Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f054052-7487-4a7a-b4ab-380ca4dfb253.roa
File:                     0f054052-7487-4a7a-b4ab-380ca4dfb253.roa (raw, json)
Hash identifier:          rA3kZoYULZH51nc7Tj4jSj1IAAx0Oz1D2iV7v3aMMeU=
Subject key identifier:   4B:6D:63:D3:A0:32:C2:57:15:F1:14:4D:19:9C:C1:B7:1C:13:74:96
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1922823A034B536467CB7C2579CD4C9F0E74E918
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f054052-7487-4a7a-b4ab-380ca4dfb253.roa
Signing time:             Sun 19 Oct 2025 18:23:40 +0000
ROA not before:           Sun 19 Oct 2025 18:23:40 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.32.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:22:82:3a:03:4b:53:64:67:cb:7c:25:79:cd:4c:9f:0e:74:e9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 18:23:40 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=f7e2f5c3f0912e715943827e1bc3ce8f8b4db384254d0e0e22daf691153051dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:2c:3b:07:10:5f:a4:00:e0:1e:02:c8:7f:
                    e7:5a:f9:63:47:c6:b3:95:a8:c9:4d:c1:f5:99:26:
                    8d:40:cd:38:68:1c:05:f3:32:a2:9b:26:4b:9c:af:
                    08:a5:83:50:0b:0f:66:2a:bf:85:0e:ff:b3:91:59:
                    f2:b9:51:b8:96:cc:4e:3e:5c:52:dc:f6:72:e9:bd:
                    3b:67:33:1e:0b:1b:c4:19:77:f4:0b:81:b1:4b:65:
                    6a:0c:c0:0d:f9:1e:8d:1d:93:2f:c7:a4:3d:1b:5c:
                    27:95:13:b4:d6:3b:73:a5:f6:99:e5:ff:4a:41:7b:
                    52:89:16:82:9a:38:67:e1:dc:80:53:f7:e6:b3:92:
                    c4:54:60:22:b0:e2:48:ff:c6:6e:4d:5a:0c:c1:86:
                    7e:51:11:01:ec:4a:a1:af:10:62:9f:90:0f:a7:7d:
                    d6:2e:8f:78:24:10:be:c8:7d:1f:80:e5:23:74:c8:
                    8e:46:a7:c6:e7:2e:cc:56:60:ea:5c:52:03:76:5e:
                    0a:52:ff:50:b0:ec:60:f9:3b:9a:44:19:1a:b0:e0:
                    c6:7c:dd:a7:78:b3:19:6b:ac:e7:78:ab:9a:2f:de:
                    72:b8:84:84:96:d8:d4:d4:8e:53:48:e6:32:7b:47:
                    02:ba:34:20:a0:44:4e:47:fa:90:3f:69:15:c8:30:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:63:D3:A0:32:C2:57:15:F1:14:4D:19:9C:C1:B7:1C:13:74:96
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f054052-7487-4a7a-b4ab-380ca4dfb253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.32.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:3e:88:c4:97:17:99:f8:4e:44:ea:ba:2f:f9:54:c7:04:cb:
         ab:ef:a6:0a:1d:4c:07:2f:89:04:f5:15:04:c1:4d:b8:61:58:
         43:a9:89:20:9b:c7:7a:6c:fb:14:9c:c0:c8:53:4f:7c:5b:39:
         fc:7e:49:9d:ab:c2:4b:31:14:d4:ec:55:7b:c7:39:e5:e3:48:
         44:fb:36:ca:ec:92:db:fa:65:2b:73:3c:05:ff:20:4f:f0:5c:
         1a:8b:f7:86:f3:44:e4:6d:6e:4d:b8:fc:90:8d:62:40:20:bd:
         c6:7f:6f:ea:8d:61:76:b9:13:4c:eb:ba:0d:c8:b1:f1:f7:11:
         f0:6d:43:98:79:00:e8:9b:02:a6:70:24:01:95:d1:3a:ad:20:
         e5:cd:1c:03:1b:0a:12:0d:0c:80:a9:ed:56:df:cd:c0:b3:30:
         d9:35:5d:2a:f7:ba:4e:d4:08:e2:d7:0a:dc:8a:97:27:c3:9d:
         c7:4e:4b:a8:d3:bb:65:19:85:56:7f:8a:2c:7c:d8:85:fe:de:
         51:05:6d:02:da:e7:9c:95:d1:c5:6d:af:f2:4e:9e:ad:64:cc:
         3c:7d:b8:47:c9:7a:d9:59:2a:f5:fd:fd:48:c4:3a:5e:be:0f:
         bb:22:1a:59:d3:cd:5c:bb:03:cb:6c:16:42:93:d6:b6:bb:dd:
         f8:50:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:10:40 2025 by rpki-client