Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ee419cf-c598-43ce-9654-94f2bee97ccd.roa
File:                     7ee419cf-c598-43ce-9654-94f2bee97ccd.roa (raw, json)
Hash identifier:          iA26QGJCwd6C72YT0wgw4Qu1qf24b6QnqNDYUJLwwL4=
Subject key identifier:   45:DC:35:13:22:70:7F:50:53:50:7A:7E:5A:E2:9C:FF:72:34:8D:B0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       12A461F0C5CF4ADFCCFF21EE87A2A1CCD7D749B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ee419cf-c598-43ce-9654-94f2bee97ccd.roa
Signing time:             Fri 31 Oct 2025 20:10:30 +0000
ROA not before:           Fri 31 Oct 2025 20:10:30 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:61:f0:c5:cf:4a:df:cc:ff:21:ee:87:a2:a1:cc:d7:d7:49:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 31 20:10:30 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=61cdf0c57f0e6018876a01d511385fe833d666d6c3b9259697cf4b57e8885a37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:ad:a6:56:74:bc:6f:35:2c:b2:03:99:b2:
                    6a:14:b4:fc:ba:c6:8e:87:38:ae:00:e0:69:ae:80:
                    a0:de:cc:b6:9c:7c:9c:9a:b9:ed:0e:7c:5a:ba:c5:
                    c7:62:d8:53:11:4b:cc:3b:b6:17:eb:dc:44:50:d2:
                    9a:65:6f:67:5c:fe:90:60:03:7d:bd:0c:f9:ab:66:
                    97:e6:83:ec:39:fd:0b:98:dd:68:50:6a:81:f9:b0:
                    bb:00:84:ff:30:eb:2d:f5:d5:ea:89:78:6c:d4:82:
                    05:c2:e8:2b:64:b6:ab:29:95:f8:7d:ef:4d:c9:1f:
                    0d:ad:60:49:cf:98:20:05:6e:31:82:4f:06:6d:81:
                    c3:e4:d4:96:af:f5:39:89:88:45:91:8d:75:9d:fe:
                    df:40:5b:dc:f8:5f:44:3a:74:1f:98:f0:5a:05:10:
                    ad:98:11:55:96:e6:16:b7:45:aa:0a:fa:0f:85:4a:
                    72:88:b6:48:33:a5:7c:cc:88:c0:c0:bb:15:3b:86:
                    9d:9b:c8:ea:4d:18:b3:73:cd:63:c1:39:a8:f2:c6:
                    c6:64:36:62:44:1e:ad:87:54:44:a8:1e:5e:80:03:
                    ca:a9:3f:32:bc:d3:18:5b:eb:22:bf:d0:34:5d:08:
                    bf:29:ff:46:2a:4c:c7:f7:b4:d3:6a:9c:bf:1a:50:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DC:35:13:22:70:7F:50:53:50:7A:7E:5A:E2:9C:FF:72:34:8D:B0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ee419cf-c598-43ce-9654-94f2bee97ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:c1:8f:60:de:d8:c8:89:91:f0:63:2c:d3:4a:38:c1:8b:
         9a:cc:b0:41:52:e4:15:fd:3f:9b:6e:6e:83:91:b0:f0:c9:41:
         7f:89:c6:44:57:7f:24:03:2a:7e:1b:6a:93:2a:f7:bf:d7:ea:
         74:0a:5f:e3:23:68:69:ab:f7:6a:cd:f9:cd:e6:ea:ba:76:28:
         51:b1:ba:94:5a:a1:8d:95:6a:34:24:11:d6:bd:74:eb:01:d2:
         a8:b4:5c:c5:4b:86:dc:1e:60:94:44:c1:3b:49:61:b0:ed:27:
         87:66:d8:d1:33:9c:a6:5b:1b:cb:c2:72:89:2a:2f:67:0c:c7:
         73:45:e0:58:4a:3c:31:78:99:5f:22:97:11:16:92:ab:1f:2b:
         23:84:5f:26:48:e8:ce:4a:13:2d:76:da:78:ed:66:76:b8:f3:
         e6:74:b6:66:0c:5b:2c:a8:53:cb:29:6c:a4:a5:86:3a:e3:33:
         e1:c9:24:38:4c:61:5e:8e:e5:d3:60:6b:06:18:13:d9:32:7c:
         c0:a5:11:f7:58:e3:47:39:72:15:bb:90:ed:a3:41:a8:38:f7:
         20:1e:db:6b:81:48:15:17:7c:19:73:b8:4d:82:89:22:6e:32:
         81:19:c5:a3:c6:24:52:10:94:18:af:be:50:09:7b:f4:45:4d:
         6d:2b:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:46:02 2025 by rpki-client