Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d2087b-b61a-4d38-aed8-94051d6825f0.roa
File:                     06d2087b-b61a-4d38-aed8-94051d6825f0.roa (raw, json)
Hash identifier:          k/+gDcLBpTvxdYKWAn2W2HqIYa2GDY0PGQWnkSHf70s=
Subject key identifier:   64:A1:30:5E:CF:EB:BD:58:2A:A8:6F:B1:62:2A:F1:0B:3E:A2:F1:6E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       66C796CC648639F179D5AB35360256FF3ED9BE68
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d2087b-b61a-4d38-aed8-94051d6825f0.roa
Signing time:             Fri 26 Sep 2025 00:51:30 +0000
ROA not before:           Fri 26 Sep 2025 00:51:30 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.172.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c7:96:cc:64:86:39:f1:79:d5:ab:35:36:02:56:ff:3e:d9:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:51:30 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=8e16771352b0946997cec83e2133994ecc8bbb899dc423e38e1b003a36b09bca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:8a:46:ef:6a:e0:4e:8c:0e:34:94:8a:b5:
                    61:63:6a:4c:e4:a6:95:4f:67:13:6a:b1:6c:af:71:
                    32:f8:bb:5f:76:f5:e6:88:53:85:bf:45:37:46:8b:
                    33:9d:6b:24:54:7d:5c:d8:8b:c7:ae:7e:4d:56:45:
                    96:ce:33:3f:55:84:93:a2:cb:c4:0b:bc:1e:f2:5d:
                    39:60:be:62:78:81:c7:97:59:a8:fc:eb:cf:fb:a0:
                    8e:e3:be:96:26:cc:08:cb:8b:cd:59:da:8a:73:2c:
                    64:d8:e7:dd:86:9c:1e:10:0d:3b:2a:f3:00:02:5a:
                    d5:42:e1:1f:f0:87:14:31:93:ef:52:2d:17:67:0d:
                    12:3e:28:51:54:35:6f:a3:24:b2:4c:d8:c3:43:2a:
                    27:b5:d3:06:6b:73:4f:b4:2b:20:be:35:f0:c3:ef:
                    a9:b6:21:4e:c6:ad:5e:1d:d9:fa:66:18:99:b5:6a:
                    10:b7:a5:5d:11:db:54:41:49:d4:13:ce:9a:46:f6:
                    d8:b0:e5:32:1d:06:15:36:14:df:53:82:00:57:ff:
                    14:58:5f:d8:fa:58:90:84:b0:61:3e:57:bb:f8:3b:
                    17:9b:5e:e8:3d:13:72:6b:a1:6c:41:37:20:86:bc:
                    8a:dc:aa:29:c2:14:c9:fc:f6:e7:83:9e:0e:52:12:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:30:5E:CF:EB:BD:58:2A:A8:6F:B1:62:2A:F1:0B:3E:A2:F1:6E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06d2087b-b61a-4d38-aed8-94051d6825f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.172.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:a7:ba:3b:60:4c:c8:0c:a1:cb:ef:17:8a:00:16:77:0b:
         8c:69:92:6b:37:e9:69:a6:d4:bd:01:11:b5:bf:be:b5:20:51:
         96:04:a2:42:45:93:2d:78:c1:98:c4:f1:bb:4a:f8:0b:97:7c:
         f4:d6:b7:0a:ba:2a:13:92:b1:a9:b8:c7:54:1b:80:55:02:6d:
         55:9d:ae:59:13:77:8c:a9:6c:7d:c5:b3:1b:90:60:34:54:a1:
         d2:1d:c1:c8:d0:f0:e0:37:b8:a0:81:73:52:8f:35:fe:4f:34:
         d2:19:f2:31:4b:f4:25:df:76:0b:b3:c5:b6:26:53:a4:37:33:
         4e:58:8d:9b:63:e2:b2:be:be:d7:3d:9f:27:68:b9:78:0e:ee:
         e0:91:96:13:fc:34:d6:5d:0c:31:10:89:34:12:c4:e3:b5:c9:
         32:c5:d4:ad:70:88:b4:3d:e8:9b:d7:7e:19:d1:7e:47:d9:c9:
         ad:8d:ea:cc:9b:20:b7:45:1e:4c:c0:51:f2:7d:75:44:26:37:
         86:e2:ce:02:48:dd:2b:61:6c:3b:a3:52:19:24:d6:61:bb:90:
         a8:fe:3b:4b:f7:c5:00:cb:1d:64:6d:5b:94:0d:a0:f8:d7:3b:
         a2:0b:02:27:47:fc:04:26:be:92:f8:c2:cc:34:60:60:85:54:
         33:e5:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:14 2025 by rpki-client