Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e63e368d-d3a8-4820-b332-961a87ba4195.roa
File:                     e63e368d-d3a8-4820-b332-961a87ba4195.roa (raw, json)
Hash identifier:          Rdl/1MNiqYP4TgKTxx9KHgRF76zgqti/gy7xzChrH74=
Subject key identifier:   DF:AC:9E:CC:93:B1:43:82:6B:48:60:B3:FE:4D:60:42:9E:BF:5C:D9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5863CC4D330A933D9D22C844DA659AD79D946D80
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e63e368d-d3a8-4820-b332-961a87ba4195.roa
Signing time:             Sun 19 Oct 2025 10:21:24 +0000
ROA not before:           Sun 19 Oct 2025 10:21:24 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.227.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:cc:4d:33:0a:93:3d:9d:22:c8:44:da:65:9a:d7:9d:94:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 10:21:24 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=054cb0660630fd865483967dd89bfa279c8e8b412ce3c9fc2a05b451add30c6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:87:8d:07:dd:4e:14:61:d1:c3:fb:30:83:
                    58:52:a9:7a:dc:87:9f:cb:51:5b:62:e3:4f:d5:8b:
                    44:2c:93:fe:27:29:3e:56:36:17:73:36:7c:8d:65:
                    fd:ab:22:a9:d3:50:4c:72:d0:74:73:b3:e7:7d:32:
                    72:16:13:cd:4d:9f:4a:d4:68:27:cd:f4:d7:01:3e:
                    bc:b4:83:4c:1c:cd:7d:41:2c:ba:6d:b9:2b:db:54:
                    20:79:0a:6a:8c:62:f5:7c:fa:1c:5a:ed:d9:3e:61:
                    90:61:d4:73:4f:4a:11:9b:b2:22:d3:48:cc:ac:bd:
                    c9:1c:64:68:65:1e:34:07:4a:69:f5:61:21:2d:c6:
                    fe:ee:d8:41:e4:c0:65:51:35:d4:0a:a6:6e:35:fc:
                    63:4c:98:82:42:85:c6:ed:80:19:32:ff:44:28:84:
                    89:e6:2f:05:7b:b9:42:d0:04:37:c6:ef:c8:79:e9:
                    cb:d9:15:e8:0a:75:ff:2a:83:4d:94:7a:fd:04:16:
                    c6:3c:1a:e4:f1:5a:6d:c7:f6:10:f4:49:b1:41:ae:
                    68:f0:e5:10:db:3a:29:09:75:96:1b:e9:0c:05:0d:
                    a0:eb:53:16:a8:fd:87:64:8b:3d:4b:c0:fa:bd:d1:
                    ed:ef:74:1c:a3:69:dc:17:d3:d5:00:05:2d:73:63:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:9E:CC:93:B1:43:82:6B:48:60:B3:FE:4D:60:42:9E:BF:5C:D9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e63e368d-d3a8-4820-b332-961a87ba4195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:22:b2:65:08:fa:13:66:19:6b:55:b3:6b:d2:b5:57:5f:
         a9:bc:5f:5b:e2:57:c4:ba:00:dc:2e:32:72:23:7a:d7:d5:e7:
         e5:cf:6a:16:77:38:03:21:fe:70:b2:6f:9e:c6:ab:d9:1a:86:
         83:80:7c:c4:7b:cb:05:4d:54:49:6d:be:9d:c0:ca:fa:02:cb:
         c8:d0:a9:d7:3a:e8:21:94:d0:5c:7c:bf:16:f1:1f:82:06:cf:
         58:90:65:0d:65:a9:0d:e3:c0:0c:a0:e3:e5:66:34:7b:a9:92:
         f5:a3:8f:3f:85:82:44:00:84:bd:05:6c:95:84:10:07:b2:39:
         e5:27:c1:f9:ad:43:9b:45:47:14:a0:8b:25:62:b8:ab:fb:fd:
         48:b3:44:91:b7:db:50:d0:9b:66:c8:b8:0e:3f:a1:78:84:81:
         8c:32:ca:97:57:e6:b2:cd:d8:b3:de:5a:77:bc:1e:65:2a:6a:
         70:b9:a6:78:67:b9:67:da:6b:4f:c2:d6:76:d7:51:2a:02:0f:
         a9:a3:ec:70:4e:b6:8c:26:02:eb:a9:9b:08:60:09:59:29:1f:
         db:6f:fb:2d:1f:fb:ab:b6:76:d1:33:93:f1:c5:8e:dd:b4:50:
         3b:e2:26:a9:67:f8:f8:a5:6c:ca:15:06:19:29:63:a9:30:ab:
         00:0d:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:55:49 2025 by rpki-client