Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/385be22e-d7b3-4072-b7c8-7129fdf5b20b.roa
File:                     385be22e-d7b3-4072-b7c8-7129fdf5b20b.roa (raw, json)
Hash identifier:          V7wXJRYQNp2GNij9XujPYG4KheoBcZ59bS5klr47u9s=
Subject key identifier:   64:00:7D:70:75:3F:0A:E7:85:92:68:1E:29:AD:CA:EA:A0:F1:4E:EE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       46268363AC8BEFD35A83A50ABC10BACF5C5CFD27
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/385be22e-d7b3-4072-b7c8-7129fdf5b20b.roa
Signing time:             Sat 18 Oct 2025 21:01:26 +0000
ROA not before:           Sat 18 Oct 2025 21:01:26 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.161.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:83:63:ac:8b:ef:d3:5a:83:a5:0a:bc:10:ba:cf:5c:5c:fd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 21:01:26 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=2654b54967feaaf3aaf19b4da44806cab4f20758b8dcaa79ae4508641202d8d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:73:9d:7e:22:a6:07:e9:2d:ae:20:b4:8e:
                    46:1b:f5:65:a0:b4:fa:49:63:6d:33:83:fe:a6:49:
                    cf:38:52:b1:07:e6:6a:14:82:6e:9b:71:ed:e1:8d:
                    0c:9c:74:12:d4:2e:7b:dc:74:84:5f:82:5c:30:2e:
                    16:86:51:8e:2a:90:16:84:85:fe:16:5c:5e:13:b1:
                    4a:89:dd:bc:da:aa:a6:66:cd:b9:fd:42:25:8b:12:
                    e1:b6:24:ba:98:9f:70:7a:eb:86:30:0a:9b:26:eb:
                    9a:e0:5e:e6:39:91:ca:28:71:a3:2b:13:e8:0c:7b:
                    81:19:1b:73:17:96:62:19:cd:05:1c:5e:d4:2a:1b:
                    92:18:e6:b2:84:5c:68:e5:b3:cc:27:30:a2:d5:eb:
                    54:1c:ba:8b:db:3e:c5:bd:40:d7:b9:69:a5:1c:08:
                    4e:79:ae:29:22:90:c8:93:ee:59:3a:2d:5b:64:4a:
                    ac:fc:28:56:fb:2e:74:e8:d2:83:f3:6c:a5:d0:53:
                    37:7a:36:1b:61:5c:e1:ea:e7:4e:5b:a4:9b:39:8c:
                    f6:83:4f:f3:0d:64:cb:b4:89:12:a6:99:52:0e:d7:
                    76:b7:38:f7:74:e9:61:91:a7:d8:88:06:8e:62:c5:
                    a4:78:72:fc:da:46:82:45:7c:c9:62:6f:5f:23:0c:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:00:7D:70:75:3F:0A:E7:85:92:68:1E:29:AD:CA:EA:A0:F1:4E:EE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/385be22e-d7b3-4072-b7c8-7129fdf5b20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.161.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:91:8d:ac:48:63:0a:bb:00:2b:bc:4c:00:38:02:6c:c4:
         e0:9a:74:bd:9d:ae:03:f1:8b:c0:23:09:84:de:70:53:68:ea:
         d7:d9:8b:51:14:7e:08:ad:bb:8a:30:15:05:97:a4:05:47:0c:
         90:02:ae:95:06:c3:2a:67:b0:fa:db:1d:d0:44:7f:27:32:bb:
         5a:6b:d1:58:0f:33:02:41:48:ce:3e:fd:49:23:7a:85:4a:88:
         98:31:76:a3:95:ca:ac:b1:fb:f9:2f:a9:58:64:f0:ec:16:66:
         88:35:1e:6c:e1:df:56:0a:8c:f6:85:dd:2f:6a:2a:d7:83:dc:
         80:01:3e:28:77:94:c2:1a:7d:ae:e8:64:0c:cb:f8:be:5e:f1:
         b4:31:6a:27:c8:bd:7b:99:f9:ff:cc:ea:69:32:75:e9:81:77:
         6a:c5:fe:80:51:b1:05:1a:2b:50:fc:72:00:1f:64:e2:f9:57:
         2e:be:ea:8a:6e:5d:ae:87:08:12:26:5c:18:5a:38:61:f2:14:
         aa:78:a9:71:20:96:eb:39:d1:88:2b:51:f0:d9:5f:f2:1f:a1:
         65:e1:a2:28:94:70:1f:35:c7:84:3e:a7:85:59:15:91:1f:62:
         8d:34:17:28:1b:9f:f4:5a:17:c5:e9:c6:cd:d3:7f:95:b8:48:
         e9:79:83:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURiaDY6yL79Nag6UKvBC6z1xc/ScwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEwMTI2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjU0YjU0OTY3ZmVhYWYzYWFmMTliNGRhNDQ4MDZjYWI0
ZjIwNzU4YjhkY2FhNzlhZTQ1MDg2NDEyMDJkOGQ2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhU3OdfiKmB+ktriC0jkYb9WWgtPpJY20zg/6mSc84UrEH
5moUgm6bce3hjQycdBLULnvcdIRfglwwLhaGUY4qkBaEhf4WXF4TsUqJ3bzaqqZm
zbn9QiWLEuG2JLqYn3B664YwCpsm65rgXuY5kcoocaMrE+gMe4EZG3MXlmIZzQUc
XtQqG5IY5rKEXGjls8wnMKLV61QcuovbPsW9QNe5aaUcCE55rikikMiT7lk6LVtk
Sqz8KFb7LnTo0oPzbKXQUzd6NhthXOHq505bpJs5jPaDT/MNZMu0iRKmmVIO13a3
OPd06WGRp9iIBo5ixaR4cvzaRoJFfMlib18jDGTHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZAB9cHU/CueFkmgeKa3K6qDxTu4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzM4NWJlMjJlLWQ3YjMtNDA3Mi1iN2M4LTcxMjlmZGY1YjIwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASoR4wDQYJKoZIhvcNAQELBQADggEBAKd2kY2sSGMKuwArvEwAOAJsxOCa
dL2drgPxi8AjCYTecFNo6tfZi1EUfgitu4owFQWXpAVHDJACrpUGwypnsPrbHdBE
fycyu1pr0VgPMwJBSM4+/UkjeoVKiJgxdqOVyqyx+/kvqVhk8OwWZog1Hmzh31YK
jPaF3S9qKteD3IABPih3lMIafa7oZAzL+L5e8bQxaifIvXuZ+f/M6mkydemBd2rF
/oBRsQUaK1D8cgAfZOL5Vy6+6opuXa6HCBImXBhaOGHyFKp4qXEglus50YgrUfDZ
X/IfoWXhoiiUcB81x4Q+p4VZFZEfYo00Fygbn/RaF8Xpxs3Tf5W4SOl5gzQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:00:45 2025 by rpki-client