Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c40fd72-07c0-4040-9d7e-539a5d35134b.roa
File:                     1c40fd72-07c0-4040-9d7e-539a5d35134b.roa (raw, json)
Hash identifier:          PKKB0ErbpQYIe3rnKdvqiUK33gmuht0X6LL3GXT3A4U=
Subject key identifier:   B8:42:F0:1F:02:9E:BE:B8:DA:7D:38:82:F8:3D:22:2E:53:19:83:29
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       01D7E8A249F8CD832828B8349BF3AE874A722301
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c40fd72-07c0-4040-9d7e-539a5d35134b.roa
Signing time:             Fri 26 Sep 2025 01:44:47 +0000
ROA not before:           Fri 26 Sep 2025 01:44:47 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d7:e8:a2:49:f8:cd:83:28:28:b8:34:9b:f3:ae:87:4a:72:23:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:44:47 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=267ab17271c048b76642913cfcfda61f6bdfdc8ebd667856f855f69f59ba830e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:2f:61:29:a1:50:fd:8e:75:9b:0b:50:85:
                    c0:4e:41:01:cd:fa:67:99:f8:a1:ee:3f:97:d2:6e:
                    cf:6b:97:51:e7:6b:22:41:bd:54:11:8f:17:75:dc:
                    8c:46:88:f7:c1:4a:e0:4b:46:2a:43:d4:f5:52:ec:
                    66:ae:29:87:73:79:14:39:aa:0e:02:46:38:23:cd:
                    05:a8:de:c6:1f:84:58:c4:8f:15:a0:09:2c:98:16:
                    56:36:e8:06:2a:91:2a:08:95:0d:a7:75:a3:2e:78:
                    d1:d7:01:82:ba:0c:c3:9e:40:9a:8e:21:c5:06:e6:
                    56:c9:37:36:0e:f5:ab:86:48:b0:3c:1e:53:81:d0:
                    10:8e:54:14:a7:86:32:6d:da:ae:31:e8:35:dd:04:
                    6e:b0:19:2f:bf:1d:0f:0e:0f:ab:95:ad:52:a5:a1:
                    96:4c:6b:23:d6:33:5d:b4:36:24:43:3b:13:2c:ce:
                    80:cd:2e:b6:a3:fa:c7:3f:8b:9b:29:12:b8:19:8a:
                    f4:27:6e:12:7f:93:53:8e:c5:b8:43:61:7f:7b:44:
                    ce:81:f7:84:83:30:33:2a:e8:ca:37:a3:31:bf:2a:
                    7b:e3:01:a5:b7:3e:3f:8d:10:4d:0c:57:b0:33:48:
                    ca:ee:69:46:c2:0b:02:60:f9:e2:22:17:ec:f6:71:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:42:F0:1F:02:9E:BE:B8:DA:7D:38:82:F8:3D:22:2E:53:19:83:29
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c40fd72-07c0-4040-9d7e-539a5d35134b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:10:39:4a:ff:ff:f0:56:04:98:8c:7d:bc:20:1e:5b:63:
         4b:01:f6:2f:d6:89:e4:52:56:5c:e2:a6:59:06:d9:f8:37:ad:
         4f:c4:b7:ac:5c:d3:c2:77:9d:71:39:7d:73:66:05:04:fe:c3:
         04:dd:6b:eb:a1:a0:a7:70:ec:4f:e0:20:fa:bc:92:72:e0:b2:
         59:07:e6:74:a0:32:bb:1d:ec:57:31:73:9b:a2:7a:78:7a:dd:
         09:35:a2:b1:30:38:cd:28:0c:14:49:b0:f4:5d:05:4d:ab:73:
         a0:05:57:bf:66:0c:39:41:45:6a:29:fb:04:f3:7d:45:8b:d0:
         da:87:43:fc:32:9b:00:fa:9d:91:c6:e0:0b:e0:f0:8a:47:4d:
         22:51:3e:32:ff:99:3c:b7:de:43:35:b4:9c:2d:b1:e7:ad:c4:
         3d:12:0f:9f:f5:84:09:7b:37:84:29:12:5f:b6:da:f2:4e:dc:
         95:ee:24:21:f9:1f:20:fc:24:e1:71:74:8e:68:24:9f:db:ba:
         e1:36:42:bf:21:87:4a:c1:71:28:ec:29:74:77:0a:ea:d8:72:
         fb:d7:1a:3d:7d:01:d8:31:1d:41:b5:03:3d:1e:92:e2:82:e5:
         97:ec:d6:fb:08:78:c0:63:e7:e0:cb:17:f5:7a:ef:b8:11:a8:
         7a:36:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:00 2025 by rpki-client