Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/746181a0-c968-4aea-995d-98383c6af55a.roa
File:                     746181a0-c968-4aea-995d-98383c6af55a.roa (raw, json)
Hash identifier:          unXHPHUoY/jid18lwJ9LvX+e6BHXstAburTv0rrZFqk=
Subject key identifier:   ED:CD:39:25:CA:5D:60:42:F9:5D:98:F7:E1:DD:9B:0C:58:A6:67:2A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D0048F3FDD633A36B496C2CEA8AB13631148B09
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/746181a0-c968-4aea-995d-98383c6af55a.roa
Signing time:             Sun 19 Oct 2025 14:24:32 +0000
ROA not before:           Sun 19 Oct 2025 14:24:32 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.226.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:00:48:f3:fd:d6:33:a3:6b:49:6c:2c:ea:8a:b1:36:31:14:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 14:24:32 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=cf126f9ac23709d393a16d09144c7d94a075871e5e74a4d30fda2a16e95961e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:75:d2:73:21:89:8f:7c:06:03:6e:81:95:
                    46:bb:c0:ad:4a:38:d1:f8:77:32:0d:8f:76:c8:46:
                    94:f3:e6:21:c8:ef:ca:6b:91:30:e2:dd:b7:1d:f1:
                    73:55:17:77:14:d2:de:92:f8:08:2f:54:18:4d:fe:
                    2a:d8:70:a9:8a:4f:e2:64:bd:59:46:1a:96:59:66:
                    a6:69:2e:8f:da:18:eb:37:d1:3a:f5:45:e8:4d:e8:
                    d7:7f:9b:88:1a:37:97:4f:22:c7:7e:1f:1b:32:94:
                    7d:78:7a:7b:99:9c:bd:ba:1a:db:bd:cf:cd:1a:c6:
                    aa:79:de:24:7a:d8:d0:da:cb:3b:1e:ea:26:5d:0d:
                    f1:ff:d0:a1:98:3c:1e:2a:75:b1:3c:10:41:45:d4:
                    c6:6f:44:43:58:5f:ea:df:2c:e4:fa:34:43:33:fb:
                    70:38:45:c4:d7:77:a1:7d:cc:0d:e0:48:73:b2:82:
                    e5:62:39:93:51:44:f3:21:de:5b:32:1b:65:82:44:
                    de:37:f9:c6:80:68:c4:67:ca:a3:c4:bc:af:b8:b1:
                    5a:b9:86:30:88:5b:41:3d:fe:04:ce:30:74:4e:f4:
                    da:26:e1:4e:b9:1b:e6:8d:f2:fb:dc:ad:a4:25:81:
                    c0:ac:b4:e7:e9:74:42:81:2a:8e:71:21:46:f6:0f:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CD:39:25:CA:5D:60:42:F9:5D:98:F7:E1:DD:9B:0C:58:A6:67:2A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/746181a0-c968-4aea-995d-98383c6af55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.226.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:91:23:d5:2b:09:d0:37:f1:d6:d2:aa:ab:ae:53:15:11:44:
         1c:9c:e9:4f:00:e7:08:f9:dc:aa:97:09:50:ea:c1:28:b7:a2:
         07:36:a8:de:63:62:55:17:63:f2:26:05:81:05:14:3f:8e:be:
         51:7f:f9:57:a9:b6:25:de:b0:30:97:bc:fb:5a:9f:19:54:fa:
         11:6f:9c:06:fa:15:41:de:0d:5c:6b:6f:8c:d8:c1:ad:9a:0b:
         fb:b1:37:66:48:00:19:8b:30:a3:22:43:0c:25:0f:59:f6:3a:
         3d:4f:12:ce:25:2e:da:4e:86:a8:ba:f7:05:5a:b1:27:e7:7f:
         1d:d0:eb:e0:ec:53:6e:14:cc:7c:dc:2b:ae:18:6c:68:1e:9b:
         9f:cc:37:67:50:1f:2c:16:76:50:5d:a8:af:f5:e9:d0:67:ff:
         9e:14:7b:46:93:38:03:8d:ee:e5:d5:9c:db:c7:7c:8e:72:30:
         d9:f8:ea:9a:70:38:55:eb:c2:c6:b0:7a:a8:6d:62:9d:f8:4d:
         00:e5:03:22:00:53:8f:4d:bb:a4:a8:67:ba:17:51:24:17:c6:
         51:e4:96:4f:e0:7c:06:ee:53:18:eb:3c:92:e5:e4:9c:15:f0:
         2a:6b:ac:e7:53:3d:d4:07:f7:e1:10:5f:36:e5:79:aa:83:ca:
         3b:f8:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:43 2025 by rpki-client