Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05077d85-f0cc-48f6-bbd5-806ce48a3784.roa
File:                     05077d85-f0cc-48f6-bbd5-806ce48a3784.roa (raw, json)
Hash identifier:          l3CnEIDvgKFtI6OygmFthY/RDqDMLE7evPOWDWvCTSE=
Subject key identifier:   0E:25:20:F4:82:2C:83:C7:95:9F:BC:22:AE:AD:0F:71:A9:E8:31:9A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3CC89220222E60CED70B8668F21695F922BA15B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05077d85-f0cc-48f6-bbd5-806ce48a3784.roa
Signing time:             Sat 18 Oct 2025 18:13:24 +0000
ROA not before:           Sat 18 Oct 2025 18:13:24 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.164.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c8:92:20:22:2e:60:ce:d7:0b:86:68:f2:16:95:f9:22:ba:15:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 18:13:24 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=43942c25570a93ff7e66391315c2c70098e504694ddf220ab8464b1018793f64, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:db:35:27:5a:a2:51:2c:cd:80:3c:11:70:
                    f0:56:16:54:3f:2f:a0:0f:19:53:48:e0:d4:f4:46:
                    8c:51:f7:4a:21:aa:76:60:86:fd:f1:03:26:9a:e6:
                    c9:fa:80:ea:f6:2e:71:2c:5f:ed:1f:f9:d1:c8:ce:
                    63:c5:aa:69:2b:e4:32:04:31:95:96:a0:08:a9:60:
                    e9:8d:b9:4f:5a:04:af:8f:0e:a3:4a:fd:6f:7b:08:
                    4a:8c:bf:cb:af:a8:b5:29:9e:83:33:3a:46:84:7a:
                    26:ae:b4:a4:c2:c9:31:b9:78:45:01:23:d3:73:b5:
                    5b:10:3d:49:ed:28:6c:c1:58:f9:15:1f:84:2a:f4:
                    a4:7e:18:84:5b:03:6e:ab:9e:93:ae:7d:ac:07:f6:
                    ca:c3:0a:2c:75:97:cf:76:9f:f5:ea:26:7a:0e:fb:
                    39:ee:a2:2d:7b:63:07:d4:17:71:66:93:84:b5:38:
                    1d:a4:00:76:d0:6a:8e:d7:50:ee:60:74:0b:b1:f9:
                    f4:9b:c8:28:c5:27:53:55:38:b9:70:49:f4:d7:26:
                    5b:20:72:b2:46:ac:da:e7:6c:d1:3d:9b:aa:3c:a7:
                    3f:0b:8e:a9:fc:3e:32:dd:38:3b:82:04:4a:90:a8:
                    71:1c:ba:8b:bf:1c:c4:33:9a:15:84:fa:6d:fa:9c:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:20:F4:82:2C:83:C7:95:9F:BC:22:AE:AD:0F:71:A9:E8:31:9A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05077d85-f0cc-48f6-bbd5-806ce48a3784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.164.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:71:1c:55:46:6c:7c:42:7b:b5:8e:4a:a3:ca:2f:0c:d3:
         f1:22:eb:8f:c3:d4:d9:6f:08:84:0b:aa:d4:61:15:17:32:03:
         23:13:9b:f0:8b:41:12:f6:3c:3f:f8:c2:af:d6:ef:1b:79:53:
         49:dd:0f:18:dc:cd:8c:bb:60:ca:06:3e:e1:6c:96:84:bb:d7:
         1a:69:9a:97:56:b4:3c:78:cc:11:28:c6:30:e1:23:94:75:f2:
         89:d8:c3:6e:55:75:03:c6:dd:22:b6:60:bf:97:7e:16:f0:f9:
         b3:4c:51:1d:a2:1b:97:c4:d7:2f:bb:5e:08:6f:1c:d8:36:70:
         f3:b8:4e:86:85:0b:6a:25:32:f3:ad:6e:cc:9a:e3:50:56:a4:
         4b:4a:ba:7a:40:af:bd:7b:89:7c:84:29:31:a5:f3:4d:f5:76:
         ad:8f:5f:0f:ea:e2:42:c8:cd:5d:c2:ec:67:38:58:33:09:6d:
         0a:48:ab:5b:a2:d9:3e:7e:41:c0:82:e2:e5:a3:c8:09:f5:00:
         49:1e:33:52:e8:d3:93:4d:17:86:2d:66:89:8e:d0:c0:31:ac:
         a1:63:e2:10:62:bd:e3:dc:0d:0b:94:06:0e:80:4d:3c:ae:da:
         36:6f:34:59:4e:da:50:be:c1:f6:f4:a5:92:62:8e:a3:5b:1b:
         64:79:f1:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPMiSICIuYM7XC4Zo8haV+SK6FbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgxMzI0WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0Mzk0MmMyNTU3MGE5M2ZmN2U2NjM5MTMxNWMyYzcwMDk4
ZTUwNDY5NGRkZjIyMGFiODQ2NGIxMDE4NzkzZjY0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRHds1J1qiUSzNgDwRcPBWFlQ/L6APGVNI4NT0RoxR90oh
qnZghv3xAyaa5sn6gOr2LnEsX+0f+dHIzmPFqmkr5DIEMZWWoAipYOmNuU9aBK+P
DqNK/W97CEqMv8uvqLUpnoMzOkaEeiautKTCyTG5eEUBI9NztVsQPUntKGzBWPkV
H4Qq9KR+GIRbA26rnpOufawH9srDCix1l892n/XqJnoO+znuoi17YwfUF3Fmk4S1
OB2kAHbQao7XUO5gdAux+fSbyCjFJ1NVOLlwSfTXJlsgcrJGrNrnbNE9m6o8pz8L
jqn8PjLdODuCBEqQqHEcuou/HMQzmhWE+m36nPPvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDiUg9IIsg8eVn7wirq0PcanoMZowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA1MDc3ZDg1LWYwY2MtNDhmNi1iYmQ1LTgwNmNlNDhhMzc4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAISpNgwDQYJKoZIhvcNAQELBQADggEBACkvcRxVRmx8Qnu1jkqjyi8M0/Ei
64/D1NlvCIQLqtRhFRcyAyMTm/CLQRL2PD/4wq/W7xt5U0ndDxjczYy7YMoGPuFs
loS71xppmpdWtDx4zBEoxjDhI5R18onYw25VdQPG3SK2YL+Xfhbw+bNMUR2iG5fE
1y+7XghvHNg2cPO4ToaFC2olMvOtbsya41BWpEtKunpAr717iXyEKTGl8031dq2P
Xw/q4kLIzV3C7Gc4WDMJbQpIq1ui2T5+QcCC4uWjyAn1AEkeM1Lo05NNF4YtZomO
0MAxrKFj4hBivePcDQuUBg6ATTyu2jZvNFlO2lC+wfb0pZJijqNbG2R58Xk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:06:29 2025 by rpki-client