Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1435d8f1-c945-406e-9645-e9b24ac9c9c5.roa
File:                     1435d8f1-c945-406e-9645-e9b24ac9c9c5.roa (raw, json)
Hash identifier:          A+mTpm2d0PHtHFdBdDOrwKiEfM9FWpSV6ZrVwmXsc8g=
Subject key identifier:   F3:E5:4A:9F:E8:67:4E:B6:E2:5D:1F:D3:43:A1:4B:78:95:F9:80:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       11E3953DC83FBD90E9BE870A2533C8DF098D5A33
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1435d8f1-c945-406e-9645-e9b24ac9c9c5.roa
Signing time:             Sun 19 Oct 2025 03:31:35 +0000
ROA not before:           Sun 19 Oct 2025 03:31:35 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.161.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:95:3d:c8:3f:bd:90:e9:be:87:0a:25:33:c8:df:09:8d:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 03:31:35 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e65187d894a46aa22274f2296128d4ac16c2832f0aca5f5a19da6a35c1435af8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:ac:56:8a:29:ae:80:af:68:13:b0:69:53:
                    45:be:f7:f1:ad:c1:8e:9f:f0:ee:ea:fe:5c:af:e6:
                    9a:4a:35:a1:b0:5f:ea:e0:71:09:97:35:73:50:f4:
                    b2:18:95:9e:00:b7:48:02:86:eb:12:bc:55:05:e3:
                    14:8e:d7:f5:1d:aa:78:f3:5d:86:6a:ab:46:86:d0:
                    75:53:c1:43:b0:52:90:9f:5b:8c:a7:4a:a6:b1:0a:
                    98:ec:f6:d1:36:ea:45:36:34:90:01:31:ce:89:27:
                    2d:3e:02:50:87:1a:79:ff:b0:24:f0:cb:1d:fd:2e:
                    49:77:29:fc:24:d9:ca:bd:70:63:0f:c2:41:c3:72:
                    ef:09:ad:ea:9b:04:17:52:21:73:77:1c:53:2f:d8:
                    22:20:a7:42:a0:64:8b:93:ec:e7:f4:c5:a9:eb:48:
                    44:1f:43:51:6b:8a:95:85:74:df:17:27:88:49:07:
                    c8:03:34:53:a9:b8:98:b2:39:06:93:82:01:30:c6:
                    22:22:57:76:d3:46:83:1c:c4:3a:57:33:2f:ca:19:
                    33:07:75:4e:52:46:13:88:b2:f2:b7:bf:8f:db:68:
                    5a:e5:05:de:67:58:e0:f3:f9:96:3b:c5:46:91:99:
                    51:04:55:28:6a:dd:39:ba:64:b9:2d:36:16:f3:95:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E5:4A:9F:E8:67:4E:B6:E2:5D:1F:D3:43:A1:4B:78:95:F9:80:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1435d8f1-c945-406e-9645-e9b24ac9c9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.161.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:2c:6f:7f:bf:52:33:d2:0a:89:08:c8:7a:ea:67:d8:75:
         47:77:7c:45:6e:5b:6c:73:5a:53:29:5d:d6:12:76:1d:61:ec:
         e9:c0:ff:21:ea:4f:f6:99:2b:7c:90:cf:90:f7:bb:7a:fc:21:
         6e:f8:c4:24:62:be:b6:7d:c6:16:16:de:c5:56:95:3c:a8:da:
         50:31:8e:5d:66:63:71:b9:0a:70:4f:f5:0b:58:18:88:12:b0:
         30:f0:56:5c:93:8a:4a:47:db:25:3c:1e:75:13:16:f2:37:cd:
         da:a5:63:6c:7c:8a:30:01:e1:12:97:03:13:2a:38:3c:6f:e0:
         20:aa:dd:ce:dc:68:cf:0d:ec:9e:ba:52:b5:6c:45:57:df:11:
         83:af:f2:f8:b6:75:83:09:c8:64:07:62:1f:37:94:18:ef:f6:
         e9:a7:ce:20:76:7d:14:5c:d5:38:03:9d:5d:2a:6b:66:cf:6c:
         b5:fa:93:1d:ec:71:e5:8e:02:06:0f:34:58:bd:17:77:7c:8b:
         7e:cf:96:a2:71:19:da:64:94:d7:b0:34:5d:55:0d:19:de:7a:
         f6:33:5d:91:7d:d6:92:66:a2:bc:01:b4:60:1d:54:96:62:2e:
         88:8a:76:a5:ac:e9:d0:1d:4b:a6:9f:2d:1f:34:c7:d6:a4:05:
         69:28:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:34 2025 by rpki-client