Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa
File:                     4f8921d5-1698-483f-9a18-c52cc17e0eca.roa (raw, json)
Hash identifier:          RMMojEebBXLKZgjvhaK7RmFL8Hnlon2WsYsO/hYx+qE=
Subject key identifier:   4E:C1:71:D3:D4:A0:4B:99:8B:BB:43:D0:81:EE:10:2A:D3:65:1B:FF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5BB5850552C12D409C04730D32A4E7FD16409E36
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa
Signing time:             Sun 19 Oct 2025 19:50:08 +0000
ROA not before:           Sun 19 Oct 2025 19:50:08 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b5:85:05:52:c1:2d:40:9c:04:73:0d:32:a4:e7:fd:16:40:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 19:50:08 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=450e09cf564cb8caca24f0bc0a5b82fe6e4239cde29879045834b9c42702d989, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:c7:7c:9d:8d:72:05:b2:7a:5b:d0:e9:da:
                    44:7b:02:34:12:50:8c:9e:b1:75:57:67:90:6c:22:
                    81:7f:07:90:d6:28:0d:d8:03:9a:05:3d:83:0d:83:
                    a9:a0:ac:15:1e:d4:d3:1b:8f:89:b3:00:de:b2:7c:
                    87:32:7d:38:b8:1c:25:23:bb:ed:49:30:b2:20:ce:
                    89:11:56:36:f0:95:ea:91:9e:19:69:0f:01:a3:e5:
                    c1:01:11:f5:e0:fa:2c:69:77:72:4b:9d:ce:f0:92:
                    e7:5f:89:20:b3:33:54:84:d9:23:4e:63:c9:63:22:
                    f9:75:f6:16:68:c2:3c:2d:00:47:d1:54:2e:43:c0:
                    65:e0:6d:3b:03:7e:2c:ee:e1:68:23:ef:18:88:8a:
                    3f:8d:6d:e3:7c:6b:9d:e7:6b:d6:2d:6d:d9:3e:ca:
                    8b:c6:d6:8f:18:81:b9:9b:e8:fa:96:02:98:07:e8:
                    ac:05:3a:55:1d:e4:88:bd:7e:94:c0:f6:f3:81:02:
                    6e:4f:2e:19:03:d1:aa:a2:95:b1:b8:30:4e:63:0e:
                    f7:28:56:40:62:9d:a5:5e:d1:68:a5:c7:35:92:a0:
                    d9:85:6c:58:89:eb:de:09:7e:0a:33:1c:f7:dd:d1:
                    81:f9:38:ce:6d:5c:38:73:e0:06:b0:a1:7c:4b:37:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:71:D3:D4:A0:4B:99:8B:BB:43:D0:81:EE:10:2A:D3:65:1B:FF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f8921d5-1698-483f-9a18-c52cc17e0eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:a1:00:fd:93:5e:72:9e:19:71:b0:f3:07:43:3e:e0:b1:
         10:7e:f6:5e:c7:a6:ec:61:5d:de:1d:10:45:5b:a9:a3:4b:4c:
         18:16:ba:0e:17:96:43:b2:8b:d5:a1:df:53:70:fb:18:02:02:
         00:88:90:87:4b:d9:4c:70:70:71:ab:80:93:83:ef:21:b3:7b:
         33:cc:79:e7:f2:d6:90:f0:b3:94:71:45:4a:81:31:5f:73:f5:
         60:b7:25:5f:de:c1:41:f5:bb:3b:37:4e:b4:60:57:08:1d:2c:
         91:fc:74:78:ad:3f:4b:f0:a6:1c:7b:ad:a7:a2:ca:09:68:93:
         f0:6c:f8:1a:b7:29:ea:eb:8e:b9:44:b6:6c:9e:4c:fa:48:30:
         f6:e6:cb:88:9f:7f:7c:8e:19:a7:b0:45:80:a0:16:68:a1:43:
         92:0b:5b:4a:92:9e:5a:65:62:03:71:4a:6b:17:53:d4:c7:c4:
         61:56:3d:cd:17:c4:50:33:41:39:55:56:c8:56:8c:55:74:c5:
         ac:66:dc:41:66:c9:29:32:8b:3e:18:a4:60:6e:40:be:f5:78:
         31:6a:d8:bd:34:25:e0:40:8c:42:c4:92:b2:29:95:b5:ac:c5:
         ed:cf:b1:4e:03:48:5f:c7:1d:43:00:8e:ea:45:eb:6c:e0:c8:
         ec:a9:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:11:56 2025 by rpki-client