Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4a08d6-0c4c-4774-9f67-8cc9b5f981c6.roa
File:                     8e4a08d6-0c4c-4774-9f67-8cc9b5f981c6.roa (raw, json)
Hash identifier:          E7Dark8IF2iCL0rIZcFCYeNbHouAou/yqyspuw3mFps=
Subject key identifier:   4C:E4:0D:1B:43:FF:6F:0C:FB:1A:4F:7D:84:44:AE:CB:94:B0:43:98
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4166BA54F41BD711B8EB37E1D8B460B227C10003
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4a08d6-0c4c-4774-9f67-8cc9b5f981c6.roa
Signing time:             Sat 18 Oct 2025 14:31:40 +0000
ROA not before:           Sat 18 Oct 2025 14:31:40 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.161.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:66:ba:54:f4:1b:d7:11:b8:eb:37:e1:d8:b4:60:b2:27:c1:00:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 14:31:40 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=34d14846821155c953ff3f9a64850ca5c73a9c4ad8159d7aeb3c2d8b08427e9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:6d:59:13:ef:ae:e7:2d:2c:bd:86:9a:e2:
                    f1:71:64:09:bf:8e:0d:93:4a:4a:b2:74:64:81:c0:
                    50:87:ce:8f:ed:e0:68:3b:cd:d8:3b:c1:7d:2a:54:
                    b8:4c:53:d5:46:ee:de:28:8b:46:1b:f6:da:c1:94:
                    b2:ca:76:f0:32:0a:73:d5:bb:37:e6:c3:2e:35:d5:
                    23:6b:dc:92:99:85:3a:19:f4:d4:02:b7:2a:3f:92:
                    bc:42:9f:e5:27:f0:91:46:f6:8a:82:d2:6f:3b:dc:
                    37:d7:25:f6:04:30:a1:15:f8:0d:73:22:df:fa:34:
                    8a:7a:6f:2b:77:12:41:83:f7:ea:24:90:86:2e:14:
                    58:ef:e3:cf:02:f2:ab:1f:e1:31:75:77:60:73:e6:
                    25:41:3f:9a:8e:bd:ae:94:c1:a5:66:4d:39:20:2b:
                    ca:70:29:8f:93:f0:b7:ae:57:8f:8b:7d:85:e8:9c:
                    b5:6f:04:56:84:2f:56:6a:b0:98:dc:66:f7:68:00:
                    91:d8:f0:79:ea:1f:52:37:63:30:d1:4b:2d:33:dd:
                    cf:0c:30:f5:93:4a:09:b8:15:5e:2f:8e:fa:aa:3b:
                    7b:73:e7:ea:95:ce:b0:95:85:e9:32:0c:87:b6:6a:
                    71:c0:ef:da:19:c6:54:34:8b:04:b8:7d:a7:b8:eb:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:0D:1B:43:FF:6F:0C:FB:1A:4F:7D:84:44:AE:CB:94:B0:43:98
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4a08d6-0c4c-4774-9f67-8cc9b5f981c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.161.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:bc:1c:c3:e3:58:ab:aa:ca:71:71:fd:43:f9:9a:ab:b1:
         cc:bb:18:a6:a2:f7:f1:f5:2e:9c:0b:40:50:04:36:46:8f:f8:
         1d:1e:9b:b5:dd:a5:73:81:56:56:06:67:0c:2f:75:a1:f3:70:
         8b:67:87:df:1e:ff:40:c4:c4:84:1e:3a:4b:85:5c:2f:e4:56:
         94:74:17:b1:54:9b:62:ac:e8:07:45:87:5c:87:d9:82:a6:65:
         df:eb:1a:63:11:41:aa:84:02:9b:30:32:ae:d2:db:d8:56:28:
         6c:af:69:53:4d:42:4c:85:30:df:7b:3c:5a:97:15:ca:e5:2d:
         a7:74:4d:12:31:4e:3a:bb:92:da:29:ea:7b:12:ea:78:b1:21:
         b2:39:b1:c8:c3:f8:e7:e8:75:2d:72:d2:91:66:93:7c:8f:dd:
         0c:4a:71:5f:01:ba:5a:a6:1b:17:ba:15:d7:85:fb:a4:03:c3:
         20:5d:e9:45:4e:ef:ef:a6:12:e3:22:be:8b:c5:64:27:76:ad:
         f8:59:c1:b6:84:b8:5d:16:83:3d:39:dc:b0:17:e2:16:c0:71:
         b2:93:51:83:68:b2:b6:cd:1b:f9:df:72:01:99:a1:c3:e4:66:
         a0:14:aa:83:42:44:b7:fa:82:1b:ac:11:59:30:8f:07:2a:9b:
         c8:60:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:21:51 2025 by rpki-client