Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e0bbb24-ac4f-49d9-99a3-cf86688758ca.roa
File:                     9e0bbb24-ac4f-49d9-99a3-cf86688758ca.roa (raw, json)
Hash identifier:          l3FIV6jIyOqAkZnc6H82Joxx35gvuauSP5fso/3EtiY=
Subject key identifier:   88:3F:74:9F:9F:15:72:4D:B1:B9:DA:9F:B4:E6:67:DB:0D:63:F3:59
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1411AF4611FA4B225A80CCEF44B278EB3A9C7D80
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e0bbb24-ac4f-49d9-99a3-cf86688758ca.roa
Signing time:             Sat 18 Oct 2025 18:43:52 +0000
ROA not before:           Sat 18 Oct 2025 18:43:52 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.249.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:af:46:11:fa:4b:22:5a:80:cc:ef:44:b2:78:eb:3a:9c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 18:43:52 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6a49c099c6bced7e7e0329734f26bafdaf3503faed61c4dfe002170d56029d83, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:c1:f8:76:fa:ba:ae:64:0a:ec:ef:51:5b:
                    25:72:58:ac:16:32:b0:27:74:bb:31:4e:35:f5:00:
                    f2:16:89:9b:c0:7b:cd:54:68:d4:e5:54:92:85:9b:
                    95:a6:33:a0:8b:48:db:47:6b:8a:79:0b:0b:c9:b9:
                    db:77:d5:47:c3:47:bb:81:77:79:8a:06:87:e7:57:
                    bc:e2:d5:f6:88:c3:9e:8a:9c:f5:49:d7:3d:56:1d:
                    87:6c:65:ec:01:a7:96:8e:f0:cb:77:e2:31:fd:03:
                    f8:9e:51:2d:5f:5e:9f:9e:6e:43:50:8d:9e:98:48:
                    ea:0c:22:f6:46:46:0d:6a:46:ff:8f:67:6a:62:12:
                    f6:ff:8a:bc:1b:91:42:7d:df:67:6d:6b:f8:ca:5d:
                    b9:5d:97:7b:f5:8b:b4:ad:c3:9d:a2:f1:da:9b:d0:
                    ec:04:d0:b3:c5:10:ca:15:b2:a2:d6:51:f6:00:b9:
                    aa:c1:c5:59:22:ec:4f:e8:32:d1:fa:e6:b8:ca:ed:
                    73:ce:87:2f:45:4b:43:65:0e:46:ae:f2:9f:3b:1e:
                    be:57:1a:d9:ec:e1:86:2b:4c:04:23:c4:71:f2:4f:
                    49:29:e2:9b:38:a7:e8:e5:a5:f7:39:7c:f4:2d:26:
                    aa:56:94:28:ac:92:ea:ac:1e:00:dc:4c:9d:ea:61:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:74:9F:9F:15:72:4D:B1:B9:DA:9F:B4:E6:67:DB:0D:63:F3:59
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e0bbb24-ac4f-49d9-99a3-cf86688758ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.249.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:81:97:13:c2:4d:fe:9f:59:0b:ff:4c:a4:d9:be:8d:04:28:
         c3:49:f7:d7:cc:f1:27:00:3d:04:8d:0d:d1:b5:21:44:9d:00:
         7c:08:ac:40:1c:1b:b7:df:7f:1a:ad:0c:7f:8c:9a:a9:9e:7f:
         c5:71:f3:6e:37:f4:f0:59:2c:6d:96:dd:82:6b:8e:53:1d:91:
         56:6d:57:c2:74:9c:d2:f9:f7:49:9c:13:bf:81:f5:d3:78:86:
         76:d8:63:7e:43:14:18:32:f7:76:94:c0:45:39:b3:ca:7d:c1:
         a7:68:f5:10:23:ef:71:be:d5:d7:7d:18:cb:a9:27:53:27:32:
         6e:d8:45:9d:28:8d:64:11:99:73:b8:c4:38:28:46:b2:5c:75:
         f4:3f:3f:df:ec:79:02:6f:8a:d0:0e:1a:bc:0c:72:d1:89:0b:
         43:01:74:95:cb:bf:4e:76:ab:ee:95:6e:db:ce:99:a2:b7:0c:
         60:e8:a7:91:ed:ab:dd:c2:3c:5a:f6:37:ca:6b:f6:51:7e:08:
         7d:f2:97:28:6e:51:0f:28:95:1f:49:75:69:52:7d:d1:70:be:
         ff:72:20:9c:7b:51:ce:10:20:ce:d8:ae:0f:59:3d:27:03:91:
         f9:c9:71:da:ca:38:20:66:1f:7a:79:25:17:d9:61:7a:62:5c:
         85:66:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:06:17 2025 by rpki-client