Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2126dc76-b23b-4d3c-8d81-fc0ca022d0b5.roa
File:                     2126dc76-b23b-4d3c-8d81-fc0ca022d0b5.roa (raw, json)
Hash identifier:          Vtk1CD6slyavwRpGZpcJaR2uNFzWnzbwPXUCVTn7auw=
Subject key identifier:   0F:60:15:7B:00:60:F5:52:01:D6:7A:07:F4:BF:B8:13:C2:35:8E:F1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       021A6AA4938EB43D18EAF09CA93A1774F8CCAAEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2126dc76-b23b-4d3c-8d81-fc0ca022d0b5.roa
Signing time:             Sat 18 Oct 2025 19:12:30 +0000
ROA not before:           Sat 18 Oct 2025 19:12:30 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.160.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:6a:a4:93:8e:b4:3d:18:ea:f0:9c:a9:3a:17:74:f8:cc:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 19:12:30 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6fdb9ce550907088de5048b93b02dd1c4e0fc8557314e45a410236cab3e5c76f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:55:9a:8a:8b:2b:11:44:be:4f:25:78:a7:
                    12:a3:e7:20:20:70:2a:e4:1e:38:37:80:f3:11:e4:
                    08:9d:74:04:63:a2:a5:6a:0d:32:8d:f4:2a:50:41:
                    21:c0:aa:94:8d:5b:df:e8:0e:1d:7c:57:f2:ad:0d:
                    c9:13:41:4d:31:af:35:cc:e4:cf:22:cf:f8:53:5e:
                    cf:72:25:5e:d3:1f:27:38:9c:eb:52:58:cd:7b:83:
                    d6:ae:a5:ce:88:64:1d:4e:91:14:3c:9a:ef:38:e7:
                    e9:a5:c8:83:b9:74:cd:a0:2d:de:f3:8f:8a:ca:21:
                    9f:f7:38:b9:c2:fa:f2:a0:aa:6c:94:c2:03:d6:92:
                    42:89:bf:25:8a:e2:61:70:d6:f5:5c:c9:f3:b1:dc:
                    ff:e6:e0:74:dd:4c:fd:a3:4a:c8:ed:74:41:a1:14:
                    c3:a4:a6:a2:50:44:b2:d4:a5:37:d4:d1:e9:41:d4:
                    a2:7d:ad:59:82:d4:66:37:96:6a:f4:08:38:b1:42:
                    bb:52:9f:25:72:30:10:e8:ee:b7:5e:56:e7:b9:ce:
                    87:33:b5:67:af:af:93:bd:d1:a6:27:34:8c:c7:e9:
                    84:28:4d:14:4b:7d:6d:f7:62:ab:78:ea:42:75:17:
                    b5:01:eb:d9:28:aa:bd:2a:eb:c8:58:8e:9b:b9:0a:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:15:7B:00:60:F5:52:01:D6:7A:07:F4:BF:B8:13:C2:35:8E:F1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2126dc76-b23b-4d3c-8d81-fc0ca022d0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.160.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:37:eb:2a:e8:27:a8:f1:d6:70:98:26:9a:46:cd:76:d7:71:
         9c:c5:f0:d1:65:85:32:d8:cc:e0:b2:39:ed:ac:b3:d2:89:37:
         b5:15:ea:79:36:dc:3b:eb:1b:20:4b:52:9d:f7:7b:c3:16:9c:
         27:74:d3:b4:fe:f5:3a:7e:10:99:79:dd:93:1c:73:9a:a5:07:
         81:cb:df:b3:ff:5d:7b:bb:ef:26:ee:0e:5d:00:5f:20:1e:42:
         34:12:bc:e1:69:c3:47:1d:c7:1e:00:fd:e6:64:40:c5:61:bb:
         84:55:db:66:78:6e:52:d0:1d:a4:83:e7:7b:04:0c:04:e9:69:
         da:3f:2a:58:9f:69:5c:ee:fb:16:13:52:ad:28:1a:62:92:e1:
         fc:34:7c:77:15:6a:e5:b3:6a:89:91:d5:0a:5d:a3:34:66:fe:
         ec:a4:24:26:f6:d2:67:65:fa:b3:21:82:e2:77:2d:86:f1:80:
         4b:82:ba:c4:d5:4f:a8:42:3a:1d:2b:11:1d:2b:2b:87:cf:84:
         13:78:31:55:cc:c5:e2:b4:60:c6:23:d1:75:d0:95:88:c6:b9:
         80:27:de:b8:0d:7c:89:6c:06:f7:80:05:6f:28:0e:43:53:40:
         19:38:bb:e5:05:d4:92:c6:3c:08:1b:00:07:85:c8:32:46:72:
         3f:41:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:46:06 2025 by rpki-client