Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66f002c3-2c0a-4b62-8355-c0d7d067e556.roa
File:                     66f002c3-2c0a-4b62-8355-c0d7d067e556.roa (raw, json)
Hash identifier:          vxl6SJJUlxNA7bCM0FFtM5ZrYBlGbYp1PbWFHCsd9Vo=
Subject key identifier:   B9:70:DF:F4:2C:FD:4B:2E:11:B1:55:77:A1:F6:EF:0E:7F:58:9F:78
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62335E8F04569AE7408EAE8D3BA3C18A41B3045F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66f002c3-2c0a-4b62-8355-c0d7d067e556.roa
Signing time:             Sun 19 Oct 2025 16:22:26 +0000
ROA not before:           Sun 19 Oct 2025 16:22:26 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:33:5e:8f:04:56:9a:e7:40:8e:ae:8d:3b:a3:c1:8a:41:b3:04:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 16:22:26 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=f06bc97e0a1c4b66f7677f35dcafc529c2e55b45738a6c4e42e565498594426c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:d6:42:ec:cd:e8:4c:9a:71:11:b2:fa:a4:
                    c1:1d:0e:eb:a6:c8:d4:00:a2:58:2f:36:99:54:f6:
                    aa:4b:7f:48:d8:bf:40:ae:01:34:59:53:48:b5:9f:
                    a9:ab:4d:ec:84:97:6d:22:3e:40:4d:67:ca:0f:92:
                    6b:5e:00:fe:98:82:ef:4f:85:f1:88:3a:0c:96:de:
                    35:d3:a4:86:7a:29:b8:40:af:6f:bb:29:91:42:b8:
                    0a:dd:96:2d:79:c3:83:8e:33:9c:02:f8:a7:ec:fb:
                    dd:fd:72:de:4d:7e:09:2d:30:70:eb:fe:d3:ae:4a:
                    f0:ec:a7:13:1d:6b:7b:4a:b6:ce:e3:69:6d:65:c0:
                    52:6c:7d:95:3d:48:84:bb:46:5d:6a:e5:3f:43:31:
                    57:bb:db:55:61:91:52:d4:7f:4e:64:f1:2e:29:96:
                    5b:6c:a2:f5:dd:64:f6:75:50:99:97:a0:03:93:e3:
                    73:47:19:54:19:41:74:65:ea:c7:92:45:c7:7b:b9:
                    fa:da:88:63:fe:d5:2c:aa:4e:7a:19:0e:d6:ba:d1:
                    35:05:2a:1c:e0:66:af:9e:79:ad:78:db:42:7d:12:
                    36:13:64:af:0a:e5:34:37:7a:32:ff:41:0e:74:99:
                    30:f2:ea:a6:e7:b7:5e:f7:0b:9c:2a:e4:b5:c7:c5:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:DF:F4:2C:FD:4B:2E:11:B1:55:77:A1:F6:EF:0E:7F:58:9F:78
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66f002c3-2c0a-4b62-8355-c0d7d067e556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:14:21:8b:ce:a7:28:5e:28:05:d9:bb:ee:8f:79:53:0a:
         39:99:7b:ff:68:69:51:e1:ac:f5:8e:50:af:12:7f:30:7a:1d:
         ed:31:68:7f:da:e3:67:db:5b:79:f3:8c:8c:f7:8f:ae:c4:6b:
         c9:49:9d:77:a1:6b:c7:ee:0b:99:c9:24:af:86:ae:b9:95:46:
         22:fa:ac:54:0a:27:13:bc:7d:f6:95:36:39:14:9b:4e:a2:f1:
         af:0c:8f:84:86:8f:c1:82:bd:37:58:16:3c:43:10:a1:28:c7:
         5d:82:ed:79:eb:7e:0a:f1:6f:af:79:92:0a:0f:ed:08:57:35:
         7b:3e:10:46:53:16:32:cd:2c:2f:64:f4:cb:e2:bb:e5:9b:28:
         94:ad:2e:7b:62:3f:9e:29:a5:e2:71:05:e4:5d:07:c9:4f:f4:
         87:9e:37:f9:9f:19:e5:54:85:dc:72:69:25:b3:a0:87:51:e9:
         2d:e2:58:22:d2:9b:72:60:8c:93:81:60:56:a0:4f:cd:fd:8c:
         73:6b:17:62:ed:18:4a:b0:f4:08:1e:45:59:01:34:a6:42:1b:
         b2:64:8a:00:60:93:0c:26:ac:6f:cc:64:f9:9d:b6:52:ae:17:
         52:85:cb:fb:6d:a5:3e:21:d0:8d:1c:db:1a:91:f8:ce:f6:f5:
         b9:70:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:12:11 2025 by rpki-client