Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026a07cf-2cb9-42fa-b76d-361cc7723af3.roa
File:                     026a07cf-2cb9-42fa-b76d-361cc7723af3.roa (raw, json)
Hash identifier:          Bfj2d3aswZ/mg2fNSecSY0s2jaGZYHbRbse0vTI9JuI=
Subject key identifier:   26:5E:68:1C:53:CC:29:9C:79:11:8F:DE:AA:C8:3E:ED:48:BB:F8:9D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27E9D1C72D44EF30181F6C327C458F68AF599B2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026a07cf-2cb9-42fa-b76d-361cc7723af3.roa
Signing time:             Sun 19 Oct 2025 12:26:17 +0000
ROA not before:           Sun 19 Oct 2025 12:26:17 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.64.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e9:d1:c7:2d:44:ef:30:18:1f:6c:32:7c:45:8f:68:af:59:9b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 12:26:17 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e10a8af5611f5f1058a5b978f671e5e723b844e540a77a13bb6e2ebf4b03c6b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:61:a4:22:8d:0e:e5:43:85:00:91:50:5a:
                    3f:e5:73:8e:d7:80:4a:09:93:dd:73:cc:b9:9f:26:
                    da:68:a0:18:2b:3d:96:b2:37:0b:ce:f7:16:d6:29:
                    38:db:2b:a7:27:bc:2a:9d:bb:ff:b9:37:19:fb:6a:
                    a3:04:39:e2:8b:78:87:83:7f:99:54:e3:1c:81:5f:
                    83:ce:b3:ea:c3:77:f2:af:e4:a3:12:ff:7c:c0:8e:
                    f0:e0:11:e4:01:d9:dd:19:18:3b:78:c7:24:c6:60:
                    f8:ab:d7:7c:05:27:63:9e:a0:b7:cb:88:a6:58:32:
                    f7:95:bb:44:31:aa:f0:a9:a1:44:56:e3:9c:12:45:
                    77:c3:b3:d2:15:93:57:43:9d:e6:41:eb:e2:f3:72:
                    ab:c4:2d:2a:47:c4:ce:98:bb:f0:31:1d:67:ef:00:
                    1a:8f:8c:e1:71:6f:4a:e4:2a:53:c1:92:a7:82:1f:
                    8b:76:2e:80:d9:fb:85:d6:4f:6f:0c:48:f9:1e:ca:
                    34:5d:c9:ab:57:80:c4:3d:67:67:52:86:31:56:3e:
                    1d:76:36:6c:69:20:a8:b7:59:78:1b:10:b7:bd:38:
                    31:7a:dc:c4:0a:f2:65:b2:7f:08:c1:6f:bb:d3:e1:
                    c6:e3:04:cf:fa:ba:50:6a:54:a0:30:1e:fb:91:8b:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5E:68:1C:53:CC:29:9C:79:11:8F:DE:AA:C8:3E:ED:48:BB:F8:9D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/026a07cf-2cb9-42fa-b76d-361cc7723af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.64.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:ca:74:76:6c:8e:c9:7a:b0:bc:9f:cc:d1:a0:2d:aa:5e:
         58:ba:35:af:93:a6:c2:dc:5d:4c:1a:ac:02:1a:e7:f4:42:93:
         c6:ac:03:b6:b5:aa:d7:95:ca:82:98:de:9f:7c:58:99:ff:8f:
         90:30:89:75:c9:c9:6b:9d:b0:44:4f:ce:41:62:60:01:d2:32:
         b1:50:94:03:cd:20:d0:28:32:58:c7:e7:08:97:41:4a:b4:fc:
         10:57:4a:b9:b8:c1:11:5a:a6:eb:2b:23:77:a3:48:f6:3c:33:
         18:da:53:c1:16:b3:17:26:68:15:44:6f:0f:41:e0:1f:8e:85:
         6a:c7:46:2a:02:ed:82:94:52:41:04:67:21:b6:b6:da:ac:5e:
         14:1d:b0:4e:81:09:23:19:a5:e3:aa:1e:58:ac:33:f2:fa:f6:
         d3:69:8c:80:14:9d:94:fc:bb:60:86:4f:cb:4f:88:dd:0a:1d:
         11:6a:6e:19:31:a5:91:1f:b7:18:5e:5c:59:9c:57:d4:46:53:
         33:d2:74:c3:90:6c:8c:50:87:f3:42:b3:32:71:8b:4a:6e:59:
         fc:5a:e4:cd:78:28:cc:b5:73:e6:24:dc:c4:85:3e:11:08:66:
         c2:c8:f3:8e:a8:a5:0e:54:ed:b7:f7:30:49:b7:12:40:52:98:
         21:54:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:00:46 2025 by rpki-client