Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d886c0b5-29b9-4c0a-a7d7-71cea5ca7350.roa
File:                     d886c0b5-29b9-4c0a-a7d7-71cea5ca7350.roa (raw, json)
Hash identifier:          JucegCnSFF2SzPmb94REyPhZSB4QgQ3ip1pDz577zpQ=
Subject key identifier:   1A:9E:CB:AA:5B:9D:80:97:A5:C6:11:29:C8:70:A3:76:26:96:F2:5E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3EF07EEA9C90AF6DAFFD926CC329A4A99458CBDA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d886c0b5-29b9-4c0a-a7d7-71cea5ca7350.roa
Signing time:             Sat 18 Oct 2025 20:30:19 +0000
ROA not before:           Sat 18 Oct 2025 20:30:19 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.244.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:7e:ea:9c:90:af:6d:af:fd:92:6c:c3:29:a4:a9:94:58:cb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 20:30:19 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9b0513e7e7a38a23577b5867dc08648b0256a20b9d3a83615b458060419a3aa4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:c8:22:ad:f4:c0:a7:22:25:f7:22:6c:95:
                    4b:24:b3:5a:39:d1:31:8c:5c:11:5c:5f:bd:4c:bf:
                    8b:b3:52:ab:66:35:0b:18:7e:7e:31:d7:a6:66:5d:
                    1e:6b:35:36:41:67:1d:b3:90:81:50:ae:9f:07:aa:
                    d7:e9:b6:a8:9b:41:b2:58:79:5d:a4:6d:d6:7a:09:
                    d3:ae:52:c0:c4:86:3f:e9:de:29:13:ea:a7:7d:c9:
                    30:4c:c6:9d:22:e8:26:23:5e:51:c4:59:c4:bd:3d:
                    91:88:2c:47:24:3d:a4:66:3b:59:ae:10:21:b9:67:
                    45:87:13:81:d6:81:9b:e3:40:a7:b9:f2:6b:c0:5a:
                    62:fc:54:df:43:17:50:d2:14:60:4e:26:f4:30:0e:
                    7d:d2:71:ec:a0:df:5b:31:a3:92:e4:e0:8c:a9:4f:
                    bb:7c:56:6b:8f:9d:bb:9b:64:25:43:64:95:fc:e1:
                    aa:5c:0e:ad:fa:f2:96:72:af:30:b2:1f:87:91:71:
                    77:91:5c:c3:a5:95:56:04:0c:21:08:45:ab:e7:7e:
                    0d:ad:61:92:ec:6f:6a:ac:2b:5c:75:65:18:0a:f4:
                    28:f1:a3:ac:34:a7:09:c3:3f:e1:65:b3:8d:b2:b4:
                    00:1f:fe:91:b0:19:86:7d:39:4e:32:de:b9:7b:f1:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:CB:AA:5B:9D:80:97:A5:C6:11:29:C8:70:A3:76:26:96:F2:5E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d886c0b5-29b9-4c0a-a7d7-71cea5ca7350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.244.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:42:8a:94:c0:fb:a9:00:bc:f7:95:be:fe:ed:2d:ca:79:8f:
         2a:e1:57:98:6a:e1:74:84:64:d1:21:9a:2d:dd:a4:7c:f7:75:
         23:ed:62:1f:db:0f:a8:78:e3:d3:39:13:a5:f0:2c:10:df:3a:
         25:47:1e:32:14:bd:f3:7d:c5:62:a3:6e:59:bc:0b:92:b3:c9:
         7b:1c:a9:da:ca:1f:15:ca:5c:96:9f:a2:eb:8d:56:7b:99:ad:
         1b:aa:74:17:76:17:5d:66:66:1c:3c:50:81:24:7d:db:cd:68:
         b0:87:4a:b9:64:af:27:ee:8b:1d:06:9b:7f:c6:99:68:65:ff:
         8a:f5:5b:e0:96:fe:a2:03:f7:e4:f5:fb:7b:bc:f4:53:e4:f3:
         d2:35:04:19:2d:eb:9e:b7:24:a0:c5:ff:05:be:0b:05:c9:32:
         24:a1:f1:df:af:af:6f:ba:99:4d:8d:76:80:8b:43:74:27:06:
         fb:48:de:ec:64:bb:f2:6b:ed:28:0c:ad:41:20:8c:4b:b4:32:
         21:fb:d5:fc:24:aa:03:73:40:b6:c6:0f:54:bd:42:69:a2:c3:
         e6:41:48:04:e1:23:aa:50:b9:91:a7:ea:4f:1f:cb:0c:f4:44:
         d1:52:06:bd:cd:16:4b:37:c5:ab:66:33:42:a2:e3:0e:1f:10:
         c0:ce:fa:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPvB+6pyQr22v/ZJswymkqZRYy9owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMDE5WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjA1MTNlN2U3YTM4YTIzNTc3YjU4NjdkYzA4NjQ4YjAy
NTZhMjBiOWQzYTgzNjE1YjQ1ODA2MDQxOWEzYWE0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC94cgirfTApyIl9yJslUsks1o50TGMXBFcX71Mv4uzUqtm
NQsYfn4x16ZmXR5rNTZBZx2zkIFQrp8HqtfptqibQbJYeV2kbdZ6CdOuUsDEhj/p
3ikT6qd9yTBMxp0i6CYjXlHEWcS9PZGILEckPaRmO1muECG5Z0WHE4HWgZvjQKe5
8mvAWmL8VN9DF1DSFGBOJvQwDn3Sceyg31sxo5Lk4IypT7t8VmuPnbubZCVDZJX8
4apcDq368pZyrzCyH4eRcXeRXMOllVYEDCEIRavnfg2tYZLsb2qsK1x1ZRgK9Cjx
o6w0pwnDP+Fls42ytAAf/pGwGYZ9OU4y3rl78XSzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGp7LqludgJelxhEpyHCjdiaW8l4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q4ODZjMGI1LTI5YjktNGMwYS1hN2Q3LTcxY2VhNWNhNzM1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAS9K8wDQYJKoZIhvcNAQELBQADggEBACJCipTA+6kAvPeVvv7tLcp5jyrh
V5hq4XSEZNEhmi3dpHz3dSPtYh/bD6h449M5E6XwLBDfOiVHHjIUvfN9xWKjblm8
C5KzyXscqdrKHxXKXJafouuNVnuZrRuqdBd2F11mZhw8UIEkfdvNaLCHSrlkryfu
ix0Gm3/GmWhl/4r1W+CW/qID9+T1+3u89FPk89I1BBkt6563JKDF/wW+CwXJMiSh
8d+vr2+6mU2NdoCLQ3QnBvtI3uxku/Jr7SgMrUEgjEu0MiH71fwkqgNzQLbGD1S9
Qmmiw+ZBSAThI6pQuZGn6k8fywz0RNFSBr3NFks3xatmM0Ki4w4fEMDO+kM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:57:52 2025 by rpki-client