Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00f48c4e-3ca7-4d3e-aaa8-a9a6cc01b954.roa
File:                     00f48c4e-3ca7-4d3e-aaa8-a9a6cc01b954.roa (raw, json)
Hash identifier:          0eO/hU9bOZye9qHrd/JCxkeN0BeDPGBxAtaBeEppeQo=
Subject key identifier:   D4:D5:AB:ED:7A:FD:5D:03:68:3A:B5:47:0F:C1:76:7E:C2:AF:27:B8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       365ED1B807D3F6B47D3E699B5AF1ABC80A64DAFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00f48c4e-3ca7-4d3e-aaa8-a9a6cc01b954.roa
Signing time:             Fri 26 Sep 2025 02:15:27 +0000
ROA not before:           Fri 26 Sep 2025 02:15:27 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5e:d1:b8:07:d3:f6:b4:7d:3e:69:9b:5a:f1:ab:c8:0a:64:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:15:27 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=41b3f9f2b11cef3008d9deee0f0fcff0bc43a5afdd431123920983d570795926, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:36:7d:70:ca:fd:1f:b5:d4:08:99:32:7f:
                    56:4b:79:c7:d0:11:b6:25:b2:78:90:ff:24:9c:0d:
                    83:da:20:95:bb:54:89:25:d6:0b:cd:f8:87:0b:15:
                    a5:d0:44:46:18:7b:57:bc:34:36:ef:0a:1b:c7:8a:
                    31:f0:20:51:fd:a3:8c:9c:b8:64:6c:63:8f:e7:92:
                    27:5c:9b:86:65:4b:15:af:72:55:81:17:88:be:86:
                    54:b4:fc:49:9a:95:17:bd:45:52:8d:e9:60:a2:0e:
                    ac:4d:b4:76:d5:63:ba:0f:50:a7:ba:2d:9b:33:83:
                    8b:b8:45:fc:bf:58:e0:26:7d:93:e3:bc:b8:71:0a:
                    46:58:4b:62:48:bd:8c:61:25:ac:ae:07:37:cd:24:
                    a3:c9:a8:11:df:a3:0d:6e:bf:21:a8:bf:f2:e6:84:
                    bc:5b:81:9c:c9:fa:23:29:ce:08:56:6c:6b:99:68:
                    83:00:cd:74:f8:12:bf:14:b1:eb:d5:b5:65:0d:37:
                    1f:5e:c2:39:da:fa:70:09:41:0f:3a:c2:71:36:a4:
                    5e:78:90:85:80:8e:0b:3d:a3:41:03:4e:6d:c5:b1:
                    f6:7d:dd:0c:1a:89:64:89:d7:53:c9:c2:8a:4f:54:
                    9a:9b:3e:01:7a:c5:b2:af:6c:62:05:1f:b7:1b:31:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D5:AB:ED:7A:FD:5D:03:68:3A:B5:47:0F:C1:76:7E:C2:AF:27:B8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00f48c4e-3ca7-4d3e-aaa8-a9a6cc01b954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:92:28:e5:88:99:c3:d8:de:c5:8d:92:86:bf:82:7c:2e:
         55:0f:cc:c4:5b:bb:b9:5d:ff:ff:2e:07:f3:a4:7a:e7:2d:84:
         f6:03:c9:0a:3e:0e:bc:b2:e1:f7:90:ae:61:6c:e1:1c:b4:da:
         e9:90:d4:3d:52:0d:ce:47:ef:85:6b:88:a2:d4:3a:08:4d:2e:
         b3:16:57:cd:aa:41:58:a6:6d:8a:bd:44:16:bc:97:13:5e:c3:
         75:a3:e7:a1:74:e2:49:25:db:2f:23:90:02:37:3e:0e:d7:e7:
         79:f1:93:bb:9b:0c:b5:9b:52:72:49:0e:26:10:ed:21:5f:50:
         88:b9:59:e8:41:3d:97:8e:44:b5:c5:a6:15:21:09:7d:a3:98:
         c6:98:5f:69:2a:c4:e7:32:07:3b:03:a8:50:aa:b8:f2:a6:1d:
         8c:2b:85:71:45:e2:dd:21:41:76:44:37:6c:55:3f:0e:c0:ba:
         29:60:6f:91:e0:f2:c7:53:d9:79:2c:0b:cc:71:8b:43:2e:0c:
         2d:2f:14:38:7c:b1:43:24:8d:1a:bd:3c:70:3d:34:89:e3:dd:
         e1:3c:9f:a4:ad:a1:71:a1:4b:95:69:99:f3:e7:df:54:5a:92:
         16:03:52:3f:d8:9b:c2:46:a0:6b:72:5c:8a:3b:7a:11:6b:df:
         ae:34:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:11:54 2025 by rpki-client