Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93526e06-4e38-46fb-b3b0-1c8833a428de.roa
File:                     93526e06-4e38-46fb-b3b0-1c8833a428de.roa (raw, json)
Hash identifier:          OgcCfptwv6IVtAenWtTqCN/rSgInGrRMHpw0X/FdM2A=
Subject key identifier:   8E:15:01:2B:71:7F:B4:37:10:E1:B6:13:5B:70:4A:36:F3:84:DC:7D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D7F114F8B22396C361691B4BA9DB4B83388FDF1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93526e06-4e38-46fb-b3b0-1c8833a428de.roa
Signing time:             Sun 19 Oct 2025 22:53:38 +0000
ROA not before:           Sun 19 Oct 2025 22:53:38 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.66.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:11:4f:8b:22:39:6c:36:16:91:b4:ba:9d:b4:b8:33:88:fd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 22:53:38 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=8c8ef5dc7bb17216a4cd3ec811e3da4e0f4c48622982d2b275dbbeaa2a3bd0b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6d:f2:4a:cf:e6:9a:1d:32:a7:2e:34:9f:e0:
                    05:cd:08:ee:e5:26:03:ee:8d:bc:70:90:6a:69:b5:
                    a5:29:b6:19:32:11:d8:e1:7d:33:c1:ce:d7:cd:34:
                    95:1c:e1:1c:87:44:17:8b:69:1e:b5:47:db:5f:73:
                    2c:e6:70:b5:0e:5c:b3:69:c0:6a:c9:20:1d:82:a8:
                    6c:31:f9:c6:b0:3e:ea:ca:f9:79:40:f8:b8:91:db:
                    63:1c:04:16:d2:0c:06:6a:da:a7:f6:fe:67:b3:db:
                    0a:ed:79:c7:94:34:9a:2d:30:ea:23:d9:3a:df:70:
                    8f:04:d8:ab:53:98:f8:7f:cd:59:eb:ee:52:fe:43:
                    e9:11:4e:f3:1e:9f:c1:ee:10:08:a1:5c:40:40:0c:
                    9e:53:ff:78:e2:05:33:79:26:76:a7:ef:a6:da:d8:
                    c3:bd:36:a8:12:66:5a:2e:02:40:31:1a:aa:b6:29:
                    f8:7a:2b:94:d2:53:dd:e3:57:d3:ef:1b:69:ed:f4:
                    6a:3d:68:be:5f:f5:c5:80:54:d7:35:88:49:c9:39:
                    b7:fe:19:df:f9:48:80:c1:91:6d:9f:b2:70:d0:4a:
                    5f:8f:88:f0:b4:b7:c7:f4:6c:72:f9:91:81:a9:c7:
                    e9:b4:09:9b:d5:0e:55:f8:88:d4:5a:9a:91:d4:d7:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:01:2B:71:7F:B4:37:10:E1:B6:13:5B:70:4A:36:F3:84:DC:7D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93526e06-4e38-46fb-b3b0-1c8833a428de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.66.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:47:17:2c:0a:83:ab:3f:1a:c5:51:17:32:45:02:cb:1b:72:
         52:fd:94:b7:44:2e:c6:ec:63:b9:27:50:63:d8:53:26:8b:f6:
         06:d3:34:55:03:61:5b:f3:06:f1:f5:45:4b:ef:22:70:81:a8:
         01:2c:8d:39:93:38:27:7b:c3:0a:03:41:fc:77:13:3c:07:e6:
         28:d6:70:0e:4a:66:67:3a:ab:62:5d:be:bc:8f:00:09:1e:7f:
         0a:25:e9:ad:fd:86:81:6f:5c:8d:a6:96:10:ec:e6:f0:fd:c1:
         5d:82:06:4e:7e:9a:51:fc:fe:b8:f2:ba:17:e2:94:c4:eb:98:
         8d:5f:a6:d5:fa:ec:07:24:cc:b9:4e:75:3d:b5:0b:42:84:bc:
         40:da:1d:06:2a:a9:05:f0:72:18:c8:22:39:10:17:fe:be:a1:
         53:25:ad:3d:3d:60:f6:5a:37:6d:19:8a:77:77:de:ec:22:c1:
         6f:82:ec:de:9d:de:e4:8c:0d:31:23:0b:a0:ed:05:7a:32:15:
         8d:26:75:27:87:53:09:9b:d3:69:69:43:9e:ba:ab:b4:0a:6b:
         22:2f:fa:ee:89:25:77:26:be:24:b6:68:ed:05:79:99:9b:7b:
         80:65:79:98:d5:6d:b5:48:31:6d:53:a2:ee:58:02:7c:9c:be:
         70:a8:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:49:02 2025 by rpki-client