Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
File:                     c964bb16-b590-4c0c-89eb-29a939e70a6d.roa (raw, json)
Hash identifier:          qaFHYPxMo9IuJfEmQndjDBqv2Q6WbcYC03fLMfoAGN4=
Subject key identifier:   92:73:B8:5C:C7:BD:84:52:0B:55:1E:A3:D5:EA:D8:09:35:B4:1C:EC
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       24F7FF0E3D024B8DDF62A4D2D150F0CBDE21D225
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
Signing time:             Tue 21 Oct 2025 00:10:04 +0000
ROA not before:           Tue 21 Oct 2025 00:10:04 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:ff:0e:3d:02:4b:8d:df:62:a4:d2:d1:50:f0:cb:de:21:d2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Oct 21 00:10:04 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=76c1628f9f8443251a031875c5b64118920df9786dd82f9e36a4be908df4a681, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:08:85:bf:01:51:26:13:17:80:74:60:36:
                    32:eb:ac:a2:8b:27:d6:ed:d7:90:93:e3:4f:6c:92:
                    39:dd:0b:8c:95:67:35:9a:f4:76:30:15:c8:1a:b0:
                    4f:a5:10:ac:b8:56:3f:79:7b:c7:4c:e8:38:c1:2a:
                    a1:bd:02:3c:5c:2d:8a:6b:78:0d:5c:69:29:a8:40:
                    c9:e0:58:35:ae:7a:5a:16:9f:c3:1d:6b:d1:30:fe:
                    9c:87:93:da:76:12:39:3b:fc:8b:68:d0:50:e7:33:
                    5d:16:dd:d2:5e:8c:5b:c7:de:60:b0:d8:7c:e4:17:
                    95:94:f0:5a:f9:3c:30:54:26:1a:28:2c:81:6a:71:
                    75:4b:9b:f7:b4:8a:3a:ce:dc:45:30:e0:a2:d5:ba:
                    10:5e:56:ca:2d:f9:7e:38:8e:8d:d8:0b:be:55:1f:
                    38:67:0d:12:3e:fb:89:9e:f9:00:e6:75:b3:3e:ab:
                    86:7a:a4:77:43:df:8c:a9:79:5a:d2:bf:41:df:dc:
                    82:58:15:d0:35:8b:78:2d:64:2c:ae:af:30:83:b3:
                    97:cf:e0:c4:e0:35:89:f2:61:ff:93:de:ff:92:f5:
                    aa:cb:b0:64:1b:d3:15:e5:f2:d8:54:83:4d:d3:d5:
                    84:0c:76:12:ba:00:f4:d7:ca:ad:cf:8d:bd:a3:bb:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:B8:5C:C7:BD:84:52:0B:55:1E:A3:D5:EA:D8:09:35:B4:1C:EC
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:40:0e:ab:ff:b5:be:b2:f9:1b:16:f0:f0:4e:e2:2f:fa:
         ec:17:ee:fd:a1:6d:eb:91:6b:70:42:a0:73:6c:0e:e2:a7:66:
         03:c8:24:cb:0f:14:84:f7:87:f3:1a:9b:6f:24:ea:97:fb:ca:
         6b:f1:a4:bd:86:aa:22:31:24:7e:ed:0f:3c:3b:e7:ef:11:18:
         b1:f3:ca:22:10:4b:b9:a1:7c:fa:f3:7b:59:9c:41:d8:49:31:
         11:aa:c5:21:4d:17:1f:e2:f0:a3:58:00:2e:bb:a6:1f:e2:ac:
         2f:3b:3f:fc:64:38:cf:ea:c7:b4:78:82:14:e4:ed:21:e7:25:
         47:60:4c:78:aa:1b:a9:ab:0a:12:78:31:3d:4d:5b:d0:2d:17:
         61:4d:e8:66:5b:28:d3:45:e5:01:28:45:ee:d5:8e:19:46:a6:
         06:f0:ff:d9:0d:4b:98:d3:70:4e:27:b4:e3:19:e7:96:61:0e:
         40:7f:df:f8:24:7f:00:22:63:07:15:4e:74:c7:94:c5:3c:b2:
         ce:16:d7:70:4a:38:ab:d3:b8:88:54:e6:1e:4b:ca:57:f2:ae:
         d9:22:e6:b7:96:d6:bb:71:34:aa:89:8c:78:85:02:c4:93:f4:
         69:01:0a:48:30:7e:49:fe:1f:63:43:33:c2:6d:4a:67:a4:21:
         06:9b:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:19 2025 by rpki-client