Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59283f69-3470-416a-a406-1ca8ab041aa1.roa
File:                     59283f69-3470-416a-a406-1ca8ab041aa1.roa (raw, json)
Hash identifier:          kgYcTb0TyMnvMcME/s6seCMWlxlDDieVKl6/+uhlg4I=
Subject key identifier:   32:3A:30:27:C2:B5:8C:96:9C:3A:C7:1F:DE:AE:C2:92:2E:94:22:F4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       790BB60FB3F5D463A4ABA3CE7D45B0636013AD69
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59283f69-3470-416a-a406-1ca8ab041aa1.roa
Signing time:             Sun 19 Oct 2025 08:44:04 +0000
ROA not before:           Sun 19 Oct 2025 08:44:04 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.64.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0b:b6:0f:b3:f5:d4:63:a4:ab:a3:ce:7d:45:b0:63:60:13:ad:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 08:44:04 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=b954c987624cd7b130f5ea25bc760e690d4aa0c37d06aa0f6580577498b71a8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:03:e4:97:6d:92:a9:64:3f:00:ce:9a:03:
                    f8:de:51:28:24:ce:fb:99:e7:b6:e7:d9:ce:7d:a7:
                    a1:90:9c:79:99:72:b7:86:f2:97:df:0d:7e:41:ab:
                    16:1f:42:40:45:98:2d:d0:6e:97:1d:2c:40:1c:d4:
                    be:14:b9:a5:91:18:54:10:1d:2c:0d:3f:a0:a6:a2:
                    e3:f6:47:83:f0:c6:43:fb:43:69:17:c7:8f:8a:7d:
                    95:e8:58:fc:84:b0:fc:0c:83:e7:75:09:b8:32:84:
                    db:1d:28:49:d3:3e:2a:4f:b1:b8:3c:4f:67:ec:54:
                    58:75:e5:75:4f:69:0e:36:4b:1c:34:f0:a1:db:8d:
                    ff:7e:d9:63:09:c5:81:29:7e:31:57:a6:bf:5f:74:
                    f2:5a:2d:24:83:e8:e5:c9:6e:b5:3a:1d:29:1a:66:
                    3c:25:0e:48:2c:10:bb:ad:2e:28:ba:7e:20:c6:b1:
                    63:47:d2:8c:d6:1c:09:f9:51:76:bd:e2:b3:14:3f:
                    29:74:b4:f6:33:39:f2:e4:f1:83:aa:39:6e:da:4f:
                    8a:c5:8c:56:ed:56:39:14:1a:9c:94:ec:98:34:5e:
                    91:30:4c:39:da:7e:ed:54:06:c0:48:00:e6:0f:78:
                    24:0d:46:7f:c7:66:3c:7c:83:9c:a1:87:83:ae:a4:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:30:27:C2:B5:8C:96:9C:3A:C7:1F:DE:AE:C2:92:2E:94:22:F4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59283f69-3470-416a-a406-1ca8ab041aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.64.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:7a:6b:e1:72:6f:ac:e4:4b:fa:8a:d8:61:4f:35:7a:bf:
         11:e7:1a:e9:1e:ef:18:4c:31:55:b6:85:37:18:18:8b:c5:bb:
         12:29:77:99:24:cc:74:a5:ce:8c:ce:86:10:d7:66:e6:cd:a6:
         9f:09:84:41:9d:3e:61:12:b9:c0:14:0c:c3:e3:a9:27:67:24:
         c9:aa:dd:6b:de:64:9e:1e:b5:55:85:90:7b:e2:a2:f8:14:a6:
         99:6c:45:48:23:6d:a8:84:d5:11:c6:cf:7b:08:36:f1:15:a3:
         1b:f9:80:aa:fd:bc:85:be:39:5a:68:d9:cb:e3:07:dd:b2:b2:
         aa:52:45:68:49:2c:04:43:85:7a:7c:68:cc:36:18:d3:bd:22:
         66:bb:f2:33:9c:df:5a:44:b3:4f:cb:e1:9b:a9:c6:fd:fe:87:
         bf:df:a7:36:ae:d7:72:67:08:9b:2c:7f:0e:f0:ec:3a:0c:25:
         2b:04:7a:f2:eb:c1:c9:09:fe:b3:3d:3e:e0:74:9d:a6:02:6d:
         f4:75:6e:f6:c3:15:8d:cb:c3:38:53:a0:91:57:81:b5:9b:48:
         ef:9e:43:f3:18:c7:e3:6b:77:06:b8:54:b8:33:29:0e:c8:61:
         c2:c4:1b:d8:b3:4f:16:97:9b:e8:91:1d:29:ea:e9:e9:7f:6c:
         8f:1c:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:06:16 2025 by rpki-client