Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
File:                     27e99577-d3d4-4681-953c-071c09e6aecd.roa (raw, json)
Hash identifier:          ir/JE22pZcP20xYvEihmM+Phu38cSn1f1yCEswx9xLw=
Subject key identifier:   E3:80:F6:18:94:2A:F8:5F:1A:4A:6C:CD:72:68:36:A8:92:FB:50:91
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       61625B95896FF63CD4BA58A8055D98DCEAC84836
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
Signing time:             Sat 18 Oct 2025 00:00:23 +0000
ROA not before:           Sat 18 Oct 2025 00:00:23 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:5b:95:89:6f:f6:3c:d4:ba:58:a8:05:5d:98:dc:ea:c8:48:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Oct 18 00:00:23 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=432371130b3e298494faab6527cc8b83ae5810ccde3878e744d53267d395ab4e, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:c8:e6:bd:9c:b9:49:83:e0:6b:00:77:f9:
                    d2:65:50:ae:92:76:e4:9a:25:98:38:75:f1:48:05:
                    02:c8:02:ab:38:5b:ef:c4:78:ab:70:29:32:bc:32:
                    a5:57:62:49:3e:7e:ee:49:5b:a5:ff:65:1c:20:74:
                    7f:75:24:99:cd:cf:57:3c:cd:0c:97:dd:15:9e:5a:
                    03:91:10:35:39:29:53:92:ba:2e:de:f4:a5:47:3d:
                    0c:03:c8:33:a7:27:6d:94:b5:25:de:e4:fd:15:50:
                    d6:46:2b:db:d8:80:fe:db:0e:53:f0:d9:ae:a4:f4:
                    9c:a2:10:06:72:81:4b:21:36:9c:a6:23:26:ac:5e:
                    4e:16:b0:a3:e8:8c:49:ca:79:57:f2:35:61:ce:fc:
                    b8:a6:f2:98:47:2f:cc:55:90:f3:92:e1:e9:d2:e3:
                    34:fe:13:e1:21:51:9d:e6:fb:37:b8:9a:9a:e9:0c:
                    4a:88:08:2e:4e:81:94:4c:5c:c1:dd:0e:1c:f2:cb:
                    39:bd:a2:93:27:44:fb:a4:e2:30:62:88:14:ba:70:
                    bf:95:16:09:2f:d2:76:3d:63:4a:c9:4e:3e:87:ed:
                    6b:0a:54:b5:f0:8d:f8:6e:55:fb:75:1d:b7:5a:bc:
                    35:51:6f:38:60:4c:15:c6:e6:cb:b8:fd:e6:46:66:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:F6:18:94:2A:F8:5F:1A:4A:6C:CD:72:68:36:A8:92:FB:50:91
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:8d:ee:04:ee:3a:b7:77:52:5a:a3:5e:38:22:7f:09:b5:
         48:ff:db:d7:21:1c:01:91:83:25:3b:97:a0:33:76:1e:68:1b:
         5a:7b:09:81:d8:ab:7a:8d:81:ee:7f:c4:02:66:72:9a:64:dc:
         ca:11:a3:5e:6c:96:d9:4b:fd:39:3e:3e:3d:ba:ab:f7:94:8c:
         b0:2e:c1:4b:3c:ce:d9:07:46:72:d2:33:42:57:93:1c:14:be:
         c8:a6:b7:51:c5:92:5f:81:11:1d:e5:54:aa:af:0a:03:c4:1c:
         75:21:0c:da:30:c2:69:6b:86:0b:3c:1e:c8:38:05:19:75:6c:
         e4:16:7e:2f:05:da:20:bd:a0:e2:83:b5:94:ea:f1:06:9b:d3:
         d9:28:fc:f9:40:19:af:d0:79:b5:8a:30:1b:f4:6b:68:60:10:
         81:9a:d6:0e:3a:be:a1:19:ac:02:a3:97:8d:d2:d0:4e:b6:99:
         5a:d7:01:d7:54:16:29:c5:ef:e0:27:9d:c5:b4:4a:59:77:77:
         82:63:39:8d:93:28:b6:34:e0:db:f5:8f:af:23:b5:b2:46:8f:
         a7:bc:c8:ea:e4:a8:2e:e4:91:7c:6c:a7:b2:92:de:10:61:00:
         63:6a:ef:d2:19:f1:4a:e8:29:25:10:d5:5e:34:9a:41:16:83:
         31:f5:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:43 2025 by rpki-client