Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa
File:                     c93aed40-38a1-439a-aa01-54e548e05e54.roa (raw, json)
Hash identifier:          JgxwfJevRSGSAk8oNTqaq/lSPc0oorfOx8VgCrqWZA0=
Subject key identifier:   E2:A6:6E:35:70:BA:43:AF:B2:91:FC:C7:E5:8A:7C:CC:00:E0:0F:86
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       23F5DDA8AD1EE4D6750C22E71F6456485429CCFF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa
Signing time:             Tue 28 Oct 2025 01:10:09 +0000
ROA not before:           Tue 28 Oct 2025 01:10:09 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f5:dd:a8:ad:1e:e4:d6:75:0c:22:e7:1f:64:56:48:54:29:cc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 28 01:10:09 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=cd5e66901f33bcd60c1d93ba08bbae3c0d091b43896b5bc0fb37a088b7f90217, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:9b:4f:4b:de:9d:85:58:3f:e1:09:31:1d:
                    00:2d:7f:2d:7a:a5:2a:b0:9c:ad:db:49:bc:63:32:
                    ac:ab:ae:2b:68:24:55:c7:46:52:c9:9e:26:d8:68:
                    4b:ff:21:7c:3e:77:38:1e:c2:db:dd:1d:5f:37:07:
                    bb:d0:02:14:81:35:0d:78:d8:bb:1d:b5:34:18:97:
                    cd:57:5e:01:a8:4e:59:de:1e:88:27:1a:f7:b5:4f:
                    ad:ef:b7:20:49:fd:2f:b9:df:d4:8f:fb:0e:79:9f:
                    4c:01:4b:81:08:94:99:e9:e2:9f:99:2d:5e:45:5c:
                    7d:e4:35:37:6a:ee:f3:37:32:4e:d5:73:ea:c6:df:
                    87:e6:4a:9d:d2:90:41:19:de:02:94:52:e3:6e:b2:
                    8b:f5:4a:5d:1a:02:30:0e:25:f7:0f:85:da:c6:10:
                    6f:44:ff:41:9c:8c:49:d2:2a:0f:ca:96:5d:d4:39:
                    e8:00:bb:c1:6e:27:17:34:8f:ff:7c:bf:64:c3:e9:
                    93:58:62:4a:f6:1d:4f:69:45:b7:95:9d:91:ea:88:
                    e2:d1:e9:ca:c4:ab:0c:bb:b2:83:80:80:b9:6e:52:
                    72:8d:4f:73:ee:12:1c:f4:00:49:be:0c:28:0c:f0:
                    34:bf:6f:bf:a2:61:0b:bc:1b:59:d5:5c:5c:40:13:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A6:6E:35:70:BA:43:AF:B2:91:FC:C7:E5:8A:7C:CC:00:E0:0F:86
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c93aed40-38a1-439a-aa01-54e548e05e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:38:b9:a0:ca:01:64:68:dc:c3:a8:b9:51:74:3c:cb:40:
         0e:50:d0:de:c1:dd:4f:b9:a5:07:b2:26:a2:ee:b8:c1:8e:29:
         c5:df:64:12:2b:db:01:ea:bd:63:ae:55:36:b8:31:fe:c5:79:
         b5:23:26:3e:8e:0c:07:78:b5:59:27:52:be:a7:39:2d:1c:47:
         51:96:4a:4e:1a:ea:ed:62:0b:5c:0e:7e:73:53:97:be:2e:98:
         7f:07:1c:69:be:1a:42:50:f6:38:9d:dd:b9:c0:8e:d2:03:6a:
         e0:a6:50:3d:75:95:32:de:06:9c:8b:13:b9:55:98:5d:f7:35:
         8f:56:fa:48:c9:f4:3b:55:b2:d2:fc:0d:49:09:a3:9a:37:66:
         96:c6:53:59:cf:77:28:7a:23:36:50:3f:71:86:f3:e1:32:b6:
         72:54:fa:c9:0f:56:1e:d3:ac:70:e2:b1:75:b5:1c:f1:89:23:
         a5:22:8e:6a:b9:2b:18:cc:c2:54:2c:03:3f:05:4d:2c:87:a0:
         c7:18:b9:b5:53:57:20:57:2b:01:04:c8:b6:74:94:90:6b:6a:
         6d:b5:e5:a8:66:aa:c2:e9:82:ed:3f:30:d9:bc:fc:af:6f:6c:
         d7:c3:c5:8f:35:c5:5c:99:dc:5b:2e:20:ef:64:7c:13:7b:41:
         85:12:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:18 2025 by rpki-client