Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880e0d8a-e075-4725-b3d0-6a5ce8fefea0.roa
File:                     880e0d8a-e075-4725-b3d0-6a5ce8fefea0.roa (raw, json)
Hash identifier:          1WiaUrAiwWpQ8981KNQdvNN/f7vfw1NsllqlL26/Bes=
Subject key identifier:   D2:38:D5:67:73:E7:EA:99:B2:15:0A:29:3A:F8:B8:D2:BA:3E:1F:F6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       38EB7A815FA9C2ABD565F16CC663CC806FD84DA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880e0d8a-e075-4725-b3d0-6a5ce8fefea0.roa
Signing time:             Sun 19 Oct 2025 04:40:12 +0000
ROA not before:           Sun 19 Oct 2025 04:40:12 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:eb:7a:81:5f:a9:c2:ab:d5:65:f1:6c:c6:63:cc:80:6f:d8:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 04:40:12 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=6b70598b9faf4908c4f525a597ca962f7f1e199faf5252b488ff9c82839d4d14, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:65:13:29:3b:19:5d:fe:58:e9:11:9b:fb:
                    08:9a:a3:5a:cd:88:f5:42:5d:08:a5:9a:31:03:80:
                    dc:26:6a:fb:37:42:07:94:80:5b:76:06:34:6e:26:
                    9a:bd:10:28:87:72:a7:2f:9c:19:da:c8:7c:ce:7c:
                    18:a0:05:36:13:99:01:2d:05:4d:2d:9e:56:7f:54:
                    fd:c5:f5:bc:7e:9b:d8:cd:3a:8b:91:65:98:86:3a:
                    28:f8:5d:bb:a3:17:6a:ee:49:27:ec:5a:fe:71:cb:
                    b6:ab:0b:68:78:a6:3f:a8:62:4e:b8:e0:46:07:77:
                    38:42:af:ff:eb:af:6b:47:99:85:e7:f6:fd:b7:f4:
                    0c:49:9d:5d:58:05:f3:dc:7c:24:dd:69:2a:4a:fb:
                    fe:0d:a0:9f:37:0c:cf:9b:cf:e6:69:0a:f9:ab:33:
                    5c:2c:b8:3a:15:b7:6b:ab:96:75:ea:ed:91:5a:5b:
                    7f:d4:43:a4:0e:67:73:54:14:e1:b4:d6:84:c2:7b:
                    02:80:24:32:ac:33:1d:28:dd:e9:be:95:a9:ba:ed:
                    78:de:c5:4f:04:35:80:ef:d1:df:ff:9c:06:00:03:
                    69:da:60:19:81:12:b3:c3:93:de:7c:53:d9:b3:13:
                    5f:2e:70:ea:b6:2f:2b:d9:15:20:e4:82:7b:7d:94:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:D5:67:73:E7:EA:99:B2:15:0A:29:3A:F8:B8:D2:BA:3E:1F:F6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880e0d8a-e075-4725-b3d0-6a5ce8fefea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:a1:9a:18:52:96:4b:81:ff:23:91:6d:66:fb:6d:1d:05:
         12:0c:b3:3c:63:fd:b8:39:4b:aa:27:bc:55:f5:21:ea:0e:af:
         67:f9:4a:1f:5e:61:0b:88:b6:0c:2e:da:e0:49:6c:02:fc:f0:
         67:dc:74:d1:5b:e3:08:1c:aa:7c:a2:e7:92:ec:ad:c1:e1:83:
         ff:99:dd:79:92:83:86:81:97:c6:ad:90:42:ef:d1:b4:41:a8:
         93:9c:60:cb:e2:cf:b8:1a:b0:5e:fd:64:55:14:49:cc:a4:03:
         52:47:c0:f9:a5:9a:b5:44:f1:94:79:5b:f4:c6:35:0f:73:88:
         5d:1c:3d:3d:3f:4b:fa:a6:77:c5:00:39:5b:2e:aa:ea:99:d0:
         18:75:f3:6a:7b:fe:12:48:58:cb:7b:b0:2d:27:8d:04:14:2a:
         bc:ff:65:59:0a:f0:f1:9c:69:9a:99:82:3c:cf:c2:0b:29:6d:
         0e:38:17:1b:16:91:44:d2:47:8c:7e:d1:8d:fb:f1:9b:41:6c:
         c2:a7:bc:29:35:17:51:77:4d:48:30:b8:61:a1:43:7b:11:8a:
         8d:81:9e:91:cd:01:f1:6e:64:73:80:5c:81:ee:fe:34:f2:3b:
         3e:b3:e6:77:35:2d:20:9f:6f:50:f9:ac:20:0e:6e:bf:1b:a9:
         0e:b7:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:14 2025 by rpki-client