:
                    91:3e:bc:90:42:03:80:ae:51:79:15:a4:ec:ae:d0:
                    77:77:d0:5a:1d:24:bd:7a:87:59:c4:1f:3f:08:53:
                    74:e9:b6:c5:75:a6:57:ed:86:39:cd:1e:7f:d1:7c:
                    46:f1:71:7a:b6:4e:75:43:7e:07:d7:db:ee:e4:e3:
                    ec:a2:1f:bf:27:3a:39:7c:3e:1d:c8:e8:24:e6:52:
                    61:f3:e4:25:a1:e4:86:af:41:f5:eb:c7:8b:4e:05:
                    51:69:b8:79:16:25:0c:cc:03:c2:92:f3:1d:72:52:
                    d5:5e:f4:96:cd:69:fc:3e:cc:b3:55:9c:1a:50:e5:
                    34:58:c4:d3:51:8b:d6:3c:ec:9e:3c:cd:79:13:54:
                    d3:bc:62:68:b8:32:40:e7:99:8d:9e:74:a2:10:09:
                    2d:f8:d1:0a:7f:49:cf:ff:e3:02:27:c4:24:e3:13:
                    ff:15:ba:dc:0a:b9:62:af:9b:72:f3:a9:be:e0:70:
                    12:49:7c:ea:81:3b:ab:8e:6b:be:55:1f:46:c7:b8:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:AB:4E:1D:BF:4A:8A:41:6C:79:80:16:9D:1D:D5:53:7C:58:35
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:60:4f:d5:58:7d:dd:52:08:dc:b4:9e:3f:e5:fa:7d:15:
         61:a2:73:ea:30:87:6e:f7:73:53:bd:90:bb:05:e9:17:cb:45:
         0e:05:f0:8b:66:24:2c:84:73:6c:a1:f4:f2:bb:58:89:bf:3e:
         1e:61:51:49:c7:75:a4:cb:45:88:9d:f7:e3:94:09:8b:02:38:
         3c:35:92:de:92:17:bc:ba:fe:44:50:f4:58:63:94:4d:2b:a4:
         d2:16:92:7a:f9:23:63:a4:0b:e8:a2:88:5f:09:37:0d:dc:da:
         96:e5:8c:04:a8:ea:3b:a1:4d:ec:17:15:8e:59:11:fc:ea:a4:
         6f:e1:4a:d2:6b:84:c3:b4:e1:e2:4b:ed:2b:f1:01:a7:0d:91:
         6c:b3:91:60:e8:12:5a:b7:d8:29:73:de:54:e3:fc:1a:a7:d9:
         fc:1d:0c:49:38:77:e3:08:dd:95:fe:6e:8d:57:b6:8a:ac:df:
         87:09:fe:11:e2:29:cb:e1:7e:93:0d:02:4c:dc:1d:1c:b5:a8:
         f6:78:47:84:52:4a:bf:68:f4:af:87:89:13:f3:70:01:c6:4f:
         d8:8d:3e:40:5b:53:10:b6:99:ed:dd:60:1c:e6:e5:e5:4a:15:
         af:9c:b2:50:d0:c2:11:e6:6f:cd:b0:9d:ba:1d:af:81:1d:33:
         93:37:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:17 2025 by rpki-client