Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf652b35-21d7-4c43-bf77-ecd9b8d0b284.roa
File:                     cf652b35-21d7-4c43-bf77-ecd9b8d0b284.roa (raw, json)
Hash identifier:          /b4PV5HlxZZWbWjxRHYebizMlZ5ac/wOKlkidqqoIqg=
Subject key identifier:   CE:E7:6B:26:5A:B8:BB:1D:E0:08:DC:7C:04:A5:87:8F:C4:D2:C7:C6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       490E79EF6CAA4B48626FCDE76303D27D3B8563DD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf652b35-21d7-4c43-bf77-ecd9b8d0b284.roa
Signing time:             Sat 18 Oct 2025 07:00:13 +0000
ROA not before:           Sat 18 Oct 2025 07:00:13 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.238.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:79:ef:6c:aa:4b:48:62:6f:cd:e7:63:03:d2:7d:3b:85:63:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 07:00:13 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=0c2478d11582c98854779b8979b809f23f0eda116a7bb70e039fc518ea781d2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:43:40:58:5c:de:4a:25:af:f6:ee:95:2a:
                    47:6b:98:d3:57:5c:e1:f3:52:a3:49:9e:f8:b9:7d:
                    e0:54:1d:41:4e:ad:e5:75:e1:ca:e2:c2:fc:e4:96:
                    fa:66:5f:80:61:ca:8e:90:e7:d6:ea:c6:9f:30:c9:
                    a8:d3:51:2c:4d:7b:86:67:60:a3:71:23:57:94:b9:
                    fe:1a:2f:51:1c:cb:ef:0e:9b:01:66:4e:22:9b:8b:
                    13:64:e5:04:d8:21:70:d6:cf:33:5b:a8:13:3d:38:
                    4c:8c:e5:0f:48:63:40:3f:91:5e:36:f9:8a:1e:8b:
                    9f:a9:97:d5:f8:dd:6b:c5:ec:24:75:15:3b:33:fe:
                    c8:2b:c3:1c:e2:24:07:22:c8:e6:1a:18:ea:a3:3e:
                    34:4e:69:90:f7:62:bd:3d:e8:ef:3a:c5:da:d8:f8:
                    3d:cf:8a:e5:cd:c9:07:27:a7:fe:c0:95:b9:5b:80:
                    a1:4a:e2:bf:f0:f0:ae:0e:f9:1d:a0:85:f0:5b:4f:
                    07:a5:b5:97:bc:1a:7c:6a:98:bf:e6:03:31:61:a6:
                    11:19:5c:68:f1:49:66:0a:fb:69:06:6e:f3:08:f0:
                    87:42:30:46:20:a9:af:02:2d:69:2c:dc:9e:4c:46:
                    1d:0d:70:fa:4e:90:84:44:a8:20:b6:cb:16:65:34:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:6B:26:5A:B8:BB:1D:E0:08:DC:7C:04:A5:87:8F:C4:D2:C7:C6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf652b35-21d7-4c43-bf77-ecd9b8d0b284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:ea:5d:9c:88:83:7d:cc:67:e1:00:fd:9b:5f:4c:70:8d:
         b8:5a:ee:12:5c:f8:c2:ee:8b:57:c7:2e:cd:a6:23:62:b0:8a:
         ac:99:ea:24:80:bc:2e:7c:c0:b2:0f:27:29:1e:aa:17:55:fb:
         01:ac:65:4b:71:23:51:80:91:63:07:5c:2c:97:3e:a8:ab:cb:
         5a:14:be:75:38:2e:ba:64:8f:40:de:e1:db:f2:9b:84:b4:98:
         f7:54:52:8a:76:9e:6e:8f:9e:d4:72:90:ca:35:1b:1c:fc:0e:
         ed:e7:0c:36:4f:ff:e4:2d:a7:88:63:0b:ca:a9:c2:15:77:5e:
         41:8d:bf:87:e4:b3:4d:2f:80:fc:fd:6a:81:fd:1e:af:f8:0c:
         70:56:65:7a:57:85:2b:4a:fd:39:39:9e:ec:44:15:5b:fa:02:
         66:2f:88:70:24:6f:b5:04:a8:93:1e:d2:3b:ed:fd:f0:18:46:
         a4:34:7c:c6:f4:48:eb:4c:1e:35:c0:e2:4a:74:72:a6:ad:92:
         77:5b:5b:0a:3d:a7:61:e9:e3:16:03:0d:cf:74:7c:ca:5f:09:
         8a:63:af:d2:bb:29:ac:b0:24:cd:23:1a:50:fa:91:63:4d:fd:
         44:31:65:32:7d:d1:83:50:7b:10:b3:27:82:15:1e:70:47:21:
         8b:3b:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:55:38 2025 by rpki-client