Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8760743-96f9-44ad-ae8f-ce2f9cc527d2.roa
File:                     a8760743-96f9-44ad-ae8f-ce2f9cc527d2.roa (raw, json)
Hash identifier:          pIrahAtCoPazhFt+RZFVoYCBegPWmIBEL3t9eVxCLjk=
Subject key identifier:   F1:F6:B1:DD:E8:9D:A2:20:70:37:D8:43:F4:70:98:0C:30:D5:D8:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6F4FD41F10B9F6EAD02CC0D2EA2826BB247E661C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8760743-96f9-44ad-ae8f-ce2f9cc527d2.roa
Signing time:             Thu 16 Oct 2025 00:22:15 +0000
ROA not before:           Thu 16 Oct 2025 00:22:15 +0000
ROA not after:            Thu 20 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:d4:1f:10:b9:f6:ea:d0:2c:c0:d2:ea:28:26:bb:24:7e:66:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 16 00:22:15 2025 GMT
            Not After : Nov 20 23:59:59 2025 GMT
        Subject: serialNumber=4ac51ddc21627e7a2ba30ad11d40866837f82680a70a16f84f10cc446a6e355c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1e:f3:e5:e5:fb:5f:1a:af:7e:db:b7:4e:ff:
                    e2:fd:86:83:37:02:55:5e:0c:b5:ec:40:c4:b9:3b:
                    b3:9c:82:92:91:9e:f2:00:06:78:5f:e1:2f:8d:6a:
                    e7:03:74:e0:3a:cc:ec:6b:6e:11:09:57:31:7e:02:
                    54:b0:61:1f:66:4f:c4:60:be:30:28:e6:98:df:ce:
                    ec:68:9c:c2:8c:82:90:35:ac:63:c0:16:02:4d:c4:
                    c9:ff:15:6c:bd:36:29:65:68:a8:dd:07:64:24:ff:
                    c0:34:b0:dd:06:c0:2a:84:d5:7a:bb:43:75:a5:09:
                    24:95:49:ea:5a:c4:b5:45:97:9f:de:e4:52:8b:ab:
                    7e:0b:d3:97:72:16:bb:ed:49:42:69:4a:1d:13:45:
                    52:c1:a0:09:42:b3:c8:15:d9:c2:00:21:8a:0a:21:
                    df:a3:95:e3:d1:2f:ec:93:52:b1:96:dd:70:c0:af:
                    75:12:67:74:1c:a2:6b:52:42:4b:be:9d:41:4e:c2:
                    26:25:c3:42:26:49:24:2c:fd:7d:91:fc:7a:ba:db:
                    b8:72:99:18:13:e3:19:a8:6f:f0:30:1e:af:64:02:
                    6f:58:33:01:5b:f5:31:1c:8b:f7:c2:42:fd:89:a4:
                    d0:21:7d:84:9f:f6:ed:15:7a:59:6c:3e:2e:10:c9:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:B1:DD:E8:9D:A2:20:70:37:D8:43:F4:70:98:0C:30:D5:D8:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8760743-96f9-44ad-ae8f-ce2f9cc527d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:a4:98:b0:0a:88:38:96:47:5d:58:9a:33:2a:d1:5e:fb:
         07:17:62:0e:d2:b2:4e:18:ae:4d:52:b4:fa:4d:8b:79:4a:ec:
         9b:de:91:ad:23:42:ac:12:f1:72:cf:01:c3:94:99:79:a9:4e:
         a2:34:4e:e4:ca:74:9f:25:9e:d3:ba:f7:7f:e4:4c:1e:11:ae:
         fd:96:f2:bd:22:af:1b:bc:6f:17:d6:98:76:fc:22:d6:49:62:
         17:f9:ec:25:20:c8:69:52:43:61:88:3d:88:85:bc:fd:c2:69:
         22:cb:49:2e:aa:93:9f:e8:de:0a:ba:97:f8:9d:c8:d4:57:8b:
         5c:f9:ed:24:43:42:37:22:67:e2:ec:76:7d:13:58:e9:fe:6d:
         ec:48:35:6f:37:f1:7c:d5:39:e1:fe:18:23:69:2a:f1:2f:fa:
         fd:f9:a0:32:51:ad:92:64:ba:85:30:26:fd:ba:cf:89:8c:b5:
         de:86:bc:18:01:a7:99:31:9c:74:94:0f:17:8f:05:62:c9:86:
         c5:8b:ec:58:65:1f:ef:de:4d:29:a2:b8:30:0e:dd:25:0d:d6:
         04:84:50:fc:6a:2d:d4:d0:32:d6:7f:63:cd:8b:2a:28:18:06:
         f0:d6:65:f8:ff:08:2b:55:a9:bc:d5:17:ad:9a:bd:12:db:b9:
         ae:e6:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:12:22 2025 by rpki-client