Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d6b8d9-7762-4eda-87a6-78eb6d611846.roa
File:                     22d6b8d9-7762-4eda-87a6-78eb6d611846.roa (raw, json)
Hash identifier:          efUmE7Vv8M2tedQdS+JPHrxv1kJovbZFO4IzCg3LmFg=
Subject key identifier:   C1:4D:EE:EE:3D:12:82:F3:B2:44:BB:46:76:39:46:14:60:84:A2:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       34C0C404D112ED2E90A7C402BD6A42C9C21EBED8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d6b8d9-7762-4eda-87a6-78eb6d611846.roa
Signing time:             Sat 18 Oct 2025 07:02:11 +0000
ROA not before:           Sat 18 Oct 2025 07:02:11 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:c4:04:d1:12:ed:2e:90:a7:c4:02:bd:6a:42:c9:c2:1e:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 07:02:11 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=8e8209843e13be0475fbcd1a116a7e2742ad4b58e23476b3cf538fc4fff84b1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:7a:5e:cd:61:64:97:3a:a1:d7:f1:ad:73:
                    c6:59:3a:aa:eb:07:31:34:93:75:de:fa:36:fb:10:
                    17:39:62:ed:9d:6c:3b:d5:d1:ee:6f:e7:7d:77:a4:
                    52:1c:18:ee:74:3f:98:93:34:1c:3f:9b:03:e0:ff:
                    5f:6b:de:04:0d:7c:18:0b:2c:be:fb:d7:19:27:bf:
                    a6:24:0c:e9:2c:a4:a3:28:af:fd:91:ab:46:f9:cc:
                    53:bd:9c:1d:b2:c2:f7:d3:85:2b:a3:36:cb:51:d8:
                    04:af:2f:cb:fc:cf:d7:dc:e4:f3:0d:02:72:61:ae:
                    60:f2:87:d3:53:82:58:00:93:54:ea:79:66:3b:b1:
                    44:23:af:ad:c3:d3:93:43:13:57:49:4f:39:44:2f:
                    4f:f2:8a:b5:66:9f:7d:67:e1:00:cb:39:c4:39:f6:
                    d6:d9:1d:7a:b6:ae:d8:cf:4d:ed:23:c3:aa:53:96:
                    0a:3e:a9:f5:d3:4b:3d:4f:72:dd:f8:5a:1b:da:d5:
                    e6:b7:31:ce:78:17:fc:30:0f:fa:b0:bc:dc:ac:8a:
                    0c:5b:03:14:d9:5d:e6:58:40:f3:fd:80:44:28:27:
                    ee:d5:27:f3:04:00:cf:1d:d7:91:ca:9d:6c:81:bf:
                    46:08:52:fc:8c:91:24:b7:b8:80:f9:d9:c2:b8:29:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:EE:EE:3D:12:82:F3:B2:44:BB:46:76:39:46:14:60:84:A2:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d6b8d9-7762-4eda-87a6-78eb6d611846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:1f:0a:f3:9e:fd:9d:56:34:af:e8:a0:da:06:88:71:6a:
         8f:e5:98:df:47:f9:c8:2f:69:65:ca:80:2e:2f:0e:99:00:15:
         3a:23:0a:d4:f4:19:20:17:04:01:70:b8:f7:c1:5f:2b:5f:d1:
         5c:2c:10:10:00:48:87:04:24:34:e5:93:65:e6:46:1d:eb:a5:
         b1:f0:ea:e3:a9:58:07:40:a9:da:da:49:cb:f2:41:be:21:8a:
         54:35:d7:0a:77:51:ee:bb:86:30:5f:ec:05:91:b9:34:69:74:
         e6:ee:26:50:86:3e:c9:2f:95:6d:79:5b:98:58:47:49:cb:08:
         6d:a4:78:dc:0c:46:d5:96:6f:35:76:51:48:7f:c5:05:17:9c:
         1f:d5:1b:54:aa:cf:13:c8:f8:45:85:fd:be:69:ce:87:77:0c:
         97:e1:53:70:98:ce:3b:7f:88:c1:29:dd:7c:5b:c0:bc:69:a8:
         93:ea:62:5f:8d:4c:4c:d0:f3:44:dc:61:ce:3e:19:fd:78:9a:
         97:9e:93:2b:d2:ca:b3:ad:04:c8:95:ad:b1:cb:48:fc:6b:bc:
         02:40:a7:f0:88:0d:0c:8b:ee:45:74:00:36:a3:67:56:79:38:
         8f:74:2e:fd:b6:d3:3f:c3:e2:aa:f7:3b:ac:3a:fd:f7:3f:e8:
         fc:88:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:11:27 2025 by rpki-client