Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ff8923f-2f80-4f7e-825a-0002b3df4807.roa
File:                     6ff8923f-2f80-4f7e-825a-0002b3df4807.roa (raw, json)
Hash identifier:          qhR+a/2aFi/OgXJMyKxK0n7Lfp3mZqbu0TTunJI+Pak=
Subject key identifier:   2A:F8:9D:A1:A5:F0:D0:E8:9A:63:72:B5:33:ED:10:5B:C7:34:E5:4B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       483968DABC5733C3A04B200DCD286E0176222AF6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ff8923f-2f80-4f7e-825a-0002b3df4807.roa
Signing time:             Sun 19 Oct 2025 22:43:29 +0000
ROA not before:           Sun 19 Oct 2025 22:43:29 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:68:da:bc:57:33:c3:a0:4b:20:0d:cd:28:6e:01:76:22:2a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 22:43:29 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=4699d834d83566bb0dbd01200b977b9acd1a7097b05e72801a2a102e0ac908ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:49:3f:3b:ce:88:17:17:4d:04:12:2b:23:
                    fa:d0:6c:e6:64:46:0c:01:38:c9:1c:8b:ce:59:b1:
                    be:30:16:99:ea:57:86:45:55:67:80:7d:14:35:bf:
                    d3:61:cc:fa:1a:06:80:c1:15:32:aa:45:74:cf:4e:
                    91:22:95:d5:f4:43:49:25:92:14:35:50:6e:a8:ea:
                    0b:08:d8:3d:1d:2a:b5:6b:57:8f:d7:42:4b:10:a2:
                    70:76:be:7b:47:25:85:aa:bf:1d:94:67:dd:03:4d:
                    cc:95:ff:6e:89:ea:38:85:7f:b9:f4:2f:a7:c7:cb:
                    c4:ce:c8:4b:2c:86:0f:02:96:11:10:bf:49:9a:a0:
                    48:57:c2:79:bc:1b:3c:90:5e:4a:61:ca:5e:ad:cb:
                    1a:ae:aa:82:5a:4b:d7:fa:a7:0c:f3:c1:8d:22:dd:
                    7e:91:ba:e7:0f:2e:9d:05:aa:d8:d5:eb:ea:7f:41:
                    27:2d:71:03:1c:04:3b:99:4d:8e:e4:54:a2:04:32:
                    8a:e5:01:bc:47:7a:df:61:2d:50:39:6d:18:e9:c5:
                    1f:ef:46:b5:0e:51:19:17:05:54:4c:30:47:92:88:
                    c2:64:c5:6a:7b:7f:6c:9c:77:5f:20:f9:f0:97:24:
                    a5:d5:c3:65:68:63:71:45:6f:d4:3c:58:3b:24:f0:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F8:9D:A1:A5:F0:D0:E8:9A:63:72:B5:33:ED:10:5B:C7:34:E5:4B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ff8923f-2f80-4f7e-825a-0002b3df4807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:87:97:37:0a:9b:86:c1:bb:59:7b:6f:bd:32:dd:e6:dd:
         d4:7c:ec:ed:b9:fb:8d:3e:e6:65:35:7c:a2:60:8c:bf:75:5e:
         81:f6:95:e4:79:ae:8e:2d:33:cb:ec:b8:88:f0:3f:09:d5:b5:
         14:04:b5:a4:bf:45:d0:44:b3:0d:8a:f9:20:ce:11:52:19:a4:
         77:d3:b6:97:c0:44:0e:03:4c:80:ab:eb:5d:67:30:8c:51:58:
         0f:86:57:bc:27:bf:4f:13:e3:64:8f:a2:e5:13:96:e0:7e:79:
         a1:0e:d3:4b:d4:7d:1a:52:0d:35:fc:1e:c6:54:10:c4:a8:d9:
         44:a5:a4:95:7c:1a:4c:26:4d:ab:2e:68:12:96:4a:3c:b5:c4:
         bb:3d:65:55:14:60:68:6b:ef:d9:de:e2:f2:80:fe:20:e1:0e:
         00:5b:07:5d:28:a1:d1:b0:10:d2:6e:0e:ea:6c:70:b7:0b:9e:
         eb:c3:fd:2d:a0:d0:fa:22:af:bf:70:e5:97:66:42:03:37:b7:
         41:ec:f0:da:21:d5:91:63:11:ab:78:0c:42:2f:e4:c6:87:5f:
         e3:19:57:77:2f:7f:b9:e7:f0:4a:3b:59:f3:73:f1:da:84:b1:
         54:7f:7e:77:e1:6f:1e:7a:aa:bf:35:d0:79:99:73:2e:7c:85:
         43:be:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:02:46 2025 by rpki-client