Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa
File:                     1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa (raw, json)
Hash identifier:          mpFlHN6LreyG8/mpGTfaUsxouh7pT8Zn5G62cUQEqP4=
Subject key identifier:   21:6C:87:D6:0F:D8:0F:BB:E4:43:B0:AB:F6:4B:C2:8E:32:7F:11:8D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6F9E18DE40E73323F48977B7D54012E161E8DEF3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa
Signing time:             Fri 26 Sep 2025 01:42:15 +0000
ROA not before:           Fri 26 Sep 2025 01:42:15 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9e:18:de:40:e7:33:23:f4:89:77:b7:d5:40:12:e1:61:e8:de:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:42:15 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=db7d70efaef25b4d2e2e1a7700ce91ec82d876150dcc65a1019864dc14e6ae2b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:ad:da:29:eb:b4:6a:21:cf:af:59:0f:24:
                    b6:5b:4d:b4:80:28:ff:8e:f0:cb:77:cd:77:89:ad:
                    ac:f5:95:73:64:79:47:9c:22:ff:f7:40:d1:24:53:
                    ed:65:f3:7a:75:01:e1:c9:7e:75:69:0a:f4:3f:1c:
                    08:5d:1f:6d:ab:80:1e:6e:d3:b3:42:83:11:88:32:
                    a0:87:96:b5:cd:ae:34:6d:74:43:d7:35:3f:ea:84:
                    1f:46:0b:af:f2:a2:3d:f5:79:df:65:a8:5d:97:86:
                    81:f8:97:28:a9:31:a7:8e:2f:3a:7e:d0:a1:ab:7e:
                    4c:9b:8e:2f:45:39:17:fb:62:87:e2:e7:07:05:65:
                    9d:a6:f1:c9:0f:3f:d2:20:29:f7:ba:c8:c9:30:6c:
                    52:f6:f7:06:5f:4f:d4:e7:00:62:a3:d5:a9:6d:4d:
                    d0:b9:21:5c:e9:f2:0b:9a:21:d5:d4:11:c1:11:14:
                    c8:97:e1:d4:7f:7b:86:8f:8b:3e:90:70:49:e8:fd:
                    44:2c:ff:4f:a5:07:78:09:5f:2e:db:44:7a:d2:53:
                    23:f9:e8:0d:5e:84:cb:ff:05:81:cd:72:5d:aa:da:
                    29:69:60:40:57:3c:1d:84:79:5d:90:0a:41:55:d1:
                    94:49:18:b6:1e:c5:ef:47:af:c4:fa:c6:ac:d7:66:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:87:D6:0F:D8:0F:BB:E4:43:B0:AB:F6:4B:C2:8E:32:7F:11:8D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e41b0a0-d786-46e1-a9af-4ddcc1c967ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:de:d4:92:1b:d7:bd:83:4b:7f:29:fd:a1:87:8f:39:c5:d5:
         6a:ba:c2:f3:a7:f8:13:e6:c4:72:1c:d2:ad:55:80:6b:d0:3d:
         0d:bd:7c:a6:06:e1:18:91:9e:08:8e:b4:60:21:94:ae:83:cd:
         7c:f3:35:06:ae:01:08:a4:9d:68:d6:b7:20:9e:21:27:09:3e:
         52:88:26:63:b2:24:b7:c5:28:fe:f5:75:3f:ad:1a:48:8d:01:
         52:60:af:ac:9e:32:49:81:97:f7:2f:18:31:ba:05:ee:14:2f:
         3b:1a:f5:0c:57:c2:6c:0b:75:e3:7c:6b:1c:a2:7b:43:9b:58:
         ea:15:d8:65:69:58:ff:22:c6:a8:3e:68:66:83:42:81:7b:81:
         80:77:7b:50:ca:16:51:91:d8:ff:96:47:a3:e4:49:ff:94:73:
         39:78:f0:a1:66:a2:f8:ba:2b:50:07:07:db:7a:2c:bc:35:cd:
         6d:19:9a:1a:3c:ea:c9:49:79:b2:64:f1:74:24:89:77:0c:02:
         15:8c:7e:40:25:dc:51:38:56:99:a3:2a:00:25:2f:78:e0:af:
         cb:6b:2d:2e:4f:ef:fd:82:43:5c:e5:26:6c:c4:c9:fd:58:ed:
         c1:5e:65:04:b4:d9:c8:04:68:64:f4:df:08:b3:3e:d0:c8:89:
         78:28:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:59:43 2025 by rpki-client