Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a53118-4090-4d0c-b679-bb6834189c25.roa
File:                     56a53118-4090-4d0c-b679-bb6834189c25.roa (raw, json)
Hash identifier:          gnNJ0dJnW6RKWJrq4K9Ry3y7Qdbm59rlA4Dqjw4oFpw=
Subject key identifier:   1B:1A:25:F2:0E:68:9C:57:87:F1:6C:B5:75:75:DB:56:EC:1F:8D:C1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       685032308FC1725D0ABEF3BDABDC668BA5AB0364
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a53118-4090-4d0c-b679-bb6834189c25.roa
Signing time:             Sat 18 Oct 2025 22:50:08 +0000
ROA not before:           Sat 18 Oct 2025 22:50:08 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:32:30:8f:c1:72:5d:0a:be:f3:bd:ab:dc:66:8b:a5:ab:03:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 22:50:08 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6eccb90b11cc0b63ed7a8b3ab2ade2db2f9668af6d50ae594673c53074c7cead, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:da:e4:e0:e6:d1:a5:61:3a:49:95:59:2f:
                    32:aa:7a:f1:01:51:b1:10:b4:17:89:1a:56:39:93:
                    f8:77:9e:56:91:eb:28:be:35:d3:bf:ab:e0:e6:3f:
                    e6:32:b9:98:1c:67:4f:a1:bc:a2:a5:2f:11:ad:62:
                    16:a9:bb:1d:38:fa:00:df:3e:ec:7d:95:3b:e4:93:
                    18:d1:cd:68:f3:5c:ca:fc:8b:0c:6e:7f:e5:c8:b3:
                    0b:03:c2:c8:d2:fb:cd:21:a5:49:fb:4b:78:b2:5e:
                    c4:7b:f7:74:34:56:eb:75:dd:b8:53:70:9d:4d:e3:
                    38:e9:a7:db:84:3e:a3:37:2e:cd:2f:2f:d5:1a:ff:
                    40:1f:fb:db:8b:a9:db:14:bd:64:66:9f:76:b8:4b:
                    f2:1e:d0:f7:93:0c:b4:45:57:1b:0d:27:ba:23:15:
                    ad:a1:ed:37:c2:d5:23:eb:fe:fc:b7:f9:4c:3d:03:
                    1c:42:22:db:de:0c:67:3c:35:fe:8d:6a:65:92:ec:
                    0f:ce:f5:64:ee:3d:8e:00:52:6e:bc:50:a9:c7:e4:
                    d5:31:f4:ad:be:7b:3f:6d:b5:68:d8:2b:4b:ac:14:
                    66:35:4a:af:07:46:3b:89:82:f4:6e:d7:11:92:1f:
                    93:59:d4:64:da:42:40:b3:81:13:54:d0:15:c8:a6:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:25:F2:0E:68:9C:57:87:F1:6C:B5:75:75:DB:56:EC:1F:8D:C1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a53118-4090-4d0c-b679-bb6834189c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:07:f7:74:98:f4:1e:f1:9f:da:fb:28:3b:23:fe:4f:98:ac:
         26:6b:14:fb:a8:80:e5:7a:63:92:7c:98:9a:12:a8:5c:85:92:
         b4:dc:f6:5c:65:f0:54:33:86:91:64:20:16:a6:06:97:39:63:
         86:79:b8:c0:12:2c:05:dc:e0:16:85:6f:ce:9a:10:78:78:35:
         b2:3f:1b:b5:97:fe:8b:e0:a3:27:fd:92:fb:8e:32:e9:30:71:
         da:be:72:d4:cb:39:d1:99:47:69:9c:2e:01:e5:61:d4:f8:5b:
         bb:5a:82:63:0f:26:76:9d:7f:7c:fa:7e:b0:18:9b:85:78:82:
         5d:6d:51:c7:ae:be:03:4b:fc:0f:3b:fc:0f:69:14:e4:8f:ce:
         70:24:a8:f1:fc:00:3a:23:47:ae:85:5d:7c:b5:83:0e:1e:3f:
         9f:73:76:1c:5a:05:9e:72:c5:d1:a6:ec:eb:c1:7f:ab:4c:fb:
         a6:63:88:27:d1:99:db:4a:6a:b1:9f:5f:56:0e:6e:50:83:94:
         0c:de:65:2e:18:84:05:bb:01:ef:ab:d9:8a:f3:68:67:8f:98:
         67:12:d7:1b:5c:cd:ef:88:3f:7b:7e:b7:5e:99:b6:c3:a2:59:
         a7:d8:17:0f:be:75:3f:51:49:0d:0a:30:79:e5:03:4c:75:90:
         a7:14:7c:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaFAyMI/Bcl0KvvO9q9xmi6WrA2QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI1MDA4WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZWNjYjkwYjExY2MwYjYzZWQ3YThiM2FiMmFkZTJkYjJm
OTY2OGFmNmQ1MGFlNTk0NjczYzUzMDc0YzdjZWFkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbpNrk4ObRpWE6SZVZLzKqevEBUbEQtBeJGlY5k/h3nlaR
6yi+NdO/q+DmP+YyuZgcZ0+hvKKlLxGtYhapux04+gDfPux9lTvkkxjRzWjzXMr8
iwxuf+XIswsDwsjS+80hpUn7S3iyXsR793Q0Vut13bhTcJ1N4zjpp9uEPqM3Ls0v
L9Ua/0Af+9uLqdsUvWRmn3a4S/Ie0PeTDLRFVxsNJ7ojFa2h7TfC1SPr/vy3+Uw9
AxxCItveDGc8Nf6NamWS7A/O9WTuPY4AUm68UKnH5NUx9K2+ez9ttWjYK0usFGY1
Sq8HRjuJgvRu1xGSH5NZ1GTaQkCzgRNU0BXIpsdlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGxol8g5onFeH8Wy1dXXbVuwfjcEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU2YTUzMTE4LTQwOTAtNGQwYy1iNjc5LWJiNjgzNDE4OWMyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAISpQwwDQYJKoZIhvcNAQELBQADggEBAGAH93SY9B7xn9r7KDsj/k+YrCZr
FPuogOV6Y5J8mJoSqFyFkrTc9lxl8FQzhpFkIBamBpc5Y4Z5uMASLAXc4BaFb86a
EHh4NbI/G7WX/ovgoyf9kvuOMukwcdq+ctTLOdGZR2mcLgHlYdT4W7tagmMPJnad
f3z6frAYm4V4gl1tUceuvgNL/A87/A9pFOSPznAkqPH8ADojR66FXXy1gw4eP59z
dhxaBZ5yxdGm7OvBf6tM+6ZjiCfRmdtKarGfX1YOblCDlAzeZS4YhAW7Ae+r2Yrz
aGePmGcS1xtcze+IP3t+t16ZtsOiWafYFw++dT9RSQ0KMHnlA0x1kKcUfBs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:06:42 2025 by rpki-client