Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4ec082-d52c-4576-b3e9-95b9f149a522.roa
File:                     1a4ec082-d52c-4576-b3e9-95b9f149a522.roa (raw, json)
Hash identifier:          DwfUm10Yle7Z3MkuB9KZKfVXB5Rv9QHppmNzD01Wcsw=
Subject key identifier:   67:F0:FE:52:A5:7E:3E:E0:F1:BC:00:B4:69:92:C0:E0:F2:C8:90:A3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       63FD83388ED62ABFD8F4AD4A1BE036FF4EF6D070
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4ec082-d52c-4576-b3e9-95b9f149a522.roa
Signing time:             Thu 25 Sep 2025 21:51:52 +0000
ROA not before:           Thu 25 Sep 2025 21:51:52 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:83:38:8e:d6:2a:bf:d8:f4:ad:4a:1b:e0:36:ff:4e:f6:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:51:52 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=b99cd45c8af0630d1a962488f9c7046fb560992ed43535b7ada2b2eeaf587603, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:28:a5:26:30:49:a3:0a:44:3c:ea:ca:0c:
                    e8:20:2c:b7:78:bd:67:eb:b9:6e:e7:cd:62:11:9a:
                    de:b5:6c:30:84:da:98:7f:eb:d7:dc:e4:00:3f:96:
                    58:3d:de:52:6b:ea:cf:93:0e:89:5a:54:7f:28:3b:
                    4b:3c:bf:cc:07:ea:f1:36:58:d2:29:09:00:57:26:
                    29:3f:64:2b:53:5a:ff:26:b1:da:c5:78:54:d3:b0:
                    24:d3:32:26:18:f8:b4:10:46:96:bd:67:5f:1a:87:
                    0e:ff:fe:8e:ce:47:98:a3:64:af:0e:70:e7:f5:d7:
                    48:84:b1:97:f2:ce:43:35:d3:93:9c:d2:7f:a2:05:
                    66:5c:1a:cc:f9:9c:ff:ed:81:45:9e:f7:20:eb:68:
                    4a:cf:55:7a:75:65:9b:c4:24:01:a1:39:d5:f8:bc:
                    6d:73:cb:f5:e9:e2:b4:bf:bd:5f:2a:a4:ea:c0:3b:
                    1b:67:b6:43:52:ec:f9:fd:9b:6c:c9:aa:b4:9f:9b:
                    5e:13:51:90:21:54:29:df:d7:57:14:27:42:97:d0:
                    67:23:4a:4c:53:26:a8:5d:01:d3:34:7b:af:48:08:
                    40:f4:6d:d9:d5:21:72:fd:f5:fd:f8:81:1a:d0:f8:
                    de:be:46:98:7e:c8:93:be:40:df:24:a3:16:20:ac:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:FE:52:A5:7E:3E:E0:F1:BC:00:B4:69:92:C0:E0:F2:C8:90:A3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4ec082-d52c-4576-b3e9-95b9f149a522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:05:ea:ff:e7:52:40:20:b9:23:7a:a3:c1:38:9c:c2:a5:
         30:56:93:b8:1d:29:a6:ea:8b:95:ca:0a:8f:6c:46:c4:3c:f8:
         76:42:31:44:30:52:17:a2:2d:92:33:9b:83:a1:ce:90:71:6b:
         2f:98:84:e4:07:e2:4b:55:1e:63:40:ac:91:23:a9:05:5f:90:
         a2:9d:6a:d3:79:7c:7e:89:c2:bf:4b:90:39:81:1a:75:41:84:
         f4:8f:b8:82:f1:43:f0:40:40:b3:01:4a:73:41:c7:37:3e:bd:
         63:87:26:40:83:c6:2d:91:d6:b5:65:38:78:85:86:39:5c:4f:
         94:df:5b:73:3f:cc:01:9d:1f:43:dc:d3:f4:ac:b6:79:a5:77:
         ba:14:60:da:0a:03:0c:4d:70:c0:61:8b:5f:f0:cd:ed:32:35:
         a8:a3:0e:00:89:3b:d5:6a:07:41:5a:0d:ac:94:c4:a1:1b:66:
         a5:7c:57:56:da:78:20:f1:18:fa:4b:16:35:9b:ab:d7:4e:bc:
         9d:4f:de:78:9c:9c:d9:a9:12:d3:3f:c0:d6:b8:c5:ff:f3:81:
         dc:25:a8:79:18:48:12:f4:2b:16:81:27:23:a0:2c:dc:15:a3:
         7b:f0:53:8e:aa:d7:2d:0d:74:e4:88:b8:60:da:96:1c:c0:21:
         b6:a6:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:07 2025 by rpki-client