Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/872e5f55-aa93-474b-83bb-ac33fbbe5c75.roa
File:                     872e5f55-aa93-474b-83bb-ac33fbbe5c75.roa (raw, json)
Hash identifier:          N84kyRLO+4HXo5irAYoC9OySTstPl70Szx2uPlnA6PI=
Subject key identifier:   28:09:5D:BA:22:24:B5:A3:51:BB:24:2A:74:59:C3:F8:B5:3F:D6:16
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       08B900D6AE64A1C493587ED1B4F1A40DD8351CD3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/872e5f55-aa93-474b-83bb-ac33fbbe5c75.roa
Signing time:             Sun 19 Oct 2025 13:03:28 +0000
ROA not before:           Sun 19 Oct 2025 13:03:28 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:00:d6:ae:64:a1:c4:93:58:7e:d1:b4:f1:a4:0d:d8:35:1c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 13:03:28 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=288ae0c161ee2b9d714a4d7e00dc57982f75770c62c3e5c47ae3a45dd204ec68, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:19:41:c2:ca:19:bf:0a:5e:85:8f:8b:a0:
                    e1:56:8a:27:11:88:28:15:35:e4:ec:82:5b:4a:e1:
                    d0:d4:56:f1:c1:36:a4:88:b1:3a:53:3a:36:5d:ad:
                    16:9a:15:db:ee:15:d5:fb:1a:2b:aa:28:52:97:83:
                    e3:ab:c9:75:13:e5:aa:2e:45:e9:f5:d3:12:59:70:
                    4a:49:90:99:fe:5a:7d:a3:aa:ee:dc:09:dc:0a:86:
                    a8:ad:ea:29:9b:48:01:ad:17:e7:7e:51:5f:7a:93:
                    be:d7:03:22:53:c7:fb:08:9b:b6:33:17:a1:5c:6a:
                    e1:49:5d:16:aa:00:18:54:c1:66:09:f3:28:10:66:
                    1a:c2:94:08:43:b4:ad:c1:a8:1f:8b:68:a4:d9:bc:
                    7c:fc:66:fd:47:68:6a:e3:2b:dd:e1:83:be:03:99:
                    44:bf:dd:12:f7:69:1f:0c:64:a2:25:18:18:53:ab:
                    9d:f9:48:2e:0f:33:e5:d1:97:22:03:c9:f3:0c:8e:
                    63:10:72:8c:df:dd:fd:0e:7a:2f:7b:69:4f:79:ee:
                    8f:68:f6:6a:02:1d:b4:a9:71:c1:31:52:d4:cd:a7:
                    87:6e:6f:38:ac:2e:52:d1:40:a0:50:57:51:3b:34:
                    ab:5f:57:1c:c6:bb:6d:4b:12:7e:7c:ad:68:2c:18:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:09:5D:BA:22:24:B5:A3:51:BB:24:2A:74:59:C3:F8:B5:3F:D6:16
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/872e5f55-aa93-474b-83bb-ac33fbbe5c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:a1:a0:72:49:6e:8f:50:d7:59:95:4f:f2:fa:9b:9c:50:
         0e:51:f1:d5:b6:ef:37:74:71:be:81:aa:8d:df:32:ae:d5:9a:
         95:af:77:b1:4e:7f:49:05:76:6c:86:29:3b:9a:53:3a:68:9f:
         6d:1c:36:ee:b4:ad:77:99:5a:11:fe:e4:fb:da:66:af:17:35:
         f9:01:a6:e9:55:d5:08:7c:38:e2:00:50:db:b3:b6:0d:e5:70:
         ff:c8:57:dc:2b:9e:03:5a:29:89:c9:cf:89:91:73:b0:75:88:
         cc:d9:19:4a:ae:ec:88:dd:ed:40:9a:1f:57:c1:44:7b:e6:cc:
         33:79:8e:2a:61:2c:c7:c8:40:ca:8c:d7:f2:08:84:00:f1:34:
         32:19:49:57:b8:38:f8:4f:02:97:ea:ad:77:f8:be:30:51:c4:
         93:c0:97:c0:51:aa:68:c1:ed:ea:a5:d6:73:45:f0:64:34:01:
         29:fb:12:94:9f:01:3c:a0:bf:3a:9d:67:0d:4f:c1:18:da:a7:
         4c:b2:4c:58:1d:66:87:07:2f:63:04:b4:cf:e7:f4:c9:3e:a4:
         11:b9:c9:02:32:9f:97:8f:60:fe:4e:b6:c7:a1:ae:a2:c5:51:
         4e:4f:15:4b:0e:39:9d:2d:eb:e0:66:ae:7e:fd:9f:22:b5:5f:
         c8:82:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:59 2025 by rpki-client