Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eecb3216-44dc-4e27-bc32-5e22bf9ed8ae.roa
File:                     eecb3216-44dc-4e27-bc32-5e22bf9ed8ae.roa (raw, json)
Hash identifier:          hazeXH87O6vgXhzwy06UGM2WxWL3VbCKG7H3SgFp1eg=
Subject key identifier:   33:4D:DC:7E:4C:DF:A9:4E:9D:F5:49:AA:F4:5B:8D:CF:01:D3:D2:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2C3327FB9BA438B698914F7609CC15D65DEADA34
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eecb3216-44dc-4e27-bc32-5e22bf9ed8ae.roa
Signing time:             Sun 19 Oct 2025 09:42:37 +0000
ROA not before:           Sun 19 Oct 2025 09:42:37 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.224.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:33:27:fb:9b:a4:38:b6:98:91:4f:76:09:cc:15:d6:5d:ea:da:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 09:42:37 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=67341237fc4055a8fc150fd976eed2d0f7061b241151ddcccf2a3897ce33608c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:cb:c4:21:a3:55:04:d8:69:cd:bc:c8:cb:
                    9e:90:f2:f0:a1:ca:02:bf:d9:af:ee:05:0a:4b:d6:
                    36:14:c5:2e:e9:93:a3:39:e0:50:d7:bc:73:e5:17:
                    aa:ef:57:30:13:c3:88:19:39:39:49:b8:c5:91:e9:
                    2e:f7:b1:7a:cd:06:41:c7:1e:77:b6:d2:1d:57:7d:
                    21:ee:ef:7d:4d:de:4e:16:c7:94:1a:36:fd:3b:bf:
                    39:53:c0:45:31:87:f4:4b:5c:33:d3:bb:0a:a5:a1:
                    d6:ee:2c:19:a2:f8:a1:f3:7d:67:56:cd:7e:e4:61:
                    e7:62:6d:59:43:e0:9a:47:6c:0b:ea:09:77:6e:be:
                    e2:dc:a2:c1:ed:22:1c:be:80:41:da:eb:74:82:9f:
                    60:dc:40:58:03:35:7c:7a:0c:d2:bc:9c:d6:ba:0a:
                    47:7f:fa:48:a0:52:95:a6:df:81:6e:a5:e6:4a:a4:
                    b1:51:85:87:59:7b:32:c2:07:70:d1:93:33:44:5e:
                    74:b4:8f:7a:3e:f3:d9:05:5b:53:a8:0b:4b:c5:2f:
                    7a:ca:9a:68:44:2c:85:dc:4c:9e:fb:cd:59:10:c9:
                    76:e8:0e:d8:2b:73:e6:13:b8:b5:ed:d8:d4:92:19:
                    04:dc:2b:95:70:93:01:ce:22:d1:1b:bd:b9:4b:04:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4D:DC:7E:4C:DF:A9:4E:9D:F5:49:AA:F4:5B:8D:CF:01:D3:D2:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eecb3216-44dc-4e27-bc32-5e22bf9ed8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:83:16:83:b8:1b:5f:19:02:ee:dc:2a:0f:e8:3a:19:3d:c6:
         88:89:aa:36:f7:18:49:aa:a4:0f:78:bd:08:6e:2a:3f:69:24:
         25:e0:a7:f8:b0:22:d7:22:a2:4f:76:e5:9e:0f:ea:31:14:7b:
         a9:34:17:c5:e6:a6:dc:4e:e2:70:d2:22:54:b4:dd:f9:12:35:
         bb:34:56:2c:e7:db:98:41:f4:6d:e6:0b:2e:00:0a:32:6a:17:
         4a:2c:50:90:1c:c6:20:b9:2a:50:9e:27:f5:78:53:9a:4d:13:
         18:b5:2c:96:0b:34:e5:a0:84:39:43:40:dc:b2:f7:31:94:97:
         39:19:97:64:61:3d:77:70:bb:f3:d8:23:99:fa:e7:ef:81:8e:
         45:2c:4f:9c:3c:35:f2:f8:40:89:10:d0:67:f3:91:77:18:69:
         b5:3f:fc:eb:64:be:77:51:71:0f:38:3b:12:bb:70:d4:8b:9a:
         f5:21:a8:cc:f8:26:c0:72:0b:a5:60:a1:2c:d1:ce:01:52:fa:
         34:94:e0:05:44:71:70:a9:04:f6:1f:0f:19:ee:60:37:ec:88:
         87:bd:30:52:fe:ba:9a:39:73:34:d9:5b:79:3b:83:b3:95:e5:
         4b:24:6c:0c:87:4b:87:1d:a1:9e:0f:92:2e:76:17:a2:e6:a1:
         85:67:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:56:28 2025 by rpki-client