Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa
File:                     2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa (raw, json)
Hash identifier:          aZI8n9XA0XGiISwZZBD4omnIqxhjSFKByHKG2bqoiVk=
Subject key identifier:   2A:AB:EA:4B:C9:AE:92:31:0E:EB:3E:AA:5E:BA:5E:DB:53:C2:DA:E2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3B600DC2D5D9FBA3B858C5D7B0F2145B50F7FCB0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa
Signing time:             Sat 18 Oct 2025 12:52:22 +0000
ROA not before:           Sat 18 Oct 2025 12:52:22 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:60:0d:c2:d5:d9:fb:a3:b8:58:c5:d7:b0:f2:14:5b:50:f7:fc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 12:52:22 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=8dfb04edc85837a8e6d375ec13392ff929a99b6f03e45f30403ebe8b5d0933ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2f:da:3c:26:fc:4a:f4:2a:f4:3e:70:0f:e6:
                    76:49:3f:aa:3b:f7:1a:e2:ad:74:ef:e5:71:cc:8e:
                    00:43:8c:51:bb:61:c2:f5:1a:a5:95:27:63:af:5c:
                    64:65:18:3d:87:20:bb:94:06:4b:41:75:83:55:1a:
                    ad:b6:05:d2:7d:f1:f6:a4:66:f2:f5:5e:91:ec:d8:
                    fe:13:43:55:09:3d:b1:75:2e:86:d4:15:55:b0:9d:
                    49:0b:a9:f4:6a:90:b4:a3:5e:d1:39:90:0f:dc:44:
                    c7:02:94:20:40:46:e5:e6:5d:5a:00:d5:6b:82:8b:
                    8f:1b:9e:01:24:c4:2a:e9:a8:4b:e1:80:aa:7b:40:
                    2b:91:53:38:47:01:08:5c:93:f1:bb:50:16:9b:dd:
                    2e:06:c6:22:d4:d6:b9:78:f4:42:c5:f2:d8:a6:ee:
                    08:2a:96:71:31:aa:e7:e5:ce:6f:a1:ab:8c:59:42:
                    d0:9d:30:e0:f4:d5:85:f1:59:fa:d9:09:6c:82:3c:
                    20:f4:a0:71:47:2b:bf:ba:ee:db:c4:56:af:b1:f2:
                    24:08:94:9c:74:61:ba:ea:61:a3:97:b4:d2:cf:71:
                    e6:f7:57:c8:90:4d:4c:ac:55:f1:35:d1:6f:1e:e5:
                    18:ab:70:ec:e7:15:35:72:19:b4:e0:4d:a3:94:7d:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AB:EA:4B:C9:AE:92:31:0E:EB:3E:AA:5E:BA:5E:DB:53:C2:DA:E2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:e8:b7:1f:b6:a3:49:f2:4f:b9:28:de:a5:8e:56:92:39:
         ab:f4:00:c4:3e:50:f8:9b:95:30:f4:bb:d8:b7:37:f4:fc:e1:
         3b:99:b0:7f:6a:84:9b:10:84:ba:10:c4:c8:20:a0:6b:5e:4b:
         b2:79:9b:91:83:fe:88:41:4e:42:7b:e0:54:4d:f6:00:a6:a2:
         5b:8a:be:13:19:13:3c:95:46:84:de:08:8b:df:47:91:c0:87:
         16:d2:1b:cb:3a:0a:8d:d3:34:d2:4d:d4:0c:0b:03:fc:be:25:
         be:03:f3:33:20:45:e1:bd:7f:9b:f8:8d:1f:f0:28:cc:a7:8d:
         ca:62:a9:54:be:7b:6a:ad:96:af:06:96:72:58:d7:f5:54:c3:
         79:b6:aa:74:33:fb:f2:c5:61:cc:6e:aa:78:21:70:e4:b8:55:
         7d:de:6b:63:94:69:87:6f:b7:24:b5:ef:e0:c6:c5:c8:c6:52:
         45:64:35:8b:0c:a8:b2:30:6c:93:c6:a8:c6:cc:50:60:f8:7e:
         e7:19:ff:04:e0:6c:58:4e:88:1e:66:d5:f6:9c:9e:bf:4a:62:
         8c:38:5c:84:eb:5e:41:bf:71:99:3e:e3:b8:87:b3:c3:b4:45:
         10:91:ac:78:c7:6e:e8:ce:e0:29:d1:fc:6e:1e:9a:1b:ec:35:
         1e:08:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:58:32 2025 by rpki-client