Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0cd176-b151-4eac-8b39-ae4281b0de65.roa
File:                     0f0cd176-b151-4eac-8b39-ae4281b0de65.roa (raw, json)
Hash identifier:          S0T7SC/teNCKJNso/7tHZhIWGI07fUMjq1m0jS/AezY=
Subject key identifier:   A7:C5:60:62:71:75:00:E3:0C:C5:29:B6:67:7C:70:4D:27:69:3F:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7BDBEE1433EB1B32C67E93C603A08B6B18F0295A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0cd176-b151-4eac-8b39-ae4281b0de65.roa
Signing time:             Thu 25 Sep 2025 19:42:26 +0000
ROA not before:           Thu 25 Sep 2025 19:42:26 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:db:ee:14:33:eb:1b:32:c6:7e:93:c6:03:a0:8b:6b:18:f0:29:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 19:42:26 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=a85a42032f4ad541081b1c3bbfef8ce95c52bca7fd378b9de8f9bb3510ecf2de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:18:fc:82:ed:1d:89:f3:95:43:18:36:90:
                    b2:3e:2d:e6:b2:67:5a:87:96:90:b3:d5:ef:e9:9c:
                    68:b0:67:c0:b2:95:59:f9:b9:dd:76:15:4a:08:bb:
                    8f:4a:fa:7f:c6:66:33:c2:37:69:8c:e7:46:0c:c0:
                    6e:7a:78:c5:39:d7:7d:94:55:52:d1:73:9d:b0:28:
                    2f:29:94:b7:6c:5d:51:5b:b7:5b:4f:fb:57:3c:c0:
                    51:9b:91:82:a2:cb:9f:eb:24:dc:68:be:88:41:71:
                    19:35:77:97:60:ba:b4:8d:39:6b:ff:28:e0:5a:68:
                    33:c3:89:a9:46:40:16:f6:b7:73:ad:66:fc:dd:de:
                    28:bd:3f:a0:5e:82:9e:48:bb:cb:a5:99:89:80:63:
                    96:a9:ef:56:e6:6c:26:cd:20:20:56:f1:25:61:c8:
                    d9:12:9f:01:56:48:af:c4:2d:13:64:d8:03:c0:d0:
                    aa:40:f2:cf:ad:ac:a5:3c:bd:b8:e7:28:2d:4a:c1:
                    21:a7:5d:2c:0f:39:2a:07:32:77:bd:56:2e:06:47:
                    1a:3a:6d:d9:18:8c:ab:61:6e:73:73:c2:4f:2d:55:
                    1e:bb:eb:69:96:b8:52:73:28:e6:77:21:88:23:35:
                    cd:48:64:f0:b2:c6:61:d2:ea:58:f1:1f:62:ab:92:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C5:60:62:71:75:00:E3:0C:C5:29:B6:67:7C:70:4D:27:69:3F:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f0cd176-b151-4eac-8b39-ae4281b0de65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:ae:31:80:06:71:3b:f8:25:34:e1:c7:39:8f:b0:ef:3c:
         58:dc:e6:2b:88:3f:d9:34:d0:4f:b7:b6:8e:78:82:78:e7:19:
         f6:e9:fe:3b:8e:a4:b6:b1:f8:59:82:92:06:af:73:37:43:91:
         f4:ad:25:a1:b0:93:d3:be:9a:5c:3c:e2:31:7a:aa:a1:07:66:
         40:fe:91:26:f4:38:24:50:a7:53:bc:5b:87:4d:d2:37:a0:2b:
         7d:57:ae:e1:5d:af:32:f9:a4:10:9c:25:28:06:63:a4:1f:c3:
         89:fb:ac:6b:c6:7a:90:02:94:69:74:c4:d0:f1:ac:1a:06:3a:
         22:98:a8:40:e1:7c:0b:12:57:97:fb:cb:ae:70:da:16:4e:98:
         cf:c2:ef:eb:08:e2:2e:e8:a9:51:d5:0b:fb:de:b9:37:dd:39:
         17:91:dd:f3:8c:d7:df:dc:b1:22:b2:1d:09:1d:35:ec:9b:df:
         1e:98:64:19:2c:28:43:41:87:02:f1:60:ed:87:13:c8:25:18:
         7e:f7:27:ad:88:4d:f6:9e:70:10:71:82:e8:58:e7:3f:d1:07:
         20:d5:6d:50:81:d4:16:94:95:45:b9:6c:01:76:8c:85:fa:2a:
         bf:f7:82:92:d1:9c:db:8b:df:53:0d:b3:73:d8:ff:5c:2c:15:
         06:35:ac:f3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe9vuFDPrGzLGfpPGA6CLaxjwKVowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTk0MjI2WhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhODVhNDIwMzJmNGFkNTQxMDgxYjFjM2JiZmVmOGNlOTVj
NTJiY2E3ZmQzNzhiOWRlOGY5YmIzNTEwZWNmMmRlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9CBj8gu0difOVQxg2kLI+LeayZ1qHlpCz1e/pnGiwZ8Cy
lVn5ud12FUoIu49K+n/GZjPCN2mM50YMwG56eMU5132UVVLRc52wKC8plLdsXVFb
t1tP+1c8wFGbkYKiy5/rJNxovohBcRk1d5dgurSNOWv/KOBaaDPDialGQBb2t3Ot
Zvzd3ii9P6Begp5Iu8ulmYmAY5ap71bmbCbNICBW8SVhyNkSnwFWSK/ELRNk2APA
0KpA8s+trKU8vbjnKC1KwSGnXSwPOSoHMne9Vi4GRxo6bdkYjKthbnNzwk8tVR67
62mWuFJzKOZ3IYgjNc1IZPCyxmHS6ljxH2KrklzPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUp8VgYnF1AOMMxSm2Z3xwTSdpP1wwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBmMGNkMTc2LWIxNTEtNGVhYy04YjM5LWFlNDI4MWIwZGU2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADqTwwDQYJKoZIhvcNAQELBQADggEBAH30rjGABnE7+CU04cc5j7DvPFjc
5iuIP9k00E+3to54gnjnGfbp/juOpLax+FmCkgavczdDkfStJaGwk9O+mlw84jF6
qqEHZkD+kSb0OCRQp1O8W4dN0jegK31XruFdrzL5pBCcJSgGY6Qfw4n7rGvGepAC
lGl0xNDxrBoGOiKYqEDhfAsSV5f7y65w2hZOmM/C7+sI4i7oqVHVC/veuTfdOReR
3fOM19/csSKyHQkdNeyb3x6YZBksKENBhwLxYO2HE8glGH73J62ITfaecBBxguhY
5z/RByDVbVCB1BaUlUW5bAF2jIX6Kr/3gpLRnNuL31MNs3PY/1wsFQY1rPM=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:17:25 2025 by rpki-client