Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fa80b0b-d6ba-40fa-bccb-b48e18f0c78f.roa
File:                     1fa80b0b-d6ba-40fa-bccb-b48e18f0c78f.roa (raw, json)
Hash identifier:          4AGyw9UBoQiG6XDG6atDZ8hLnoSjDqkZ6tnik0wb9FY=
Subject key identifier:   64:34:3F:11:44:11:4C:C6:F4:CA:B3:69:92:BF:5D:03:F9:67:23:AE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       34EAA8D435BC71EFD18F52D5615445D5DACE4D75
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fa80b0b-d6ba-40fa-bccb-b48e18f0c78f.roa
Signing time:             Thu 25 Sep 2025 18:09:01 +0000
ROA not before:           Thu 25 Sep 2025 18:09:01 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ea:a8:d4:35:bc:71:ef:d1:8f:52:d5:61:54:45:d5:da:ce:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:09:01 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=fe6a942790721939d9c8141cba7d8d1519765461d50ef45b68123e95fa8413e0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:d8:79:31:8e:41:d1:ce:73:55:77:f3:ee:
                    70:a5:13:ee:30:4c:9c:0a:67:ef:35:f5:87:a8:04:
                    a9:04:3f:d0:f4:16:b4:a7:0c:2f:57:30:36:b0:13:
                    df:b8:dc:22:7c:b0:6e:d4:f6:ad:f7:a0:59:18:cc:
                    12:14:95:d1:40:8e:12:6b:b6:6b:42:2c:df:ee:0e:
                    dc:11:d7:51:f2:e8:05:61:0b:d7:ae:4e:14:e5:86:
                    93:44:22:87:1f:38:03:db:bf:e0:65:1d:11:dc:01:
                    79:74:42:cd:3d:8a:2e:e7:63:50:17:31:9d:c8:1c:
                    d8:ff:6d:0b:0a:48:33:80:f0:35:00:0b:b2:79:8e:
                    60:9d:2d:e4:55:31:f4:3c:a8:7a:3d:d8:fd:3e:c4:
                    de:fd:fc:e1:f4:02:46:9c:8f:14:5c:8a:36:3a:0d:
                    44:a9:d4:f9:79:f9:09:14:aa:27:35:75:92:b8:80:
                    c5:9a:e0:e5:0c:0a:06:80:9d:22:83:a6:6c:c7:bd:
                    27:57:6b:5f:48:3f:12:20:64:b6:a9:06:36:9f:de:
                    d0:6d:c2:13:1b:1f:57:4c:a4:80:c7:2d:c4:c8:51:
                    5c:2f:8f:35:53:de:88:60:51:21:b1:11:8a:e9:c0:
                    8f:13:e5:27:80:d2:c3:b9:fe:b2:2a:f9:75:6a:34:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:3F:11:44:11:4C:C6:F4:CA:B3:69:92:BF:5D:03:F9:67:23:AE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fa80b0b-d6ba-40fa-bccb-b48e18f0c78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:1f:56:f3:04:b9:a0:99:3a:fd:38:58:64:95:cf:c9:13:
         22:a0:e0:4a:33:5f:69:bd:60:1b:98:2e:54:be:89:4d:fa:f4:
         b6:ee:eb:df:5d:df:b8:50:46:b9:ad:b9:78:a0:76:39:39:6a:
         e8:76:3f:f5:fb:b8:d1:26:37:ce:29:f6:66:71:a9:4e:c0:35:
         49:61:b9:0b:0f:13:97:82:fd:1c:23:5f:3e:cc:56:c0:20:0b:
         60:95:6e:fe:47:1b:df:4d:10:0d:0f:67:c0:c3:fc:9a:16:af:
         bf:fc:1e:2a:6a:42:54:92:9b:1e:ae:bf:7c:43:05:83:29:d5:
         39:c3:66:d6:c6:f1:54:5b:cc:c0:80:14:d2:cc:22:e0:2b:31:
         65:9d:ec:58:ff:f4:7d:44:c7:79:48:4a:5e:33:06:cf:75:0e:
         87:90:3a:07:78:79:73:0b:91:93:d0:0c:b0:1a:5c:93:f4:b3:
         84:ee:18:33:2c:21:eb:68:02:02:1d:c6:a4:00:8b:87:bf:5b:
         06:c8:3f:70:4f:bf:b2:1a:1c:26:f9:55:ac:09:42:de:15:60:
         1c:dc:88:36:f7:de:dc:50:2d:3c:17:26:6d:bd:79:83:e8:a0:
         b4:dd:e8:31:0b:81:4b:b4:18:27:85:70:a3:19:7e:7a:1b:bb:
         7d:6a:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:12:12 2025 by rpki-client