Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2beda0a-1e63-4329-8e29-f871d05cdb67.roa
File:                     e2beda0a-1e63-4329-8e29-f871d05cdb67.roa (raw, json)
Hash identifier:          ejqzAFO/UBnLhQn4LA/slv4LDkYIx060Wtkn3dLkcdQ=
Subject key identifier:   BB:2A:E5:9A:CF:9A:2A:2A:B0:54:78:49:1F:77:13:7D:DE:10:91:78
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5BDB3C6C00FF6E255F36BA462D5A2C666372ACA1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2beda0a-1e63-4329-8e29-f871d05cdb67.roa
Signing time:             Sun 19 Oct 2025 05:01:18 +0000
ROA not before:           Sun 19 Oct 2025 05:01:18 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.154.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:3c:6c:00:ff:6e:25:5f:36:ba:46:2d:5a:2c:66:63:72:ac:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 05:01:18 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e4f2dd96d29fc60aac203804dd19832ec8a5232e36245e6d277fdd74ed4fabb9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:ac:0d:49:22:46:aa:5b:02:d4:69:13:7b:
                    bf:80:18:9b:16:67:8d:2b:6d:88:84:0a:48:cc:a6:
                    b9:54:2f:f6:31:53:25:fb:b6:03:e9:ea:75:73:e9:
                    c5:70:fc:ef:cd:09:2d:01:42:7a:1d:cd:18:e3:26:
                    87:fe:7f:ed:01:ac:98:86:3b:03:23:cb:65:5f:1b:
                    b4:d3:ec:1b:43:ab:99:d5:31:fb:ca:86:a9:38:64:
                    a8:28:59:bb:ec:f0:41:fe:ab:dc:c6:a5:d8:99:15:
                    61:18:6e:39:13:04:1c:70:13:c6:78:ee:67:d5:d8:
                    bc:52:ef:27:54:c0:26:24:11:f0:c0:c0:99:5d:a0:
                    5c:db:6d:7b:58:40:26:e5:98:07:85:c3:97:6c:50:
                    13:f6:69:8a:55:23:49:45:f0:93:28:30:68:8e:ae:
                    b9:09:4f:41:82:f3:9f:29:16:84:96:2c:12:fc:7e:
                    a6:dd:2c:83:84:3f:ff:af:6e:10:93:ad:4f:06:bb:
                    88:e4:36:49:57:57:67:1b:14:f6:12:90:53:9c:ff:
                    1a:b1:15:2f:92:22:8b:a5:92:f5:07:54:a2:75:ee:
                    0f:3b:60:b1:ac:e8:02:bb:87:54:78:dc:f2:42:77:
                    cf:8b:87:4d:05:8f:ef:b6:7d:cf:0c:c3:e8:b5:4e:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:E5:9A:CF:9A:2A:2A:B0:54:78:49:1F:77:13:7D:DE:10:91:78
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2beda0a-1e63-4329-8e29-f871d05cdb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:0b:bf:d2:d0:57:3d:d8:f1:f0:76:af:08:f0:32:e1:12:
         44:00:47:e2:e2:36:57:7e:18:b0:e7:1b:a7:57:43:ae:68:9a:
         52:c1:39:f3:42:93:c5:5a:72:0d:4a:dc:4b:3a:97:83:e4:4b:
         ed:52:02:a1:11:ec:82:2e:c8:b4:ac:d9:a1:89:9a:4a:84:e4:
         34:e6:94:09:b3:89:3c:b6:9f:19:ac:b8:5d:b2:de:77:34:d3:
         34:31:3f:49:ef:4d:03:5a:51:83:22:a8:9f:a8:e9:64:a9:89:
         f5:28:a0:52:ee:01:97:49:99:61:3d:44:8c:b2:92:fc:71:81:
         66:e1:81:1b:2c:e5:e7:3b:51:59:ef:ff:e0:08:e9:7f:3d:bc:
         d3:0c:2d:28:80:88:9a:81:80:f3:d8:bf:1d:b1:ac:4b:b8:70:
         23:af:62:69:a6:fe:59:27:83:84:e3:f7:cc:90:8b:54:b6:dc:
         a3:65:6f:90:61:16:da:47:d5:32:ac:62:80:42:d3:14:89:e7:
         8b:fe:56:4a:1e:50:4b:40:6b:89:31:94:8e:4f:e4:3b:db:3f:
         b8:7f:72:6e:8b:df:b1:cc:db:aa:00:df:fb:85:5e:d0:0e:0e:
         5b:c8:56:8c:e3:6c:61:a7:8c:c6:b6:ab:69:06:74:7f:40:88:
         bc:4d:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:41:41 2025 by rpki-client