Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa
File:                     f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa (raw, json)
Hash identifier:          +wGZ/1GpJiNrYG99pozSWET3f24wfOIY8xhWEGqjByM=
Subject key identifier:   ED:C3:C5:AA:70:97:CB:25:43:27:A6:33:33:9F:39:48:04:28:C0:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       640AC4C9CBB3BB61ACDD8CCA07AD4BF0C2260933
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa
Signing time:             Fri 10 Oct 2025 00:46:00 +0000
ROA not before:           Fri 10 Oct 2025 00:46:00 +0000
ROA not after:            Fri 14 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0a:c4:c9:cb:b3:bb:61:ac:dd:8c:ca:07:ad:4b:f0:c2:26:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 10 00:46:00 2025 GMT
            Not After : Nov 14 23:59:59 2025 GMT
        Subject: serialNumber=adbef2d6a35a7a51ec721fdc0883713d8a2a738a8738d05baa54fc8150e8781a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:ba:46:2a:0f:79:1a:9d:2b:77:d1:0f:ee:
                    b0:f4:89:68:c7:40:f0:3f:3a:a1:6d:14:de:c2:73:
                    7f:6e:7a:e7:66:6e:5a:06:2e:d9:4d:a3:ba:6f:95:
                    30:a2:cc:05:0b:29:dd:db:e9:9b:f8:2f:54:43:d6:
                    98:85:75:3e:ca:33:b9:38:6a:be:a2:47:48:ed:d1:
                    52:69:64:9c:73:2b:df:0e:e8:09:14:78:32:15:79:
                    92:11:a8:06:ce:1a:da:fc:d3:8a:04:a8:78:58:c3:
                    c9:21:7d:7a:08:dc:2f:da:9b:72:74:f3:2f:50:5f:
                    55:c0:f0:b7:66:be:70:b2:51:3d:3b:f1:83:5d:f5:
                    0a:fc:c6:e9:d6:38:e9:1e:4c:90:e4:99:85:7c:d8:
                    f5:98:cb:d3:b4:ad:9c:4a:c8:4a:c5:ee:25:cb:b0:
                    df:a1:85:60:27:4b:30:33:73:5b:4c:1f:64:68:6e:
                    e5:16:24:3c:d9:e0:34:1c:71:b2:e8:86:f9:0a:eb:
                    5e:98:a6:30:f8:4d:0f:4f:3c:c7:02:fa:12:2f:4d:
                    13:c4:b7:ae:28:bf:a0:d6:83:72:4e:d8:4e:97:9c:
                    f0:75:76:e1:f2:5e:11:f8:13:a9:e8:5f:ab:52:6a:
                    dd:66:c3:1e:37:0c:f7:1f:46:24:9d:2d:6a:4d:8d:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:C5:AA:70:97:CB:25:43:27:A6:33:33:9F:39:48:04:28:C0:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0e8c707-e768-4ea9-bdbc-b88543c0d6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:84:2f:0a:2f:e4:8f:d0:3e:c3:63:40:78:30:0a:b4:34:
         b1:6a:a3:d5:7d:8a:ec:d6:84:ad:23:70:bd:9b:4c:75:2c:58:
         4a:4f:c8:2f:a0:ae:da:84:af:84:b9:7c:66:46:91:0d:9b:e2:
         cf:77:05:56:80:c4:28:14:87:6e:2d:c0:48:29:ef:84:46:b1:
         d8:93:de:8f:d9:9a:5a:bc:55:c7:02:09:80:f2:c9:90:13:82:
         b4:81:41:e4:13:4a:81:ed:43:14:d8:2e:ce:9c:ed:d5:60:3b:
         78:08:b2:21:40:31:74:05:5a:50:cb:26:62:cc:4d:c5:bc:6b:
         79:fb:a5:dd:0f:6e:70:d2:36:50:c8:ce:b2:ab:f6:4f:0c:6f:
         ad:59:1e:8f:dc:80:2d:25:48:05:86:1d:67:16:44:7d:27:21:
         e9:0d:3b:81:c3:3c:b1:6e:f4:99:20:4c:cc:58:f2:24:65:a2:
         a4:f7:07:e3:ed:67:6f:04:c5:44:1b:c6:fb:9e:0a:11:2b:e4:
         60:b2:9a:52:bc:20:87:e0:50:db:fa:48:0b:73:53:b9:1d:59:
         81:04:88:51:26:9d:01:0f:ee:f2:46:41:2f:14:1c:0a:db:59:
         9f:21:dc:09:a6:c2:6a:cc:a8:41:f9:c9:82:7b:8a:e1:c6:2a:
         42:1d:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:33 2025 by rpki-client