Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dcc8f85-8369-4669-bd4f-457582e1665d.roa
File:                     6dcc8f85-8369-4669-bd4f-457582e1665d.roa (raw, json)
Hash identifier:          zlUyWK2bU6mLZHWX/8fF5Bve8V+3KXycEoUDBXZlqRY=
Subject key identifier:   5F:A4:67:1D:B3:42:39:61:AF:5A:63:43:A0:78:C3:E5:75:3F:18:F7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       01F27AE2CF7BF940B2B1610F2DEF20B3B3B93266
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dcc8f85-8369-4669-bd4f-457582e1665d.roa
Signing time:             Sun 19 Oct 2025 20:53:45 +0000
ROA not before:           Sun 19 Oct 2025 20:53:45 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f2:7a:e2:cf:7b:f9:40:b2:b1:61:0f:2d:ef:20:b3:b3:b9:32:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 20:53:45 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d314b5b28d7b83b0d94ac59524cc5733ab188cb5e00b701e29c9f6990b4e6b45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:f6:75:7a:b0:57:de:b3:1a:0a:c3:73:9e:
                    f3:86:b0:9f:e6:31:31:4d:6d:c1:55:74:63:1e:b2:
                    ed:d4:48:93:b5:43:a6:ae:37:af:c6:e4:97:64:96:
                    6f:ad:7e:d0:66:b0:d6:f6:b6:50:9d:c5:ed:d4:5f:
                    15:14:db:90:6a:6a:e9:e1:95:ca:df:a9:d2:fd:bd:
                    03:69:74:f2:31:3e:8f:16:9e:cd:12:a7:06:24:b9:
                    fb:93:f7:ea:52:96:4e:65:a6:29:08:1d:3b:92:01:
                    90:f9:48:bd:d7:3f:04:fa:8d:08:53:3c:27:e6:cf:
                    e6:11:cb:eb:ba:a0:d2:55:d4:e5:b8:17:89:0c:5a:
                    fe:5b:cf:58:f3:26:a1:2c:05:51:4c:c9:fa:da:02:
                    8a:d9:a5:42:e2:d4:cd:ff:01:da:67:90:fd:2e:ea:
                    5f:46:2d:ad:05:d6:fc:1c:ac:f1:7a:0e:1e:62:5d:
                    25:d2:49:4c:dd:e0:0f:2b:ef:06:a1:63:aa:0a:1f:
                    4c:43:18:f0:3e:35:37:47:31:3c:07:41:1a:17:4d:
                    51:09:9f:89:86:67:6e:ac:49:a2:0e:2a:c0:04:95:
                    51:8f:15:8f:16:88:1d:b0:10:87:f9:a7:f6:f0:d0:
                    02:8c:ea:3e:ce:40:eb:cb:0b:4b:12:19:97:49:bb:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:67:1D:B3:42:39:61:AF:5A:63:43:A0:78:C3:E5:75:3F:18:F7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dcc8f85-8369-4669-bd4f-457582e1665d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:90:15:de:dd:ff:af:ac:2c:87:02:1c:1b:dc:f0:86:2e:
         32:c7:cb:69:9f:4a:7f:fd:2c:d5:04:e5:ba:55:5a:e1:50:27:
         2d:ee:0f:92:23:18:43:ef:b4:32:18:62:26:e2:57:84:cd:60:
         b2:b9:33:52:5f:70:24:0d:d1:ad:91:a5:8f:36:1d:e3:e8:01:
         05:5a:f0:62:be:8a:34:90:a8:bd:88:60:7a:c7:f9:48:07:f2:
         64:32:61:13:eb:bb:e5:db:6d:d8:aa:d8:db:d7:0a:19:1a:66:
         7d:98:87:83:a2:4b:92:d6:a8:c0:1b:eb:5b:50:b9:9b:da:54:
         40:9f:3c:f1:85:78:69:7a:f9:86:09:8f:c6:9c:cc:fa:b3:01:
         e4:86:f3:9d:c7:f0:3e:49:22:82:1f:42:30:4a:ce:9d:16:58:
         2a:eb:fc:f1:e8:bb:84:cb:ed:f6:42:21:25:0b:45:14:98:0d:
         91:f1:c9:18:fd:dd:13:d7:38:84:65:94:0f:b2:d3:8d:34:5a:
         39:54:34:b7:5d:1e:45:5e:ca:b5:20:63:fc:42:65:59:72:e5:
         7d:43:0e:06:79:e9:c6:da:80:2a:41:ea:43:f4:59:20:70:53:
         38:d6:20:de:4f:3d:e6:01:48:6b:7c:27:ad:62:cb:4a:86:d1:
         4c:87:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:41:31 2025 by rpki-client