Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ad5922e-3e65-49dc-90b6-b8f4dd7922a5.roa
File:                     5ad5922e-3e65-49dc-90b6-b8f4dd7922a5.roa (raw, json)
Hash identifier:          b/qCDIr7EG+z3eJD6l5n1baIynO1kpYqmQ+8Dv+6msU=
Subject key identifier:   21:11:87:D5:1C:E5:2A:E5:A5:08:58:D6:FE:7E:53:34:C0:8A:CC:18
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       380DD88D36C240E956A3160EEE1F0CA6996EA295
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ad5922e-3e65-49dc-90b6-b8f4dd7922a5.roa
Signing time:             Sun 19 Oct 2025 23:32:43 +0000
ROA not before:           Sun 19 Oct 2025 23:32:43 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:d8:8d:36:c2:40:e9:56:a3:16:0e:ee:1f:0c:a6:99:6e:a2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 23:32:43 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e33346445ddf93d62f3716f1fb9319d31271cd46f0d2f69c7f7d133b11be56a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1a:1e:33:14:0a:ab:b5:30:ee:c2:1f:d6:d7:
                    f1:2c:fe:02:18:5c:31:4c:ec:07:e9:b3:62:56:43:
                    d6:9a:c7:69:5b:85:b4:af:5b:26:24:b4:39:31:d9:
                    bc:b2:41:92:37:f7:c9:5e:ee:13:aa:5b:39:55:83:
                    01:2a:aa:b1:af:6f:46:f6:89:6d:00:f0:c5:1a:69:
                    ea:77:79:ad:be:fd:c8:bb:46:51:9a:fe:f0:02:30:
                    86:04:7f:15:ef:28:5e:ca:56:23:77:51:79:e8:04:
                    25:4f:f9:f6:96:66:4d:94:ca:00:61:7e:a1:80:5d:
                    d8:8e:eb:da:dc:62:c0:39:1d:44:fb:f4:ef:79:09:
                    43:90:34:7c:62:8d:fd:82:b3:05:1d:60:a9:a7:8b:
                    61:92:c7:2b:37:d5:42:1a:b8:b7:e1:e7:2a:28:de:
                    d1:b6:81:99:39:3f:07:e7:2e:00:f2:41:c4:41:7e:
                    52:fb:5d:13:83:98:22:b0:f3:b4:ce:7a:75:7f:61:
                    8c:4a:b0:e7:28:7b:b3:42:6e:68:f1:02:02:52:b6:
                    3e:28:6d:2a:5a:57:45:8d:7d:5d:2d:6a:8f:f7:e2:
                    af:08:9c:42:80:ad:9f:5e:ac:b3:e3:60:70:01:87:
                    36:7c:f8:9c:dd:e4:ac:a8:51:6c:df:b6:4a:33:1b:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:11:87:D5:1C:E5:2A:E5:A5:08:58:D6:FE:7E:53:34:C0:8A:CC:18
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ad5922e-3e65-49dc-90b6-b8f4dd7922a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:60:15:f3:cb:48:7f:4c:46:d4:d9:09:84:8c:30:60:73:
         6c:9f:b5:1b:af:e5:41:f9:3a:5a:3c:c8:4e:1c:05:3c:84:44:
         12:78:07:9e:71:ff:b6:d0:b4:90:c6:84:b8:4a:19:36:6f:83:
         7b:fc:88:b8:13:9c:be:af:ab:7d:e0:d8:1c:36:e7:ca:62:a3:
         ec:99:8b:27:b6:0d:16:b9:67:c3:4d:1c:9e:e0:fc:1b:36:f2:
         d4:b7:7f:2d:f2:e4:e9:84:cf:aa:d3:65:6f:58:86:ce:fc:63:
         42:b4:8d:05:10:65:e3:c7:e5:b2:9d:37:8f:c4:c1:49:c7:dc:
         f6:0a:84:54:60:e2:57:79:78:60:e8:80:83:11:eb:3e:ff:63:
         60:88:43:b1:34:88:bd:36:cf:24:52:74:38:7a:c3:f1:40:55:
         da:e9:9f:5d:ca:8c:07:dc:0a:aa:ed:23:f3:bd:85:f8:1b:da:
         af:7e:b5:be:b5:b2:46:b6:2e:79:7c:ed:44:c2:79:2f:52:41:
         54:d3:cc:79:31:e5:a1:da:73:2f:dd:b7:fe:71:c7:f3:f8:17:
         ba:5c:83:0a:4c:64:f7:fe:3d:93:3f:1c:a1:52:d0:04:3d:59:
         2d:62:b2:03:cd:c3:b9:05:42:87:f7:dd:15:8c:2d:74:41:1d:
         74:94:94:fb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOA3YjTbCQOlWoxYO7h8MppluopUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjMzMjQzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzMzNDY0NDVkZGY5M2Q2MmYzNzE2ZjFmYjkzMTlkMzEy
NzFjZDQ2ZjBkMmY2OWM3ZjdkMTMzYjExYmU1NmEyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqGh4zFAqrtTDuwh/W1/Es/gIYXDFM7Afps2JWQ9aax2lb
hbSvWyYktDkx2byyQZI398le7hOqWzlVgwEqqrGvb0b2iW0A8MUaaep3ea2+/ci7
RlGa/vACMIYEfxXvKF7KViN3UXnoBCVP+faWZk2UygBhfqGAXdiO69rcYsA5HUT7
9O95CUOQNHxijf2CswUdYKmni2GSxys31UIauLfh5yoo3tG2gZk5PwfnLgDyQcRB
flL7XRODmCKw87TOenV/YYxKsOcoe7NCbmjxAgJStj4obSpaV0WNfV0tao/34q8I
nEKArZ9erLPjYHABhzZ8+Jzd5KyoUWzftkozG8BFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIRGH1RzlKuWlCFjW/n5TNMCKzBgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVhZDU5MjJlLTNlNjUtNDlkYy05MGI2LWI4ZjRkZDc5MjJhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAESQaAwDQYJKoZIhvcNAQELBQADggEBAE2rYBXzy0h/TEbU2QmEjDBgc2yf
tRuv5UH5Olo8yE4cBTyERBJ4B55x/7bQtJDGhLhKGTZvg3v8iLgTnL6vq33g2Bw2
58pio+yZiye2DRa5Z8NNHJ7g/Bs28tS3fy3y5OmEz6rTZW9Yhs78Y0K0jQUQZePH
5bKdN4/EwUnH3PYKhFRg4ld5eGDogIMR6z7/Y2CIQ7E0iL02zyRSdDh6w/FAVdrp
n13KjAfcCqrtI/O9hfgb2q9+tb61ska2Lnl87UTCeS9SQVTTzHkx5aHacy/dt/5x
x/P4F7pcgwpMZPf+PZM/HKFS0AQ9WS1isgPNw7kFQof33RWMLXRBHXSUlPs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:04:59 2025 by rpki-client