Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/117676a5-7e1d-4ceb-a4ff-ef32b61583eb.roa
File:                     117676a5-7e1d-4ceb-a4ff-ef32b61583eb.roa (raw, json)
Hash identifier:          3UyYao37uveLg/2Jn8DkulVIqoQlrJRnYROeF0ZcaZQ=
Subject key identifier:   3F:EA:BE:D3:A6:F1:60:75:86:52:F2:FD:67:9D:F4:9E:2F:5F:BA:0F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F47D7E27208138A54CCC91414B543D8D453F369
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/117676a5-7e1d-4ceb-a4ff-ef32b61583eb.roa
Signing time:             Thu 25 Sep 2025 18:29:14 +0000
ROA not before:           Thu 25 Sep 2025 18:29:14 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.165.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:47:d7:e2:72:08:13:8a:54:cc:c9:14:14:b5:43:d8:d4:53:f3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:29:14 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=c6e7e0b448c1b74bb526d8449894cf58d98a13d3deaf3843074ff126e227f539, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:41:26:77:69:f3:44:1e:6e:d4:02:dc:4c:
                    f1:bd:51:c9:ec:42:50:65:a2:e7:20:47:7b:4d:d3:
                    6e:cc:74:6c:d3:20:dc:16:2b:4c:66:e4:b6:ce:37:
                    e3:79:15:60:71:dc:9c:7c:3a:fd:e5:6d:1f:2a:f2:
                    ec:d7:be:4b:18:b6:1c:fe:2e:8f:6f:23:5e:2a:09:
                    e7:c0:4a:51:24:9e:6a:0f:f7:bb:db:76:55:08:05:
                    ee:c5:1a:e3:1b:2f:08:a1:a1:a5:40:95:41:85:12:
                    d5:9a:7f:e8:be:07:84:30:7c:de:b9:73:21:fe:4d:
                    e2:c8:a4:a4:bf:61:8c:6c:38:b3:c0:f7:88:49:2d:
                    ac:6b:0d:e6:a9:a8:ac:0e:89:6d:6d:41:26:e8:a3:
                    b3:98:42:6e:b0:86:a6:ed:b6:0b:05:90:69:0a:ba:
                    df:8a:d3:c4:a1:eb:1a:d0:01:47:fb:2b:4b:88:18:
                    28:94:7f:6c:62:bf:5b:94:60:a4:e3:57:62:9d:d2:
                    dc:07:c0:10:c5:6f:98:22:06:b7:f8:7d:ee:99:93:
                    34:61:80:0e:9e:ac:b2:ee:41:ff:61:33:e8:59:cc:
                    9d:cc:af:78:71:75:94:3b:79:da:d1:88:fc:6a:13:
                    34:a5:37:52:12:fa:b6:c4:aa:96:38:6f:ff:ad:be:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EA:BE:D3:A6:F1:60:75:86:52:F2:FD:67:9D:F4:9E:2F:5F:BA:0F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/117676a5-7e1d-4ceb-a4ff-ef32b61583eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.165.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:a9:fe:c2:d3:58:b3:90:a8:08:65:fd:1b:f8:03:3f:cf:
         ca:d7:6c:b5:2a:e4:c2:36:35:6f:63:0a:9a:41:ee:bb:3a:26:
         df:9e:5b:7e:6c:dd:97:e8:2d:a2:bc:b4:b7:6c:6a:97:5a:83:
         61:80:ca:54:c8:8b:38:e7:9f:b8:5d:11:08:cb:04:30:35:fe:
         4d:aa:61:5f:c2:1b:6d:31:39:6b:79:ef:38:9b:35:61:99:30:
         6e:54:c7:40:a8:c9:fa:58:27:91:f2:ba:2b:02:cf:80:88:93:
         e9:33:e4:8e:c1:bb:49:ca:a1:79:05:13:77:d2:82:92:66:b2:
         c0:4f:1d:5e:cb:38:f1:ab:dc:b4:aa:f9:0b:d7:58:a3:15:fa:
         62:36:52:20:a1:72:44:22:21:ae:a2:26:de:9e:99:ad:ec:47:
         a3:6f:e8:f2:65:06:20:8a:f7:4e:cb:2f:bd:be:e0:8a:48:ce:
         82:e9:b6:0f:b2:67:d6:df:67:f8:47:cb:4d:ca:a8:6b:91:ae:
         f1:9c:c7:81:e3:0d:a5:06:98:7b:67:c3:48:7b:d3:4a:89:38:
         19:61:8c:18:96:f1:48:72:0f:e9:75:4a:e7:0a:ae:b0:e4:ff:
         69:bd:de:22:ea:26:5e:87:a5:6d:8b:a4:21:e2:fb:8d:ab:72:
         2a:fe:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:19:24 2025 by rpki-client