Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6e690ab-adfb-4725-a3a1-132b7f993f2e.roa
File:                     e6e690ab-adfb-4725-a3a1-132b7f993f2e.roa (raw, json)
Hash identifier:          fvfNlS5m+E+MLzPWatPmFVbl6LEnrCQrulzvKIUGP+4=
Subject key identifier:   22:87:97:F4:CA:14:E4:DB:DE:E9:26:0B:5C:E5:8A:D6:46:83:44:CD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       19E66970F834F6CCE521D3C3D9AE6216FBB43F9A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6e690ab-adfb-4725-a3a1-132b7f993f2e.roa
Signing time:             Sun 19 Oct 2025 21:10:13 +0000
ROA not before:           Sun 19 Oct 2025 21:10:13 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.65.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:69:70:f8:34:f6:cc:e5:21:d3:c3:d9:ae:62:16:fb:b4:3f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 21:10:13 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e8b52cdf4a7fac6758b599698dabb5b65a5437d9676b2fac8cf4dc56ef84fa38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:03:58:97:7a:15:7b:f0:9f:c9:0a:03:08:
                    69:92:a9:2a:99:64:b0:f9:4d:66:78:60:a4:1e:c7:
                    f7:9a:16:85:4b:6c:45:02:b7:b1:3f:df:c6:36:a1:
                    b9:fa:f1:f3:7b:0c:6f:35:61:d3:e5:33:44:d7:c6:
                    5c:ea:05:12:f6:1f:eb:6b:6d:44:2a:62:1f:6c:47:
                    cd:4c:b0:3d:83:d8:42:a5:4f:f7:90:56:6e:13:82:
                    6a:63:b1:3b:ea:25:bd:11:47:06:e8:9e:41:11:47:
                    f0:fa:c4:6d:19:22:4e:3c:95:c0:35:d5:7d:74:a6:
                    ac:29:57:be:c1:e9:5b:0a:bf:cd:8b:4e:e8:27:54:
                    ed:7e:b5:f5:c5:f4:77:cf:12:fd:5f:31:9c:62:69:
                    48:69:a5:bb:8c:54:17:ab:a5:41:2c:cb:59:70:a9:
                    0f:b0:5a:17:cb:95:fd:53:56:a2:7a:0e:c6:65:a3:
                    f5:58:7f:f2:ab:2d:06:3a:e1:cb:59:de:b6:96:0f:
                    8a:ed:13:d6:17:90:6d:05:4a:99:88:18:64:23:d7:
                    ad:d1:d8:2f:b2:44:4d:b9:a7:a6:ab:46:ad:bc:d2:
                    65:dd:aa:fa:ae:a2:ac:51:2e:05:08:5a:f4:0a:68:
                    ee:cc:a0:bc:ab:23:28:2b:0e:ee:2b:3b:3e:48:16:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:87:97:F4:CA:14:E4:DB:DE:E9:26:0B:5C:E5:8A:D6:46:83:44:CD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6e690ab-adfb-4725-a3a1-132b7f993f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.65.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:d5:25:4b:68:a1:b4:f8:3a:6c:c1:67:0b:51:1f:3e:cc:
         9b:f8:5c:a1:e0:b2:57:66:3c:5b:fe:6a:ce:fe:67:fe:c4:6b:
         23:4b:d7:78:93:9d:56:2a:a9:67:ab:a4:02:10:8c:18:e5:3f:
         21:33:4e:87:1d:1f:28:8b:4e:89:f2:11:ae:9e:d1:62:b1:87:
         be:94:e9:94:70:51:be:77:9b:9a:3b:ca:4d:83:d9:9c:bc:f9:
         9a:4f:ba:2d:9e:8b:bf:97:50:70:71:8c:f4:85:a3:2e:08:94:
         7b:7d:6e:e4:47:29:a8:09:fd:52:55:f7:e7:58:c0:42:5b:53:
         c7:ca:e4:e6:be:59:43:c1:f2:63:75:e1:3e:87:44:54:f0:8c:
         cf:00:56:21:c6:c2:4d:06:6d:fc:75:86:a5:1e:fa:3d:a0:43:
         77:1d:c8:68:33:6b:21:5a:71:af:10:ee:06:2a:7c:55:ff:69:
         a1:c2:83:92:bc:8b:cf:c7:1c:be:2d:1f:e9:19:37:0c:e0:58:
         e3:a5:46:30:b8:7f:c0:4f:2b:17:80:81:c1:7a:12:52:11:b7:
         99:2d:53:05:43:e5:b6:a9:ca:6a:84:ff:13:76:65:fa:ad:d9:
         55:be:6f:61:56:47:b7:45:be:ac:04:83:6d:93:56:5b:92:d6:
         a0:c0:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:45:20 2025 by rpki-client