Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4e461ba-e7de-4841-ace9-52cb35675182.roa
File:                     e4e461ba-e7de-4841-ace9-52cb35675182.roa (raw, json)
Hash identifier:          8T6Vxqm4bcZpQT/xC4Sxdh++lgthpOtmvNCJgbC3XeE=
Subject key identifier:   6C:C1:A5:B4:3D:FA:A2:59:7D:39:F2:F2:5C:00:D5:B6:72:1D:0E:A8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1613F054D0D754A6AA0820FF10CBA062E9B1F0EE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4e461ba-e7de-4841-ace9-52cb35675182.roa
Signing time:             Sun 19 Oct 2025 20:03:46 +0000
ROA not before:           Sun 19 Oct 2025 20:03:46 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.32.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:f0:54:d0:d7:54:a6:aa:08:20:ff:10:cb:a0:62:e9:b1:f0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 20:03:46 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d11495648129a8a5231d3281b856355493b961ddf0ddd7500c6efc97b9b09801, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:9e:4d:10:fb:86:e4:d3:7b:ce:b3:4a:7f:
                    b5:35:17:ad:4c:e8:a4:23:fc:0b:fd:83:a0:c0:b5:
                    11:03:39:f7:01:76:9a:25:0a:41:7d:e7:63:0f:ce:
                    47:97:81:e9:0e:ef:d4:3a:f4:56:8c:d1:9f:c0:8d:
                    2f:ab:06:17:04:6d:45:0c:11:bb:55:7e:6a:20:79:
                    61:3b:a8:ef:49:65:59:72:ee:d0:5f:8e:34:ef:c0:
                    64:3e:28:4b:50:3e:b6:c5:19:ba:76:65:83:8d:66:
                    8d:6b:28:49:c8:00:42:24:fe:53:8b:56:13:b2:e5:
                    80:67:b2:7e:eb:6f:e2:e4:11:86:94:dd:c6:34:64:
                    e4:d1:6c:2b:aa:4b:be:24:a8:cc:ca:1b:40:a2:ab:
                    b0:0e:89:69:96:c2:92:d6:12:54:21:0b:af:38:33:
                    44:a4:97:59:44:5d:a2:18:b5:29:9a:a7:56:a0:07:
                    ae:f0:8a:5a:8d:ef:50:65:41:bb:73:0e:24:f0:84:
                    f6:82:e7:b8:7f:5b:17:9e:49:3c:b0:2a:94:07:bf:
                    16:28:fb:be:dc:75:7c:43:df:37:81:5e:c4:29:15:
                    00:b7:c1:23:20:23:93:65:df:03:fd:64:a2:15:2c:
                    8f:88:23:1e:69:46:97:bf:f5:16:e4:47:59:e3:80:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:A5:B4:3D:FA:A2:59:7D:39:F2:F2:5C:00:D5:B6:72:1D:0E:A8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4e461ba-e7de-4841-ace9-52cb35675182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.32.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:58:31:2f:92:91:1d:46:3b:2a:db:ba:4e:af:b0:26:3f:d9:
         90:fc:d0:14:9a:91:98:3c:62:33:97:8c:9b:4d:39:d0:ce:c4:
         66:a4:a0:a2:50:0c:c5:49:dd:1e:5d:71:71:c0:a0:44:81:e9:
         c9:80:9a:39:d3:fc:96:ea:36:3a:3b:8b:ec:68:d6:f7:7e:ad:
         0b:1c:a4:b1:1d:33:3e:b6:83:97:3d:08:bb:a0:be:6c:48:a5:
         d9:5b:4f:87:a0:a3:55:9d:76:38:f4:e6:ae:37:7d:da:e5:66:
         70:01:ce:14:a2:f2:52:50:3d:71:19:0a:ae:a6:aa:b0:34:cb:
         3f:a0:8f:04:c3:15:c5:c2:9c:53:7a:19:d8:0d:5c:97:c4:a3:
         1c:7a:16:40:cb:da:52:26:89:ea:9c:81:0e:f9:e3:c1:eb:c5:
         3b:07:85:18:90:6a:e6:71:28:95:c7:fe:8b:a6:a3:aa:57:2d:
         95:be:11:be:d5:41:5c:c9:15:12:df:cf:e3:89:db:8c:e9:48:
         bd:16:45:3c:d8:5a:c2:d3:1b:72:b7:c1:c1:dc:c3:d5:e4:8b:
         7a:af:6c:4c:36:ed:7e:24:f0:4d:6c:b0:47:e8:0b:0c:34:88:
         6f:22:3c:49:85:fc:56:c0:82:a0:ea:6e:7c:8b:73:25:1b:44:
         6d:7f:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:07:48 2025 by rpki-client