Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79c2df87-c685-461f-a7cb-45de34944c51.roa
File:                     79c2df87-c685-461f-a7cb-45de34944c51.roa (raw, json)
Hash identifier:          Djzfdwfo060pdV3Z3cSH3wplYFJgcfOt/HXE7qwdKA0=
Subject key identifier:   B4:51:84:43:C4:8D:17:46:DE:A3:68:CB:59:12:29:7B:EF:EE:F5:42
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D8B7F158D5B1836BF7A1697AF1E938C000E79CD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79c2df87-c685-461f-a7cb-45de34944c51.roa
Signing time:             Sat 18 Oct 2025 21:00:14 +0000
ROA not before:           Sat 18 Oct 2025 21:00:14 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.165.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8b:7f:15:8d:5b:18:36:bf:7a:16:97:af:1e:93:8c:00:0e:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 21:00:14 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=5ff5c3a50db8aac7a20bf07c4b2efe7785e00af565eed25b8c864ca7977cc67b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:e1:ce:f2:f8:74:14:f2:dc:5a:05:49:17:
                    c7:7e:4f:95:b5:83:3c:dd:86:5b:97:7c:95:ec:05:
                    80:67:c9:1c:4e:b4:12:3c:76:1d:99:33:4a:41:70:
                    e1:a3:4a:be:77:ba:b4:f5:78:f9:0f:9b:9d:f2:8a:
                    40:82:e1:e4:f0:58:a1:53:de:f2:2e:04:f2:45:9f:
                    75:e5:81:fd:50:69:93:b4:31:5a:a6:43:cf:df:97:
                    9d:4d:69:8d:5f:30:ea:7d:30:a1:4a:93:66:01:aa:
                    4a:9f:58:ed:6d:22:a6:b3:46:1c:bf:60:f9:31:25:
                    0e:e3:2e:c6:f4:0b:a2:6c:fb:b7:0e:7d:07:78:0a:
                    3a:b1:f8:95:41:ba:ca:b2:16:b8:e9:cc:0a:24:74:
                    4d:72:13:c5:39:c6:38:31:28:13:fe:55:0e:f9:6e:
                    da:4c:f1:13:55:74:83:52:52:2c:74:c7:53:a5:4e:
                    66:12:19:7c:ec:29:e4:a8:9c:67:67:99:6c:e1:9c:
                    a4:3a:b3:0c:b5:97:a2:5e:1e:85:98:20:dc:36:92:
                    b1:1b:6f:d6:52:30:bb:0a:46:28:90:fe:87:1d:b3:
                    c3:61:cb:9b:75:63:9f:f4:78:35:42:f3:a2:97:11:
                    f4:d2:fa:d0:f4:42:55:c7:c4:38:28:b3:dc:d2:bc:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:51:84:43:C4:8D:17:46:DE:A3:68:CB:59:12:29:7B:EF:EE:F5:42
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79c2df87-c685-461f-a7cb-45de34944c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.165.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:82:7a:64:e2:22:87:26:6b:81:75:a4:11:d7:41:5a:b5:
         e4:9c:a8:35:f1:69:6b:b2:ee:bc:24:d0:83:f0:11:48:94:7a:
         23:f2:08:cd:39:50:1a:d7:72:bb:bb:41:66:79:0a:d5:da:3e:
         be:f9:e0:c3:4b:35:33:20:de:f6:3e:0f:80:18:ae:61:fc:21:
         9e:2f:e1:a4:46:91:71:5a:39:5d:55:e0:4a:8b:be:e8:e9:75:
         6e:12:db:13:4f:12:e6:21:f2:e9:a1:61:59:10:1b:ba:95:f8:
         92:51:93:ca:12:60:f2:bb:ac:35:ae:a6:e4:78:83:7b:fd:95:
         45:40:50:cd:24:86:f9:f7:9e:a2:a4:f4:ad:19:26:31:92:6d:
         e3:d4:7a:a6:bc:f6:37:48:7c:bd:35:7e:ea:a5:59:60:89:f3:
         9b:f0:19:5f:f5:7e:c4:16:f6:11:22:cc:03:b1:0e:36:91:f4:
         fe:9a:d2:a8:27:f1:f9:7d:d1:b1:71:33:80:2f:c5:ed:00:ad:
         55:eb:7c:dd:c0:12:3b:20:bb:21:ac:8d:8a:e9:31:5d:f6:29:
         bd:b2:c4:64:29:d7:a3:cb:17:03:c6:6c:6f:0a:7a:41:a5:da:
         8b:30:5a:6b:d4:bd:03:d8:26:61:4e:e6:82:b1:f1:27:25:63:
         a6:fb:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:00:28 2025 by rpki-client