Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657e3906-4a9f-4e85-9e92-79ba4bd47d56.roa
File:                     657e3906-4a9f-4e85-9e92-79ba4bd47d56.roa (raw, json)
Hash identifier:          DOVQWMWAn5iZ1LD9nZDatQl5VIqj1oluD5IQeOhbG7c=
Subject key identifier:   7A:0A:39:32:3C:4C:D2:50:5F:8C:C4:55:E7:90:83:17:2C:C2:58:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       34BD103E90F4D2D212BC53AE88C0CF678B3983D8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657e3906-4a9f-4e85-9e92-79ba4bd47d56.roa
Signing time:             Sun 19 Oct 2025 15:12:27 +0000
ROA not before:           Sun 19 Oct 2025 15:12:27 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.225.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bd:10:3e:90:f4:d2:d2:12:bc:53:ae:88:c0:cf:67:8b:39:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 15:12:27 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=abb7512c7c99bc4e9839544c61b9ce5ad364ccc96db045250b001390d3534c58, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:35:85:88:a5:9a:f2:58:b7:1f:9c:90:1a:
                    43:20:c8:af:d3:ef:00:af:c5:ef:bd:9d:78:d1:b4:
                    f2:f0:9f:ee:59:0f:b2:7f:f4:67:92:8c:b0:22:a6:
                    be:b8:cd:6a:29:ce:7d:b6:ec:4a:8a:0e:e2:57:23:
                    82:e8:77:95:db:dc:98:d4:69:dc:a7:25:93:46:f2:
                    00:d2:5e:e0:0b:60:c0:2e:99:7a:18:64:86:9e:07:
                    bf:4e:50:e3:39:58:f7:ed:99:97:92:c4:ab:18:6a:
                    a9:8c:6c:cb:71:85:d2:12:04:75:68:d9:ae:cd:70:
                    a6:48:4e:6d:7f:e4:54:fb:9b:a2:27:5c:5d:bb:11:
                    d9:4c:98:fe:99:7c:63:24:fe:52:90:ee:57:80:76:
                    59:32:32:59:c6:0d:de:aa:6a:93:0e:2c:fc:15:1e:
                    11:e3:88:24:f4:d2:87:ec:1f:6f:15:e1:3d:11:69:
                    31:8a:c5:da:4e:3d:81:f6:a4:30:59:34:a3:e0:05:
                    f1:c5:2e:7c:68:ea:2d:cc:7f:8f:5f:fc:29:50:57:
                    ec:ae:27:ad:1a:f8:9d:fa:a8:9c:54:3c:8e:80:5e:
                    90:dd:ff:03:eb:d1:ec:79:07:2e:34:b4:ba:83:d9:
                    4c:98:a7:24:b1:df:93:ac:e4:63:1f:b3:01:02:7c:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:39:32:3C:4C:D2:50:5F:8C:C4:55:E7:90:83:17:2C:C2:58:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/657e3906-4a9f-4e85-9e92-79ba4bd47d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.225.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:f2:a4:80:f5:6c:69:83:ba:96:a9:cb:62:1b:6c:7d:4a:
         95:57:05:81:a8:70:45:5d:60:5a:b3:64:fe:3b:91:9a:9a:79:
         37:29:09:da:8a:56:48:ff:58:a1:67:2f:3c:57:66:a1:08:74:
         a5:28:54:15:75:bf:99:ef:4b:57:5f:2c:2c:3f:0f:b1:cd:c8:
         90:62:f9:e0:a7:59:85:46:71:44:8f:a3:fd:dd:40:d7:38:4c:
         2c:16:69:ee:ca:32:b3:4f:5c:2e:36:c7:24:95:40:9d:1c:95:
         56:8c:f4:7b:e5:72:c1:ca:20:94:84:c9:c2:a2:e9:cd:2e:e4:
         b4:6d:b9:ae:34:56:5d:66:92:66:08:ee:7a:0b:13:4d:b3:c4:
         fd:0a:15:7b:8f:53:2b:36:83:2d:61:50:b0:92:e8:bb:59:58:
         7f:04:f3:d0:fb:ef:30:52:dd:bd:2d:b9:90:46:d6:d7:5c:3e:
         32:5e:f5:2b:9f:09:fd:56:80:a4:19:e6:5a:69:4c:5d:a5:96:
         5f:f5:ef:4d:31:5b:5d:6a:b1:05:a5:7f:be:8e:c2:72:d2:2a:
         f9:5e:f4:95:5c:3d:24:d5:03:63:b2:fb:31:98:6e:31:f7:ac:
         3f:0d:53:36:0c:de:42:d3:4e:58:f9:fd:8e:f7:76:60:00:d1:
         c2:05:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:17:21 2025 by rpki-client