Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85ac382-6730-41d4-9b83-ea1254d05a10.roa
File:                     e85ac382-6730-41d4-9b83-ea1254d05a10.roa (raw, json)
Hash identifier:          dItThpKHJ+Hc+xM5GP+sKXvjZQEw4zG4Iegzp8AguWo=
Subject key identifier:   2B:B8:83:E5:90:36:B4:06:3A:16:FE:F4:F3:97:4E:92:EA:B9:09:09
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7AA32A691CB090A340117809241FF854F0B2F4B1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85ac382-6730-41d4-9b83-ea1254d05a10.roa
Signing time:             Sun 19 Oct 2025 20:12:34 +0000
ROA not before:           Sun 19 Oct 2025 20:12:34 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.67.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:2a:69:1c:b0:90:a3:40:11:78:09:24:1f:f8:54:f0:b2:f4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 20:12:34 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=b0d541a512162491f80c57547964d0a7b9ee15fe5e2fe50b0db3fe71a9b47b78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:02:11:7c:b9:10:b8:75:1c:c2:a3:93:8d:
                    c9:ce:95:59:07:f5:08:34:d2:c7:07:ea:c1:47:03:
                    7a:bf:c8:a0:67:b7:e2:70:64:2f:13:94:19:e2:e1:
                    99:95:9b:d2:72:8b:19:5d:9b:28:b8:8c:ab:97:3c:
                    8a:d8:6a:30:38:16:10:02:2b:d3:13:6f:e1:08:c6:
                    0b:23:a8:b2:62:a6:13:8a:e6:55:0c:47:70:cc:c4:
                    88:df:99:41:4b:17:8b:01:7d:e7:1f:0a:5f:74:82:
                    17:88:1c:93:a3:29:3c:c6:6c:bc:7d:ef:1a:11:5a:
                    05:70:40:78:3c:b1:0d:f9:6c:37:30:19:66:72:bd:
                    b1:c3:60:f0:60:4f:5f:5b:08:41:8d:ce:c2:04:26:
                    3e:06:f6:fd:4a:f4:19:03:be:ad:26:ff:33:6c:6a:
                    6e:8c:17:82:6a:dc:47:d0:be:55:6a:49:3d:f8:86:
                    09:6c:01:9f:d2:1f:01:5f:46:d3:90:2a:46:a9:3c:
                    0c:56:5e:f7:37:15:92:c1:c0:45:31:db:5b:f0:6e:
                    3d:e6:9d:73:d4:1b:e1:e5:aa:3f:29:45:4f:c0:09:
                    8f:45:76:4f:50:b2:89:ec:25:2f:f5:8b:02:f2:b7:
                    c4:27:f0:bb:72:24:d2:10:e6:21:8d:39:0e:33:46:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:83:E5:90:36:B4:06:3A:16:FE:F4:F3:97:4E:92:EA:B9:09:09
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e85ac382-6730-41d4-9b83-ea1254d05a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.67.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:a2:a1:6b:5b:4c:e2:e3:bf:76:41:e8:28:81:0e:90:f4:
         c7:a3:4a:4e:10:3b:42:1a:a5:86:0c:a2:02:7c:0b:66:82:1c:
         71:04:60:96:2a:33:2c:90:21:81:75:57:f9:72:23:b9:2c:0d:
         de:9b:b6:63:b6:a5:9a:c9:16:83:29:b8:f2:9b:72:68:6d:47:
         3e:e9:4f:24:23:04:30:7b:25:2c:d1:8b:43:08:d0:1d:b7:4c:
         60:1a:1c:7d:32:fd:37:e0:1a:fc:ba:e9:a6:8e:3d:87:f9:60:
         53:e8:76:8c:1f:ad:98:18:85:b7:fc:0d:a1:e2:ba:8b:93:7b:
         83:92:f8:5b:d2:c5:e1:cf:b1:ea:e0:b9:b5:7f:81:59:6f:9f:
         ea:50:b0:0e:24:ae:77:a9:3a:8a:02:e6:6d:29:61:ac:ee:5e:
         ca:94:64:a3:f1:3d:61:44:fe:4a:28:3a:44:c1:eb:8e:87:cb:
         f5:29:fa:d9:52:86:b7:e2:22:0f:a1:c1:24:e5:20:fb:1e:e8:
         aa:aa:67:fb:d5:2e:e7:12:d1:81:5f:3b:b3:54:c0:02:fb:45:
         75:be:9f:2c:13:a8:4a:e7:e8:20:7b:9e:b6:37:33:3c:1c:c6:
         01:95:84:9f:ae:04:89:52:83:12:16:ac:68:e6:39:46:77:35:
         11:5a:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:25:12 2025 by rpki-client