Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7e815a2-4f1d-45dd-ad43-236791a19469.roa
File:                     e7e815a2-4f1d-45dd-ad43-236791a19469.roa (raw, json)
Hash identifier:          SqNDx+CeFLZvwAGBBWkdyxNuyEUig5LZy5wS9VGIkZw=
Subject key identifier:   B9:27:60:2F:C5:7D:AF:BC:2D:7E:14:AD:4E:89:03:AA:EA:82:5E:C0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7132C5B156D977E7148C4E3DA6C2D12B28F34B0C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7e815a2-4f1d-45dd-ad43-236791a19469.roa
Signing time:             Sat 18 Oct 2025 08:32:40 +0000
ROA not before:           Sat 18 Oct 2025 08:32:40 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.244.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:c5:b1:56:d9:77:e7:14:8c:4e:3d:a6:c2:d1:2b:28:f3:4b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 08:32:40 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=5f5996a3aaf2665b83604b0c0791b55c84c7eb0957187bd7bebe1dee94bf38c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:fa:b5:90:9d:53:a3:2b:cf:d1:d0:fa:d4:
                    c6:d3:9d:c5:6e:3c:77:28:24:5b:ca:e3:8b:8e:79:
                    39:e5:96:29:a8:62:2e:3e:7a:47:89:0a:3b:3f:b0:
                    40:63:29:c3:a8:80:66:12:1e:e0:0c:a3:81:40:88:
                    b0:98:88:90:41:e2:44:a4:03:c5:e6:02:43:2f:e2:
                    16:83:74:89:81:7b:da:a6:96:3b:40:0c:90:14:43:
                    0c:04:bf:3e:4b:2a:c1:07:26:3d:d4:fc:7b:49:5d:
                    61:2b:7a:d9:58:83:76:cc:eb:02:fa:2b:0a:35:6e:
                    64:1e:77:6a:5b:51:2e:44:f9:9f:47:a5:a3:0e:44:
                    60:25:f0:18:e3:9b:c3:32:9f:7c:6f:b6:a0:8e:58:
                    11:9f:1c:5f:a5:bd:13:18:ff:33:07:25:b5:37:de:
                    77:03:18:ae:84:99:aa:f9:a2:af:af:91:72:d5:1b:
                    15:35:7c:f5:04:38:7f:25:f7:e8:f3:c7:56:25:73:
                    d1:e0:d6:8e:c2:cb:cb:38:bb:98:71:c7:2e:39:d6:
                    fa:1f:24:22:42:85:37:c1:05:53:18:e3:10:c4:4a:
                    5b:65:7d:df:03:a3:87:db:b6:f7:50:c1:6f:97:a5:
                    a2:91:52:7c:b3:a5:7d:a5:21:2d:73:f6:49:e1:4e:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:60:2F:C5:7D:AF:BC:2D:7E:14:AD:4E:89:03:AA:EA:82:5E:C0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7e815a2-4f1d-45dd-ad43-236791a19469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.244.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:a5:d8:a1:8a:a7:bf:7f:78:5e:12:e7:07:94:28:65:3a:
         4f:ea:fa:9f:32:13:42:a9:71:99:09:fb:d5:a9:b2:03:86:26:
         b2:13:66:0e:60:b3:56:fb:5a:ca:15:d1:4f:1a:87:23:53:4e:
         34:a7:01:3e:a8:53:31:c7:98:58:cb:94:6e:2a:bc:10:76:3b:
         cb:7e:3e:7f:15:9b:f1:bf:84:0d:c5:16:fd:22:08:38:89:00:
         d6:18:1b:7c:4e:e2:e8:02:66:74:c0:60:3b:df:3d:69:fb:9d:
         76:63:70:0d:f6:7b:bc:bc:e8:88:fa:80:55:44:48:e6:9e:3b:
         70:92:14:86:80:68:d0:00:de:1f:26:bc:73:3b:03:be:9b:e6:
         18:69:c0:f1:86:e4:26:a5:75:f5:14:5a:67:89:e1:2a:f7:8e:
         8f:dc:88:f0:1e:21:58:48:07:f8:9c:0b:4a:b0:8b:a7:32:e5:
         19:aa:0a:b3:60:59:16:e8:90:69:0e:63:c9:b7:2b:7d:07:2d:
         66:35:e5:ea:91:3f:44:a6:b1:46:04:ca:74:70:b5:8e:19:f2:
         b6:01:a7:c0:b9:e5:bb:66:18:46:13:76:8c:18:65:4a:31:e3:
         f5:c6:06:a5:be:43:c6:b5:25:3b:76:5e:72:8b:f7:78:cd:a2:
         20:6a:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:08:06 2025 by rpki-client