Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bdd22a6-bd04-4e95-a057-7a7d33c01ffe.roa
File:                     1bdd22a6-bd04-4e95-a057-7a7d33c01ffe.roa (raw, json)
Hash identifier:          NhN88S//EtSf8rT2mS15p4J4uYAbpf5N3ZQCvAap0Hg=
Subject key identifier:   5B:3B:48:3F:DF:5B:2C:B3:A3:23:5A:EA:9B:67:65:AD:33:54:CF:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4D434E2BB9FF884C5916F2E75B637162E3DBC77C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bdd22a6-bd04-4e95-a057-7a7d33c01ffe.roa
Signing time:             Thu 25 Sep 2025 23:54:43 +0000
ROA not before:           Thu 25 Sep 2025 23:54:43 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.160.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:4e:2b:b9:ff:88:4c:59:16:f2:e7:5b:63:71:62:e3:db:c7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 23:54:43 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=338478675ca26aa327352173279d9fb802eb2ff02bd4dec7353b557648eef293, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:ab:fb:96:c4:16:99:49:15:a0:63:5e:6d:
                    16:88:dd:e2:56:cc:42:85:88:91:8c:b0:a8:eb:55:
                    19:73:20:4a:60:40:96:29:3d:e3:67:dc:de:ff:58:
                    68:2f:79:59:ec:53:09:81:e0:ca:bd:41:8f:34:96:
                    d2:df:c6:99:ba:de:3d:40:b3:cc:e7:db:f1:88:b6:
                    49:76:b5:9a:c2:e8:b1:0f:5d:6c:66:2f:43:35:d2:
                    0a:b7:d8:1e:ed:98:15:ee:92:26:0f:ee:1c:74:6c:
                    95:08:ab:4e:83:66:36:31:6f:63:e8:c7:11:36:c1:
                    02:a0:32:32:25:d8:1b:17:c9:3b:27:87:39:5f:bd:
                    78:39:24:ac:f0:ba:4b:ee:12:53:ef:cc:5d:a6:c2:
                    aa:47:48:ec:bf:14:e1:2f:fd:b7:e0:4b:d8:35:c1:
                    24:40:ea:f3:5c:58:dd:45:c4:f8:73:be:48:cd:97:
                    cf:07:1f:e2:7a:28:90:14:74:ba:1b:a3:d4:84:fb:
                    04:3b:97:8a:17:1b:bf:5d:70:ff:3e:88:89:8d:4b:
                    e1:ab:15:f9:37:69:0d:40:a6:b3:2b:e3:5b:1d:c4:
                    51:cf:31:06:1d:55:d2:bf:fa:b5:80:fa:36:17:1b:
                    68:d8:43:2a:2f:c1:b7:2a:88:b8:f3:46:5a:0b:20:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3B:48:3F:DF:5B:2C:B3:A3:23:5A:EA:9B:67:65:AD:33:54:CF:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bdd22a6-bd04-4e95-a057-7a7d33c01ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.160.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:f9:41:21:7c:b2:2d:bd:6a:e8:d5:d6:be:5e:70:c9:95:
         49:cc:55:e4:b0:db:64:1a:d8:c9:d8:84:3c:38:77:67:5c:7a:
         59:ae:ae:71:35:48:e3:91:a4:db:a9:cc:6c:e2:1d:a5:98:df:
         99:7b:15:0b:fd:8a:a7:27:ad:96:1b:9e:59:12:28:34:69:d5:
         ed:80:b0:15:6b:61:7e:db:e7:9f:e1:b2:34:0a:a1:d6:76:17:
         0e:f0:22:24:8d:6a:76:c5:c5:23:40:e5:af:73:cd:2a:19:dd:
         1b:6c:09:0f:d0:91:79:49:07:6b:78:a7:02:55:d4:5c:f6:13:
         68:72:30:64:60:23:3d:76:c4:a7:3f:34:06:a0:a6:8e:7b:d1:
         2a:94:76:7a:09:8a:07:a2:a7:e2:20:a0:66:94:32:10:81:e3:
         9e:9f:09:f4:65:f9:f4:98:81:b9:61:e0:84:43:14:d1:5c:79:
         e8:81:b7:31:e8:4e:a2:45:44:ee:9a:5e:02:fc:30:88:45:d2:
         36:13:ee:27:cf:a5:4f:56:6f:d1:43:08:63:c2:a2:5d:91:63:
         2b:bc:59:5f:48:db:24:88:75:f5:ab:45:67:c8:ac:66:34:22:
         2e:7b:4f:c7:cb:67:f7:8f:3a:fd:3b:d7:30:bd:8b:88:4d:cd:
         b6:e2:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 04:19:52 2025 by rpki-client