Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/154d044e-54e1-45cf-9fb0-f2a0f0e0b623.roa
File:                     154d044e-54e1-45cf-9fb0-f2a0f0e0b623.roa (raw, json)
Hash identifier:          c6wTS58wTVTgCfTxvK0U7DKJsxQy9vYSWyFcchqHN+U=
Subject key identifier:   5D:7A:6D:5A:C5:27:E8:34:BF:B3:59:E7:51:D8:55:0F:03:4D:85:79
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       68D09B6B790BA8769851BC982DA255A61EE3DDAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/154d044e-54e1-45cf-9fb0-f2a0f0e0b623.roa
Signing time:             Thu 25 Sep 2025 20:22:30 +0000
ROA not before:           Thu 25 Sep 2025 20:22:30 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.172.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d0:9b:6b:79:0b:a8:76:98:51:bc:98:2d:a2:55:a6:1e:e3:dd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 20:22:30 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=9481f4977ea7fc8f51ea73974e9ca8c4c91f7db539bf98c26fc4780a947cbb51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:e9:5b:ff:2f:07:89:55:4c:ee:32:72:4f:
                    dd:ed:09:40:8a:b7:ae:ad:96:81:97:21:2b:cc:83:
                    1a:03:86:13:8b:37:3c:22:a7:af:59:b2:9a:f8:64:
                    02:f7:71:31:0e:c7:0f:da:51:a3:4b:c2:4a:ed:ea:
                    5f:bb:22:7a:e3:5b:d4:ca:d9:ed:4b:e7:2e:e2:9e:
                    1d:da:5f:e9:3a:19:95:74:81:24:8d:63:23:9c:14:
                    57:66:4e:c1:4e:3e:6a:9c:ef:bd:c7:89:c7:de:ea:
                    89:38:96:99:96:a7:a3:d4:c4:51:00:9a:23:5a:89:
                    19:5b:9b:59:7f:36:66:b7:86:bf:e3:73:90:90:2e:
                    07:07:f9:f6:0a:fc:df:a3:5a:21:62:51:8f:95:9a:
                    d1:ae:73:31:14:86:42:27:3f:f2:da:92:49:cb:c1:
                    bb:9f:bc:ac:9e:31:09:02:5e:ea:d2:dc:9f:65:f5:
                    aa:ef:51:bc:0e:25:c4:87:82:0d:c8:a3:76:fc:f6:
                    4d:ef:3c:50:ea:72:00:11:b9:4b:cd:65:71:ac:aa:
                    80:23:6c:e6:f1:59:f2:58:5c:54:96:11:b7:76:3c:
                    77:20:69:1c:9f:66:67:3d:65:a0:06:77:87:e4:2f:
                    2f:ad:ca:99:4d:44:25:67:e7:e6:ea:36:7a:ed:e3:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7A:6D:5A:C5:27:E8:34:BF:B3:59:E7:51:D8:55:0F:03:4D:85:79
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/154d044e-54e1-45cf-9fb0-f2a0f0e0b623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.172.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:a8:aa:1f:ee:20:c9:55:9f:cc:00:f2:11:f4:e4:88:0f:
         61:cf:9a:4c:2e:b1:4a:7c:43:c7:91:dd:f4:10:94:77:93:9d:
         4d:91:91:8f:e7:31:8f:1f:8d:f1:92:4a:d1:be:57:86:b0:de:
         71:7e:af:5b:d9:bc:96:0a:99:9e:35:cd:c3:f6:9d:ea:af:b3:
         6e:79:72:d2:ea:0c:ad:93:b3:7c:a6:50:24:bf:cd:75:eb:0e:
         5d:dc:e0:ed:76:fb:4b:f0:30:e7:18:26:fe:68:24:9b:ab:fc:
         b2:e0:18:3c:21:30:17:40:09:59:dd:99:d1:7a:c1:4f:d6:ec:
         7f:ef:e0:e5:dd:09:2c:c7:9e:a2:87:ac:d9:ad:03:cb:92:ee:
         3e:e2:8e:89:17:a2:f5:e6:25:a4:50:b1:ae:ef:d2:c8:93:ce:
         e3:5a:c7:6b:6c:62:65:fd:f9:4a:9b:df:13:0c:0b:95:68:50:
         ad:eb:15:64:1a:9b:a5:8f:2c:8f:d3:a1:05:81:4c:01:65:47:
         f5:77:6e:98:f3:1d:c2:d8:32:73:67:3d:1a:db:de:8b:59:96:
         0b:a3:d9:93:0c:01:23:10:4b:b5:12:6a:d9:a0:20:09:f5:4a:
         3e:65:27:49:54:c4:ab:3b:07:78:51:49:bc:9c:1e:da:f1:ed:
         4c:14:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:38 2025 by rpki-client