Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3afff3-6820-4d13-90bb-68a4cef47c66.roa
File:                     6c3afff3-6820-4d13-90bb-68a4cef47c66.roa (raw, json)
Hash identifier:          +CyZxotPoV7kqkfAvTTgIhO6Xj1IpjvD3lqMRkF5g7s=
Subject key identifier:   34:7D:62:BC:63:3B:9B:F0:C9:F2:48:D2:8F:B8:6C:BB:D0:35:4C:F1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2751E1F590E9DE66455E4D8B7472319210DCB289
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3afff3-6820-4d13-90bb-68a4cef47c66.roa
Signing time:             Sun 19 Oct 2025 13:53:29 +0000
ROA not before:           Sun 19 Oct 2025 13:53:29 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.67.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:e1:f5:90:e9:de:66:45:5e:4d:8b:74:72:31:92:10:dc:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 13:53:29 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=0397b1ad89914d6c38bd2f5a9567fc077a76cba1270f5ee38f5fe7d5f9f9e9e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:f6:d9:ec:a0:82:17:37:c7:d8:83:2f:0f:
                    3f:30:88:fc:e8:64:74:fe:6d:70:17:59:cc:8b:7d:
                    cd:35:c6:7f:b2:ab:8b:3c:b9:c2:fe:58:0e:8d:fb:
                    d6:e0:a2:b5:9f:b4:a8:c5:3d:62:ad:4f:95:07:0a:
                    af:7f:71:0a:62:06:15:ce:4b:72:52:ff:49:a5:d1:
                    8e:ef:87:12:4d:b0:05:69:17:1a:04:6f:c1:68:78:
                    8f:8b:2f:57:d9:21:c0:d7:b0:47:c8:48:28:b2:b6:
                    18:19:39:c9:c2:6f:8f:3b:b0:5a:14:56:2a:3c:e7:
                    38:ee:1f:7d:4a:e2:8a:24:eb:d6:6a:97:af:e4:e4:
                    c7:19:33:0e:35:46:5c:c8:37:c1:c6:ce:72:ed:69:
                    c7:2a:ae:b9:72:de:e5:bd:70:5a:ec:8c:72:dc:40:
                    de:48:a1:ca:a4:ec:9f:dd:71:96:e3:27:88:93:15:
                    10:0a:fb:d5:0c:7a:94:6c:31:dc:dd:1d:9e:55:87:
                    3c:ea:cd:88:2b:2c:fd:5e:08:9f:fb:05:b9:74:e1:
                    5e:38:06:4d:36:b2:c9:1b:8b:69:86:a6:6b:be:55:
                    8d:a1:f0:56:a9:88:5a:79:5d:a9:ee:e1:54:1b:d0:
                    56:a9:f2:19:42:61:e2:dc:d0:15:bd:9c:64:9e:dd:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:62:BC:63:3B:9B:F0:C9:F2:48:D2:8F:B8:6C:BB:D0:35:4C:F1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c3afff3-6820-4d13-90bb-68a4cef47c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.67.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:6b:c1:85:25:a4:4d:5b:92:e0:05:2a:02:22:a5:57:b7:
         e5:7c:41:a3:f7:b8:f2:b0:a9:cb:a2:fd:48:6f:08:0e:90:bf:
         55:ea:1b:c3:ab:93:07:ba:02:3c:73:ce:90:df:9e:20:e7:bd:
         cd:75:af:66:4e:6c:03:c3:61:b2:f3:0e:fb:a4:23:78:5b:59:
         1e:43:05:6c:32:4e:cf:0b:81:e4:92:e7:a0:14:6e:c2:79:73:
         db:2b:55:0d:fd:be:90:50:4c:30:4d:05:d7:7c:a7:6c:c0:a6:
         cd:d5:47:4e:b3:7e:cb:f8:a6:b4:5d:90:a4:49:bb:42:b2:bc:
         5b:95:62:e0:b4:a6:0d:36:fd:f3:6a:bf:35:aa:b4:0b:c5:d8:
         9e:87:54:f3:fd:5e:12:3b:bf:9e:fb:bd:e0:de:22:f4:6d:eb:
         dd:ed:af:f6:46:04:bd:89:f8:fe:61:71:bc:2e:28:6f:79:21:
         9e:a4:9f:cf:81:b0:a7:4b:9a:14:5c:a6:dc:c4:f7:fd:2e:e2:
         a1:03:9c:b2:63:3b:35:fd:11:5a:10:5b:52:ba:2d:19:67:91:
         df:0a:5d:07:9a:26:d0:13:c1:eb:fe:df:13:9f:d7:a4:72:79:
         3f:9b:df:cd:00:c9:db:e3:02:a2:6d:9f:b4:65:02:bd:b5:3d:
         5b:27:c3:7f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ1Hh9ZDp3mZFXk2LdHIxkhDcsokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTM1MzI5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzk3YjFhZDg5OTE0ZDZjMzhiZDJmNWE5NTY3ZmMwNzdh
NzZjYmExMjcwZjVlZTM4ZjVmZTdkNWY5ZjllOWU2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUjvbZ7KCCFzfH2IMvDz8wiPzoZHT+bXAXWcyLfc01xn+y
q4s8ucL+WA6N+9bgorWftKjFPWKtT5UHCq9/cQpiBhXOS3JS/0ml0Y7vhxJNsAVp
FxoEb8FoeI+LL1fZIcDXsEfISCiythgZOcnCb487sFoUVio85zjuH31K4ook69Zq
l6/k5McZMw41RlzIN8HGznLtaccqrrly3uW9cFrsjHLcQN5Iocqk7J/dcZbjJ4iT
FRAK+9UMepRsMdzdHZ5VhzzqzYgrLP1eCJ/7Bbl04V44Bk02sskbi2mGpmu+VY2h
8FapiFp5Xanu4VQb0Fap8hlCYeLc0BW9nGSe3ac3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNH1ivGM7m/DJ8kjSj7hsu9A1TPEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZjM2FmZmYzLTY4MjAtNGQxMy05MGJiLTY4YTRjZWY0N2M2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAESQ3AwDQYJKoZIhvcNAQELBQADggEBABlra8GFJaRNW5LgBSoCIqVXt+V8
QaP3uPKwqcui/UhvCA6Qv1XqG8Orkwe6AjxzzpDfniDnvc11r2ZObAPDYbLzDvuk
I3hbWR5DBWwyTs8LgeSS56AUbsJ5c9srVQ39vpBQTDBNBdd8p2zAps3VR06zfsv4
prRdkKRJu0KyvFuVYuC0pg02/fNqvzWqtAvF2J6HVPP9XhI7v577veDeIvRt693t
r/ZGBL2J+P5hcbwuKG95IZ6kn8+BsKdLmhRcptzE9/0u4qEDnLJjOzX9EVoQW1K6
LRlnkd8KXQeaJtATwev+3xOf16RyeT+b380AydvjAqJtn7RlAr21PVsnw38=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:07:59 2025 by rpki-client