Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6fe52dd8-e539-48fa-b805-e9b555c6954b.roa
File:                     6fe52dd8-e539-48fa-b805-e9b555c6954b.roa (raw, json)
Hash identifier:          kq5aroXgi9H7yZIkDo2KEczXK8H/+b86EGe+Mz4Ht/s=
Subject key identifier:   FE:FE:2A:45:7D:5F:28:32:FF:18:F8:D7:EA:34:7B:82:35:24:D5:F2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       38513562D190CB5476FCC06F5AB472705D38621A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6fe52dd8-e539-48fa-b805-e9b555c6954b.roa
Signing time:             Sat 18 Oct 2025 14:32:41 +0000
ROA not before:           Sat 18 Oct 2025 14:32:41 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.154.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:51:35:62:d1:90:cb:54:76:fc:c0:6f:5a:b4:72:70:5d:38:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 14:32:41 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=55bed759236d97565cb3dd6821149830c95a0f483c4ce27b274f54c47dd33c5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:90:91:0a:12:b2:e5:82:56:f6:5d:bc:0f:
                    d5:07:43:2c:8d:ad:2f:13:46:4f:f7:b8:d6:e5:fc:
                    01:ad:03:d6:a1:76:27:64:36:9f:e3:a2:cd:5d:36:
                    3a:66:9b:a7:aa:13:68:ab:0b:e5:c5:e5:1c:fc:85:
                    35:b2:41:f9:6e:4f:41:ca:15:7b:37:d4:38:d9:54:
                    05:bc:69:b8:12:73:a7:d1:b5:56:6b:c8:e5:68:5d:
                    01:aa:19:18:49:0e:98:3d:38:d5:63:71:04:ed:45:
                    10:e1:cc:b9:80:2b:ac:4b:29:87:50:36:46:a3:ca:
                    3b:39:c4:5b:c4:23:54:02:73:c2:a7:cc:28:ae:fc:
                    c6:03:36:23:0b:cc:4f:73:96:a2:fc:87:1c:c2:9f:
                    90:9b:13:24:39:c9:4e:cd:43:a5:68:e8:11:c7:78:
                    89:0b:52:b4:5d:60:83:a0:3b:b0:c2:45:fe:fb:b4:
                    b8:c8:e0:cb:31:39:5a:31:1b:3e:6b:9a:c5:3b:52:
                    48:ff:19:de:90:ee:fa:81:ad:8b:9e:b2:e0:a3:b9:
                    09:b6:69:9c:be:c0:12:fc:00:96:a6:18:63:52:93:
                    60:a2:4d:63:36:6f:d4:b9:e0:f3:8e:01:f4:b5:cd:
                    53:37:85:98:06:7e:a8:24:79:bb:04:34:38:8b:fd:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:2A:45:7D:5F:28:32:FF:18:F8:D7:EA:34:7B:82:35:24:D5:F2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6fe52dd8-e539-48fa-b805-e9b555c6954b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:25:20:e2:24:ba:8b:b7:ab:97:65:32:19:84:02:b9:93:8b:
         cb:bb:e3:6a:a4:21:41:25:7c:61:54:bc:56:f9:07:5d:81:fa:
         1e:18:e8:fe:16:53:5e:46:03:32:de:1c:d4:43:72:63:81:21:
         ce:9a:e1:4e:3e:e8:a2:36:65:8d:78:d9:84:57:33:45:52:62:
         47:3a:d9:53:70:e6:b7:a2:6c:e0:5f:ba:65:05:b5:a3:9e:d2:
         34:75:0a:16:f0:b6:88:d1:70:13:40:c1:85:f7:57:5f:b5:37:
         9a:6c:f6:be:13:d2:c2:9a:33:4f:13:02:f4:8d:c7:1b:3b:14:
         59:74:9a:a6:66:31:f0:ea:0f:71:1a:0a:b1:f3:0b:88:91:82:
         c6:64:f5:2c:a4:c7:e2:d0:c6:0c:71:f0:9f:9f:c8:4c:5e:55:
         02:90:9e:3e:6a:6d:3d:f2:43:c7:13:92:57:ad:88:eb:c0:21:
         80:b5:f7:e1:af:63:35:d7:4c:f8:a9:c6:72:b4:2d:4b:ab:ab:
         1a:89:f4:28:bc:8c:e6:df:62:f8:7e:a6:8b:9f:40:81:ad:41:
         cc:45:54:53:40:aa:d3:d5:2c:a1:32:ee:98:b7:77:94:02:5d:
         34:98:4e:90:0c:59:d6:66:83:81:8d:b3:cc:71:73:c2:cc:2d:
         36:5b:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:05:03 2025 by rpki-client