Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f82fb8ce-0353-4a95-b945-41fde2534c25.roa
File:                     f82fb8ce-0353-4a95-b945-41fde2534c25.roa (raw, json)
Hash identifier:          b2bLP72WI2u+z9Y28uXZt7OZuCY2MmEO4/UZ/PuMf84=
Subject key identifier:   76:AC:FA:37:2B:3D:4F:71:A4:CC:95:80:B7:26:1B:13:31:33:84:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7ADB861F1FB3693BE6F6C306FC523FB30418A2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f82fb8ce-0353-4a95-b945-41fde2534c25.roa
Signing time:             Sun 19 Oct 2025 05:10:10 +0000
ROA not before:           Sun 19 Oct 2025 05:10:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.146.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:db:86:1f:1f:b3:69:3b:e6:f6:c3:06:fc:52:3f:b3:04:18:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 19 05:10:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=5acb2ed1b4bb366ec40d02b8fed59b79c73916b3f52baef14f3b18ac50196f09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:76:f3:d4:fa:3b:2e:24:ae:ba:c0:7c:09:
                    02:c8:07:41:ae:12:e9:29:2d:34:58:8f:bf:e2:e6:
                    64:03:4f:3b:05:c1:63:4b:03:96:5d:c4:20:5d:1c:
                    a2:70:7f:f4:bc:ef:1c:3c:89:fc:57:72:1e:ba:7e:
                    5a:83:7f:98:c5:41:32:47:60:c5:b3:e0:31:e3:aa:
                    92:3f:48:9c:72:64:f8:9b:19:65:e4:ea:19:af:e9:
                    dc:4b:39:74:41:2e:82:85:4b:69:b8:84:23:f5:50:
                    04:84:2f:05:aa:97:13:dc:ea:bf:be:be:70:ec:d9:
                    f5:82:b3:93:a7:8e:5d:4c:84:94:64:ea:3e:4f:d0:
                    89:3f:83:96:67:d1:0d:fb:6a:38:9a:33:61:9c:98:
                    b7:74:28:1a:e0:76:f0:19:ac:d1:e2:49:38:b8:36:
                    23:d6:2f:f1:75:d0:78:29:ce:a3:4f:f7:c8:be:af:
                    76:4d:88:00:ee:f8:e1:88:65:6e:81:92:61:e2:d3:
                    45:9e:37:74:9b:5a:32:fc:84:82:cb:3f:c0:45:9c:
                    f8:73:67:d8:92:e9:52:26:1a:9f:fa:dd:8d:60:44:
                    ad:a0:7d:d5:b8:ec:32:d5:ca:ff:1c:d8:74:81:d1:
                    d8:a8:61:90:2b:69:60:77:d0:16:0c:ee:bd:d4:1c:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:FA:37:2B:3D:4F:71:A4:CC:95:80:B7:26:1B:13:31:33:84:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f82fb8ce-0353-4a95-b945-41fde2534c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:63:d0:f7:ff:0a:7c:92:bf:3b:d5:db:fa:9a:0c:3d:8e:
         5b:65:0d:d3:87:b2:4e:74:a9:8a:f3:f7:21:e5:84:7d:0c:f4:
         70:43:b8:2c:d3:3a:ce:a2:eb:2f:1c:c6:34:d4:17:b4:80:0c:
         d8:77:0e:2c:fd:93:93:f7:51:8c:17:c2:2d:0f:8d:9f:19:bf:
         58:51:8f:8a:27:f2:9b:6f:af:a4:f7:3e:a7:8a:60:01:fd:4e:
         bb:fc:3b:78:6b:4e:56:e8:ff:c0:b4:f5:07:73:c4:3f:9b:15:
         a4:62:38:8b:07:50:bf:09:5b:21:52:cd:f7:b7:7a:6d:8b:8a:
         35:fa:62:39:d2:43:60:83:12:78:83:b4:a4:c6:79:d3:44:a8:
         83:e4:13:af:1b:86:bf:43:10:7e:a5:b8:2f:f2:04:fb:31:b8:
         2a:77:27:c8:bb:09:44:fb:46:65:42:96:8d:d5:ca:04:c2:4f:
         95:c6:44:95:e7:13:ef:e6:7d:0d:c8:9e:6e:63:5d:54:57:d2:
         3a:1f:35:4e:87:9b:8b:eb:d8:39:1b:4c:17:24:86:bf:31:4b:
         43:93:1c:92:19:2d:c7:d0:56:30:11:f7:c7:e5:79:29:42:d0:
         8f:0f:2a:1e:07:72:27:1c:f1:32:21:57:26:16:a0:82:34:fa:
         c5:cb:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:42 2025 by rpki-client