Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e454ac4-50dd-49d7-b072-8cb8149f59f5.roa
File:                     1e454ac4-50dd-49d7-b072-8cb8149f59f5.roa (raw, json)
Hash identifier:          +ZZup9HZyHSyJvDY81Bb37MDXArvo9Eie3Znra+dSO0=
Subject key identifier:   85:1F:B0:D7:A0:A7:65:35:EF:19:2B:C3:D6:A6:A6:6D:CC:E1:DC:F7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       07CCA7E8693266F36EFC052FA7BCC022D2FBFA09
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e454ac4-50dd-49d7-b072-8cb8149f59f5.roa
Signing time:             Thu 25 Sep 2025 17:32:06 +0000
ROA not before:           Thu 25 Sep 2025 17:32:06 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cc:a7:e8:69:32:66:f3:6e:fc:05:2f:a7:bc:c0:22:d2:fb:fa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:32:06 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=053baa3fba9764e13715bd0cbb06e4492c0c968f8b625e37ccb133db5359c0c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:05:4c:d0:25:f5:0a:5a:cd:7c:a9:4a:f0:
                    b7:ff:cb:1d:9f:df:1d:3b:ec:fc:cf:d5:63:64:f9:
                    a9:c1:7c:52:15:b5:5d:33:9e:33:74:27:1b:b6:52:
                    c6:81:90:67:fe:5f:fc:57:b5:54:c4:a3:f0:a3:62:
                    e0:b7:ab:5b:f3:92:63:74:50:9a:f4:15:b2:7f:a0:
                    e4:2a:62:91:21:f2:52:08:f7:88:da:63:8e:44:03:
                    d1:c0:84:9a:13:64:6f:5f:24:4d:5c:a6:f5:b9:c1:
                    16:d5:ba:5a:bf:9b:d0:ee:b7:e9:09:a4:f2:39:44:
                    53:f9:1b:6a:82:ff:77:95:18:35:9e:08:38:96:70:
                    16:75:e0:6d:b2:b6:37:2c:07:c0:59:c9:9b:88:13:
                    3a:ae:ab:89:79:30:81:f2:d2:2b:5d:2e:1d:5c:04:
                    30:8f:38:0f:e6:46:ea:e8:ea:a5:e7:70:8e:99:e2:
                    87:58:9d:38:cc:ae:78:1b:3d:2f:f8:da:56:65:52:
                    7c:63:63:06:3a:10:7b:c8:01:b8:97:e3:c3:ee:5a:
                    1e:cc:b7:c7:81:2a:ff:ca:01:a5:33:22:2f:8b:e3:
                    27:49:2d:db:4b:ce:d0:a5:60:9e:01:44:d9:cf:32:
                    c5:f2:22:82:fc:c3:d7:bd:84:0d:21:b3:3a:1b:3b:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:B0:D7:A0:A7:65:35:EF:19:2B:C3:D6:A6:A6:6D:CC:E1:DC:F7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e454ac4-50dd-49d7-b072-8cb8149f59f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:f5:9e:7a:18:0e:0e:bf:6c:56:1d:d5:04:d0:25:c6:98:
         d3:e6:92:78:e4:09:1d:6f:06:80:ba:94:9c:ae:ea:dc:6e:41:
         9c:51:ea:00:e7:93:09:27:c0:12:9d:f6:30:76:0d:40:ab:2a:
         f4:28:7b:57:94:e3:51:c2:e4:99:4b:77:3c:40:fb:b1:4d:3e:
         dd:e5:35:c3:9b:c7:4e:60:d9:2b:2a:71:c8:dc:2e:d7:9f:33:
         97:19:a7:5f:d0:fb:92:dc:fc:50:ed:f8:eb:8d:0a:17:cb:29:
         8c:5e:eb:5e:88:c1:08:74:af:9a:2b:95:3d:c4:cd:09:b3:fc:
         f9:8f:97:7d:9d:bb:8b:25:f6:71:ca:c5:a3:36:c5:19:c5:ad:
         c2:42:de:89:36:e1:8c:19:51:b0:e0:dd:56:c2:b2:ac:38:f4:
         c5:eb:ba:e0:ae:13:a9:ea:5e:dc:6c:21:8f:ec:20:32:99:19:
         fa:fb:04:2e:32:bc:7d:c6:ea:03:a8:2e:31:c7:3b:f2:84:30:
         df:2a:4b:f3:08:71:bb:ee:f7:61:b2:b8:92:05:19:ee:9c:10:
         91:bf:a0:81:cc:fb:6a:b8:4c:5a:49:74:07:a9:44:4b:f2:76:
         e1:24:c2:45:34:5e:59:cb:69:ae:ad:63:59:4a:9f:fb:a1:d3:
         c5:be:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:12 2025 by rpki-client