Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3170c690-78e5-4be8-9b91-cfbd79d118ae.roa
File:                     3170c690-78e5-4be8-9b91-cfbd79d118ae.roa (raw, json)
Hash identifier:          AfzczyBHz0kuPwz5cLRMgCxyts4oh/lstx/U/nI39PY=
Subject key identifier:   47:CB:B7:75:5B:C2:58:8C:87:1E:9B:8B:E8:E3:B1:D9:0F:E2:7B:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       116ACE23F636AF395B2B6D744B4D5BFF09D1C8B9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3170c690-78e5-4be8-9b91-cfbd79d118ae.roa
Signing time:             Sat 18 Oct 2025 14:42:35 +0000
ROA not before:           Sat 18 Oct 2025 14:42:35 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.173.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6a:ce:23:f6:36:af:39:5b:2b:6d:74:4b:4d:5b:ff:09:d1:c8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 14:42:35 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=b66507f1a4340c66cd79f74818c4be875ac17b2fd26daf65d6b1bd59a526feb9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:09:e9:0f:59:4e:0a:b6:23:16:46:21:5b:
                    f0:4c:22:bf:cd:d4:f1:4b:2b:e4:c3:c4:49:36:45:
                    28:fa:59:b3:3a:2a:a8:20:00:80:02:cc:89:35:5c:
                    87:2c:2c:1d:60:f3:4c:19:d9:ae:e9:d7:bc:7e:2e:
                    b5:47:58:b8:73:7c:25:aa:e6:d6:f7:10:3f:f4:73:
                    b5:a8:db:9c:75:13:47:26:e8:25:34:03:1c:f2:2a:
                    19:94:d4:9e:d2:78:d4:cf:60:b5:f0:4c:66:51:4f:
                    a6:15:1a:7a:54:2d:74:d9:00:f6:9c:d9:da:f8:13:
                    98:7b:d0:8a:24:65:a2:76:d7:9f:25:42:5b:9a:96:
                    0b:4e:32:f6:cc:6a:26:1c:06:70:ba:3f:af:17:ec:
                    6f:c1:c7:26:c2:4a:58:6e:b6:5f:8e:15:77:0a:f6:
                    02:d2:02:94:20:c2:28:12:73:8a:9d:98:b9:37:25:
                    b8:23:66:7d:c0:2a:06:ed:78:99:12:9a:12:37:2c:
                    dc:8b:77:d7:87:79:ee:89:09:f5:2a:98:c9:7d:3b:
                    81:11:87:39:d6:69:f1:a7:8d:9d:7e:fd:88:ba:07:
                    da:10:9f:b9:54:60:a3:91:61:c5:08:67:94:05:b4:
                    10:b0:df:be:57:11:37:bb:49:cf:76:fc:e8:02:5a:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:B7:75:5B:C2:58:8C:87:1E:9B:8B:E8:E3:B1:D9:0F:E2:7B:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3170c690-78e5-4be8-9b91-cfbd79d118ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.173.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:ce:a0:07:ee:c6:16:b2:3e:99:9f:0b:3a:53:e6:53:63:
         9a:e9:74:8a:f3:01:15:89:bb:dd:8b:3a:e2:66:65:9e:c8:33:
         39:ae:97:67:ad:f6:f3:86:c0:cf:91:e7:92:12:96:b3:13:f1:
         95:c9:55:e4:30:02:fd:fa:9f:8a:38:1f:26:1e:83:cb:de:d3:
         42:91:e8:e6:58:f9:30:02:f8:98:73:c7:3b:7c:ad:cf:eb:9a:
         36:38:e1:81:e3:af:33:1a:f2:a5:56:bf:7b:c5:2c:aa:82:8f:
         aa:a6:60:de:a0:15:01:7c:46:d1:d1:b2:24:59:94:81:55:fb:
         b8:52:9a:09:e9:e1:02:d4:87:5e:08:d3:c5:cc:c4:3a:10:97:
         68:79:4c:d3:87:1c:f4:9a:a8:ef:58:21:4c:b3:46:69:ed:f0:
         dc:12:14:52:64:85:e6:9c:ea:61:0f:b7:7f:bd:c4:dd:a6:05:
         7c:5b:14:74:c8:65:50:95:b6:61:f7:5e:fb:ac:c7:f5:9b:3c:
         3c:d4:50:6a:3e:6f:62:d9:6d:f2:45:bd:51:17:66:79:df:e7:
         36:b1:74:ce:a1:90:d3:9d:36:94:5d:ad:c3:8e:6b:0d:f1:b3:
         38:7a:8c:a2:32:34:51:0d:a6:48:63:16:62:65:ee:07:2c:9f:
         f5:60:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:11:07 2025 by rpki-client