Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f0b0d31-b1b7-4bc7-89fe-e30a1d2cdaee.roa
File:                     9f0b0d31-b1b7-4bc7-89fe-e30a1d2cdaee.roa (raw, json)
Hash identifier:          3zAK5qeuqHZBI6JFWvU1GBoP4VD7Xmi7YtjjNN4JZlM=
Subject key identifier:   9E:B4:46:B4:A8:5C:85:34:44:AD:B6:69:6D:B8:84:5A:CA:E0:20:45
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6CB515910D3C1ED6084566610B57DDC92192233B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f0b0d31-b1b7-4bc7-89fe-e30a1d2cdaee.roa
Signing time:             Sun 19 Oct 2025 14:51:28 +0000
ROA not before:           Sun 19 Oct 2025 14:51:28 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b5:15:91:0d:3c:1e:d6:08:45:66:61:0b:57:dd:c9:21:92:23:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 14:51:28 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d3a9847ca194fdc4973de583fc6e895f05c7b96d94283f7a77cb100b03dfcd6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:35:f0:7b:77:2b:0e:ae:79:f3:11:60:e0:
                    20:69:fe:21:60:0f:7c:74:04:df:77:80:ce:af:7c:
                    80:32:d5:3c:c1:6a:5d:0b:df:04:b0:fe:79:0f:42:
                    dd:df:db:28:26:84:48:be:a5:62:c3:9e:95:28:42:
                    b3:2c:22:16:83:d3:b2:ac:49:45:2b:22:b5:02:28:
                    ab:b2:61:7f:16:5b:4d:40:e2:1d:f2:d8:23:1b:1a:
                    84:b2:cb:08:ee:7e:98:86:ae:29:02:57:79:44:83:
                    e7:23:8a:84:c6:0c:1d:13:7d:11:81:25:fe:db:f8:
                    a4:ec:bb:0c:97:a1:1f:97:c7:a4:26:44:64:c3:ed:
                    17:81:87:26:c6:32:ec:0a:dc:99:58:1c:ec:eb:d9:
                    d1:98:e3:c1:e8:21:cd:ef:9b:4a:dc:55:f3:cf:a7:
                    a1:ca:0c:98:d5:4f:71:80:9e:f5:51:4d:a1:4a:b5:
                    bb:6c:2f:b1:30:43:5d:27:05:71:d3:b6:95:75:70:
                    93:2a:76:b7:28:1e:12:52:fd:ab:75:fd:a1:33:1d:
                    07:7e:eb:b2:c7:3c:b7:3a:69:63:50:a0:87:60:0e:
                    2f:fe:2e:08:dc:f3:02:e6:47:10:b9:6c:b5:e1:17:
                    e7:57:ea:30:2b:81:ab:94:9a:94:e8:22:54:24:f8:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:46:B4:A8:5C:85:34:44:AD:B6:69:6D:B8:84:5A:CA:E0:20:45
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f0b0d31-b1b7-4bc7-89fe-e30a1d2cdaee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:8d:a3:a8:3f:a3:ef:5a:9c:7a:ff:5d:d7:4a:b5:9d:b1:
         aa:f0:26:5d:b5:e8:29:7a:14:63:a3:89:3c:5c:ae:f9:53:9c:
         04:bc:21:3a:0f:dc:f2:38:08:3c:e3:ad:70:44:09:f6:08:bf:
         18:ec:dd:86:91:74:d5:12:24:98:19:47:98:3a:77:a3:82:c8:
         61:28:1b:e1:41:e7:32:12:c1:86:91:e9:35:ad:5d:cc:f3:4f:
         c3:c4:a5:a1:78:3e:ce:de:01:a2:9a:ba:af:a3:87:81:1f:bf:
         58:e0:92:bf:0d:24:94:1a:5a:ca:59:c8:eb:3f:cd:cd:2d:c0:
         15:d1:02:08:cd:80:65:f5:a4:61:7c:89:2b:55:5c:fa:0f:65:
         09:ac:57:91:23:c0:98:fc:ed:09:7f:7b:7b:16:5e:4f:4c:3c:
         3f:5b:9c:a8:a9:17:93:e3:3d:cc:43:c2:c9:32:24:c0:28:b9:
         ab:e9:0e:51:c9:a8:32:db:f3:93:cf:20:3b:0e:a4:a6:be:e2:
         42:0a:5c:97:59:4f:cc:f4:d6:0c:a9:ae:a0:d3:33:35:e4:59:
         14:e7:3f:7e:58:c6:9a:3a:ae:5e:ed:35:4f:be:52:56:7c:27:
         81:8b:47:af:c7:35:33:94:ac:81:b6:95:24:d0:95:06:e0:4b:
         e8:71:3b:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbLUVkQ08HtYIRWZhC1fdySGSIzswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQ1MTI4WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkM2E5ODQ3Y2ExOTRmZGM0OTczZGU1ODNmYzZlODk1ZjA1
YzdiOTZkOTQyODNmN2E3N2NiMTAwYjAzZGZjZDZlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUTTXwe3crDq558xFg4CBp/iFgD3x0BN93gM6vfIAy1TzB
al0L3wSw/nkPQt3f2ygmhEi+pWLDnpUoQrMsIhaD07KsSUUrIrUCKKuyYX8WW01A
4h3y2CMbGoSyywjufpiGrikCV3lEg+cjioTGDB0TfRGBJf7b+KTsuwyXoR+Xx6Qm
RGTD7ReBhybGMuwK3JlYHOzr2dGY48HoIc3vm0rcVfPPp6HKDJjVT3GAnvVRTaFK
tbtsL7EwQ10nBXHTtpV1cJMqdrcoHhJS/at1/aEzHQd+67LHPLc6aWNQoIdgDi/+
Lgjc8wLmRxC5bLXhF+dX6jArgauUmpToIlQk+IgtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnrRGtKhchTRErbZpbbiEWsrgIEUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlmMGIwZDMxLWIxYjctNGJjNy04OWZlLWUzMGExZDJjZGFlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASQaIwDQYJKoZIhvcNAQELBQADggEBAFn/jaOoP6PvWpx6/13XSrWdsarw
Jl216Cl6FGOjiTxcrvlTnAS8IToP3PI4CDzjrXBECfYIvxjs3YaRdNUSJJgZR5g6
d6OCyGEoG+FB5zISwYaR6TWtXczzT8PEpaF4Ps7eAaKauq+jh4Efv1jgkr8NJJQa
WspZyOs/zc0twBXRAgjNgGX1pGF8iStVXPoPZQmsV5EjwJj87Ql/e3sWXk9MPD9b
nKipF5PjPcxDwskyJMAouavpDlHJqDLb85PPIDsOpKa+4kIKXJdZT8z01gyprqDT
MzXkWRTnP35Yxpo6rl7tNU++UlZ8J4GLR6/HNTOUrIG2lSTQlQbgS+hxOwA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:49:18 2025 by rpki-client