Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/850832b7-b681-488a-96c6-d80ec674a936.roa
File:                     850832b7-b681-488a-96c6-d80ec674a936.roa (raw, json)
Hash identifier:          kBCtn+MKHjQ1P1gZT4wEkB8CXShHnJy+MBefAMyHxIs=
Subject key identifier:   39:91:48:D6:83:AE:8B:D4:7A:73:D2:5B:76:33:35:B1:72:62:4F:A9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       093FE670B63EA5E53BC445497D6A3BDF0C05AD82
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/850832b7-b681-488a-96c6-d80ec674a936.roa
Signing time:             Sat 18 Oct 2025 21:41:20 +0000
ROA not before:           Sat 18 Oct 2025 21:41:20 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.155.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:e6:70:b6:3e:a5:e5:3b:c4:45:49:7d:6a:3b:df:0c:05:ad:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 21:41:20 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6f48fb19bf315c5f10d12828ea2d214e06e77912b501a7b9291a26ec5a4a3c05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7d:3c:a3:2b:b1:35:1e:90:c7:c1:f6:35:a3:
                    50:cd:47:e9:10:10:0e:6d:10:c1:61:ae:40:a2:11:
                    1c:6f:54:6c:20:16:6c:7e:0c:dd:df:18:7b:58:b2:
                    88:a2:99:47:5b:cb:09:e1:a0:92:2e:f9:c8:e8:4c:
                    32:05:68:f1:ef:75:28:c2:da:8f:cc:39:d3:55:af:
                    83:5e:68:96:8a:66:5b:26:8d:7b:6a:05:8f:53:c0:
                    e5:83:41:23:45:fe:ab:68:81:07:81:e1:dc:3c:d4:
                    99:33:6f:17:a7:66:e9:72:30:96:7d:54:a3:59:8e:
                    5f:f7:cf:26:b5:40:1a:21:a2:c5:78:4a:b4:3c:e5:
                    02:a7:42:c2:6e:fe:cd:78:ed:3a:80:df:86:21:49:
                    4d:d6:0d:42:82:23:6b:ca:c5:2a:58:c2:49:63:0c:
                    aa:c1:a2:46:94:0f:7c:02:78:4f:f9:67:31:c7:f5:
                    cc:ae:e1:fa:fb:6e:10:21:79:9f:28:fd:01:96:cd:
                    e2:f0:ca:0b:37:70:65:89:94:f0:49:17:7b:cc:a4:
                    21:fc:b0:57:b9:e5:68:8a:db:ba:66:fb:c7:8c:d9:
                    ec:b4:a9:5a:db:b9:b7:e6:45:87:00:e4:4f:d3:2f:
                    cf:d9:2f:5d:11:40:93:c7:dd:3f:0f:71:eb:57:d3:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:48:D6:83:AE:8B:D4:7A:73:D2:5B:76:33:35:B1:72:62:4F:A9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/850832b7-b681-488a-96c6-d80ec674a936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.155.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:4c:73:bb:0f:97:21:48:bd:e0:03:8b:91:2c:5f:48:c1:
         5e:50:8e:6a:3d:ec:26:d0:ec:c2:a5:fc:d9:16:c7:4b:d1:0f:
         b2:61:9d:59:9f:21:4c:62:c5:c8:e6:31:02:c7:4c:8f:d8:2a:
         44:31:16:28:1f:46:77:6c:02:a5:0a:4f:59:29:6b:78:cc:f7:
         fd:df:51:6d:b9:f6:41:fc:18:9c:7e:3e:90:9a:31:e2:f4:fd:
         d7:b3:fc:73:c5:e3:57:80:15:de:54:2d:dc:37:3c:2d:7d:53:
         61:86:e5:86:61:11:9a:4f:57:5a:d5:c7:25:55:84:a4:98:b6:
         46:ca:ea:56:ef:f0:6f:2b:fa:02:a2:d1:d6:dc:88:82:ea:f1:
         2c:15:d0:e9:d8:2d:e3:2d:bc:f2:63:6e:fe:6e:5d:57:f4:a8:
         c7:4f:83:37:49:e0:49:a1:40:86:e3:67:76:19:cc:bf:98:b9:
         bd:77:9f:f2:a3:c4:ea:88:b8:f1:d9:82:38:00:3d:e1:5c:fb:
         8f:19:c6:bf:a3:02:40:5f:87:02:6c:49:3d:0a:33:a9:0f:af:
         39:e9:8f:7f:68:a9:1a:bd:05:60:3e:e7:5b:c3:0b:fa:f7:5f:
         f0:e3:91:57:d5:b5:83:16:52:dd:6b:ea:0f:bb:c3:3b:37:73:
         3c:ec:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:41 2025 by rpki-client