Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224e15e7-729b-4e2b-a1ec-6cb3d4c02cae.roa
File:                     224e15e7-729b-4e2b-a1ec-6cb3d4c02cae.roa (raw, json)
Hash identifier:          b4AKmbuYYn1oJbpBo5wNtcy21odGN0qryUNLrrZV0A4=
Subject key identifier:   F4:83:77:08:8B:73:EE:92:65:67:90:8B:3C:9C:90:F5:6B:D1:A0:BF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       30324B6540FAB054EACFE8DA46FA052AF95AAE7D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224e15e7-729b-4e2b-a1ec-6cb3d4c02cae.roa
Signing time:             Thu 16 Oct 2025 16:27:58 +0000
ROA not before:           Thu 16 Oct 2025 16:27:58 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:4b:65:40:fa:b0:54:ea:cf:e8:da:46:fa:05:2a:f9:5a:ae:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 16:27:58 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=8386929d997beb8a595eb3309d658380f748a3c0ee3b23c021e3b03d2e973089, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:1e:fe:01:ea:67:14:fb:fd:dc:27:bb:bc:
                    9d:b0:8b:d2:6b:c5:2f:c8:f3:b5:56:61:1d:e2:28:
                    36:eb:2e:0d:37:9d:01:83:b3:2e:72:e5:54:37:0f:
                    3a:03:68:ba:a7:0a:43:74:1f:d5:6e:78:b5:32:6f:
                    91:af:f5:f8:4e:34:5a:7a:08:c3:cd:bb:0b:43:fc:
                    26:e1:60:31:71:32:6d:57:18:75:50:d7:38:ac:7c:
                    0e:6a:9d:ee:22:ce:6b:48:f6:fa:aa:fb:63:99:53:
                    7e:81:e3:2e:95:1f:7d:8e:bf:0c:ee:16:c9:83:dd:
                    3d:6b:30:c9:5a:39:fb:c0:92:97:ba:44:69:06:52:
                    54:df:be:48:f8:2f:7d:a2:5f:6c:41:77:d8:06:3c:
                    12:46:d8:55:86:68:a8:92:5c:0f:48:07:2c:29:b5:
                    81:74:10:1b:1e:a5:24:87:10:9b:8d:bf:df:89:c6:
                    95:e0:31:24:e9:65:98:18:63:d1:e7:4d:33:8d:f5:
                    48:19:8d:6c:ad:d9:01:71:85:4c:68:9b:fe:64:bc:
                    10:e2:cc:57:92:04:2b:69:cf:91:16:76:a3:9f:58:
                    83:f9:79:c6:17:51:54:7b:18:a0:22:14:29:2a:41:
                    52:45:53:d1:26:92:5f:7d:f0:66:af:12:4c:9d:01:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:77:08:8B:73:EE:92:65:67:90:8B:3C:9C:90:F5:6B:D1:A0:BF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224e15e7-729b-4e2b-a1ec-6cb3d4c02cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:39:7f:6c:8a:d0:26:e9:1c:f7:b5:17:c0:4f:fa:89:ed:
         72:07:c8:a2:d0:d3:8a:32:36:a3:39:9f:f1:75:67:4f:19:58:
         00:61:d0:6d:c3:0a:58:f8:fe:18:5b:73:0d:40:4f:5c:f3:7f:
         26:c4:5f:92:35:57:8a:c1:10:2f:97:bc:72:00:ea:d0:6d:da:
         dc:d9:3c:59:25:ea:57:f2:88:8a:b5:9d:35:e5:fb:32:20:de:
         55:4c:bb:41:33:21:02:a0:86:6f:b4:4f:dd:1e:a3:9e:9d:c1:
         26:50:1f:dd:c9:35:a1:90:c1:16:cc:8c:7e:fb:d9:91:9c:59:
         86:e0:a7:7b:55:82:13:00:01:34:f9:b1:f3:8d:c1:d4:ea:e4:
         6d:85:cd:e5:33:c4:5c:0b:5a:2d:06:30:49:cf:ff:52:80:12:
         1d:e0:46:9d:31:86:89:8e:9a:a5:af:13:64:6a:97:0a:40:c4:
         bb:bf:8b:26:eb:67:b6:7f:a7:51:3d:a5:75:a9:63:d9:8f:a2:
         a0:61:79:8d:4a:ef:ba:f4:9d:02:32:fb:99:3a:e6:f1:04:43:
         be:f0:15:ec:38:4a:d8:0d:dd:51:3f:18:64:a5:97:1e:06:6f:
         77:ea:08:eb:5e:be:80:bf:ec:1f:35:fe:c0:a4:4e:8c:d2:87:
         fe:d0:69:15
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMDJLZUD6sFTqz+jaRvoFKvlarn0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYyNzU4WhcNMjUxMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4Mzg2OTI5ZDk5N2JlYjhhNTk1ZWIzMzA5ZDY1ODM4MGY3
NDhhM2MwZWUzYjIzYzAyMWUzYjAzZDJlOTczMDg5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvwh7+AepnFPv93Ce7vJ2wi9JrxS/I87VWYR3iKDbrLg03
nQGDsy5y5VQ3DzoDaLqnCkN0H9VueLUyb5Gv9fhONFp6CMPNuwtD/CbhYDFxMm1X
GHVQ1zisfA5qne4izmtI9vqq+2OZU36B4y6VH32OvwzuFsmD3T1rMMlaOfvAkpe6
RGkGUlTfvkj4L32iX2xBd9gGPBJG2FWGaKiSXA9IBywptYF0EBsepSSHEJuNv9+J
xpXgMSTpZZgYY9HnTTON9UgZjWyt2QFxhUxom/5kvBDizFeSBCtpz5EWdqOfWIP5
ecYXUVR7GKAiFCkqQVJFU9Emkl998GavEkydAaOTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9IN3CItz7pJlZ5CLPJyQ9WvRoL8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzIyNGUxNWU3LTcyOWItNGUyYi1hMWVjLTZjYjNkNGMwMmNhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQSRBAwDQYJKoZIhvcNAQELBQADggEBAAa5OX9sitAm6Rz3tRfAT/qJ7XIH
yKLQ04oyNqM5n/F1Z08ZWABh0G3DClj4/hhbcw1AT1zzfybEX5I1V4rBEC+XvHIA
6tBt2tzZPFkl6lfyiIq1nTXl+zIg3lVMu0EzIQKghm+0T90eo56dwSZQH93JNaGQ
wRbMjH772ZGcWYbgp3tVghMAATT5sfONwdTq5G2FzeUzxFwLWi0GMEnP/1KAEh3g
Rp0xhomOmqWvE2RqlwpAxLu/iybrZ7Z/p1E9pXWpY9mPoqBheY1K77r0nQIy+5k6
5vEEQ77wFew4StgN3VE/GGSllx4Gb3fqCOtevoC/7B81/sCkTozSh/7QaRU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:01:40 2025 by rpki-client