Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1261193b-2499-44e2-8978-b0fc06743d37.roa
File:                     1261193b-2499-44e2-8978-b0fc06743d37.roa (raw, json)
Hash identifier:          keH9UsrUKVwxf0Dxx1YYBD1GjBf3B6/aR9fvXPTZzc8=
Subject key identifier:   A6:C8:E0:8E:B3:4C:1C:65:52:EF:11:BE:74:E6:0A:63:60:3F:63:91
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5BA632A7F052F4A06695B0360F8569F955F55C1A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1261193b-2499-44e2-8978-b0fc06743d37.roa
Signing time:             Sat 18 Oct 2025 22:51:22 +0000
ROA not before:           Sat 18 Oct 2025 22:51:22 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.160.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:32:a7:f0:52:f4:a0:66:95:b0:36:0f:85:69:f9:55:f5:5c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 22:51:22 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=77434143beb30bc4aa4845f5bcf6b17ecabd55a6f3240fe924ac4f241e86ce46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:4b:2a:2f:7b:e5:71:2c:8c:d2:3b:3e:d9:
                    60:8c:4a:c1:ed:76:a4:8c:d5:88:86:29:fc:ea:df:
                    ec:de:5c:c7:29:fc:1e:f2:a3:91:1b:61:75:b6:df:
                    80:d7:ad:31:27:88:62:01:bb:d1:68:da:e8:9c:39:
                    a3:f0:b4:9d:23:7a:6c:ce:4c:b7:80:db:24:22:f0:
                    6b:1e:24:bd:f7:7a:c0:90:86:40:db:e6:84:fb:de:
                    9e:d4:e4:9b:a5:5c:87:2d:46:4a:15:7e:fe:d1:22:
                    de:b0:12:f9:fe:9e:38:cf:68:23:18:75:fd:48:ca:
                    83:f8:ae:40:5b:5b:a6:8b:f0:4d:2f:e7:ab:d1:96:
                    20:02:70:e5:4f:a8:37:67:7e:8b:f4:20:f9:2c:41:
                    5d:2f:fc:08:47:97:77:89:f9:3e:14:6c:7c:ca:c1:
                    d0:dd:15:05:49:12:a0:20:e0:4f:d2:a6:69:82:7f:
                    2f:84:84:5d:d5:35:68:e5:b4:a6:84:8d:71:37:be:
                    3c:8f:46:6a:97:dd:ac:46:73:79:47:4e:20:cb:45:
                    8d:44:86:8d:ed:1f:a4:16:e5:89:f6:bf:93:e9:60:
                    a5:da:71:70:69:a2:10:84:66:07:54:4b:80:7a:75:
                    8e:db:b5:23:e5:3b:97:58:6c:c6:3b:14:b5:6b:f7:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:E0:8E:B3:4C:1C:65:52:EF:11:BE:74:E6:0A:63:60:3F:63:91
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1261193b-2499-44e2-8978-b0fc06743d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.160.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:91:e6:19:cc:77:ce:03:4b:0d:92:b6:26:91:5a:7b:de:
         4c:75:d0:bc:be:9d:01:4f:76:5d:91:fe:d0:f9:16:61:92:d2:
         21:c6:33:aa:87:d7:46:c2:19:8d:ed:33:1b:18:98:b1:f4:fb:
         0d:85:d4:5f:47:b2:07:18:48:8d:33:f7:61:ea:f3:b1:54:d2:
         c0:0f:77:00:05:85:e7:17:25:40:70:87:fa:31:8a:8f:68:d4:
         f8:25:77:b3:53:2f:25:0f:9c:ef:44:c6:7b:67:36:42:2c:d5:
         b7:b0:67:ff:7d:a4:a7:77:f7:52:7d:01:59:2f:64:44:0b:02:
         69:d2:32:4e:83:58:56:26:19:b0:fe:1d:dc:b1:ed:57:00:3f:
         e4:55:30:9b:63:93:a3:32:9c:dd:8c:23:a4:63:01:f6:40:03:
         2f:72:30:68:77:07:6e:94:78:5f:7a:11:d5:10:13:0e:a6:0d:
         83:36:16:78:8e:e6:bc:f9:e3:7f:48:0e:e8:41:ec:09:b8:12:
         a9:4a:00:41:e9:c0:98:6b:fc:85:08:14:59:9f:a2:cf:86:4f:
         16:89:8b:20:5c:99:a9:13:b8:80:89:bb:88:8c:0a:70:13:f2:
         07:31:86:4a:a0:0e:09:b0:7b:79:4d:19:62:68:63:b0:25:1d:
         fd:61:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:07:09 2025 by rpki-client