Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242aa284-d9a6-416a-8f7b-4e4fd11763b7.roa
File:                     242aa284-d9a6-416a-8f7b-4e4fd11763b7.roa (raw, json)
Hash identifier:          uOOOf4xgHjX/br9UY2RvoKNWdxwvWuFZ+dUsRVKvY3M=
Subject key identifier:   32:FC:F2:97:FA:DE:18:D2:60:62:81:F7:72:AC:3E:CC:B2:B4:F8:2A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73B5EB39580B25FB0D2611DBBC868DCE0EE797
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242aa284-d9a6-416a-8f7b-4e4fd11763b7.roa
Signing time:             Thu 25 Sep 2025 17:17:05 +0000
ROA not before:           Thu 25 Sep 2025 17:17:05 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b5:eb:39:58:0b:25:fb:0d:26:11:db:bc:86:8d:ce:0e:e7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:17:05 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=534170dade48a0fba4cf679331b3bf8a6584c1868960d13a86245ea627c99270, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:8e:15:1e:37:c5:0b:70:32:dc:2b:27:e2:
                    44:0a:cd:75:02:68:39:ee:ad:e8:58:e2:44:59:06:
                    88:66:db:f6:a3:d7:c1:97:13:9f:17:a9:31:91:12:
                    8d:b1:58:83:8c:14:0c:a1:e2:52:3c:57:fe:83:ce:
                    08:ac:1c:ba:14:db:92:6b:f9:cc:aa:43:38:26:38:
                    3d:4e:dd:c5:45:fc:89:0f:f8:4b:30:96:28:e2:c1:
                    a7:00:ac:b2:4b:12:ab:dd:ee:aa:5e:60:45:b6:2b:
                    18:cf:e4:83:0c:cf:43:5b:c0:10:20:82:ff:b1:52:
                    4e:d9:90:71:c2:07:24:21:ef:b0:ff:99:69:1d:42:
                    b7:6b:93:40:94:30:2b:08:af:d4:a8:e9:f2:da:b9:
                    db:c1:5e:a5:bd:4d:68:fe:5a:e8:3f:48:7a:eb:f0:
                    23:78:da:a6:5c:c8:64:f5:f6:6f:7e:a0:1f:e3:9a:
                    5d:ba:7b:61:e0:78:99:9e:f7:50:8d:fd:d2:5e:94:
                    25:6a:fc:b6:e7:d6:a9:ab:73:db:33:c1:d8:7e:11:
                    53:d1:55:0d:89:f8:40:42:e2:9b:d2:92:8b:c6:a3:
                    c0:c6:66:fb:cc:9d:fc:20:b7:6f:90:16:16:3e:22:
                    06:92:9c:5d:39:2e:17:f5:c9:45:fd:14:5e:54:3c:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:F2:97:FA:DE:18:D2:60:62:81:F7:72:AC:3E:CC:B2:B4:F8:2A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242aa284-d9a6-416a-8f7b-4e4fd11763b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ed:16:36:77:82:7e:fe:d8:54:e9:de:e0:c6:33:bb:b7:a9:
         62:1d:62:e2:8e:dd:10:1e:b5:6f:0f:7b:38:f7:ff:9a:c0:02:
         35:a8:34:18:59:f9:20:55:63:bb:de:63:05:d0:24:91:e3:4c:
         9a:70:97:5b:c1:a2:52:72:36:0c:e1:57:36:f1:00:5c:7b:7c:
         e8:6e:73:07:8f:e1:d7:bc:41:9d:19:05:1d:0d:a1:a1:c7:89:
         ac:c9:3c:02:af:d0:8e:15:e5:10:a3:91:56:87:e5:89:3c:de:
         52:41:c8:5e:78:06:0b:a8:21:a5:08:0e:63:2d:bf:88:af:3e:
         89:be:c4:a7:08:27:ed:86:fe:d9:93:7b:94:64:87:78:c3:df:
         61:74:07:79:41:43:21:d2:3a:84:15:9c:fb:98:7c:c5:62:3b:
         a0:21:5d:40:62:74:8f:49:ee:62:8b:76:65:42:03:a2:5d:ff:
         26:74:77:e3:d3:06:6e:b9:c2:ec:31:8c:57:ff:d8:a7:78:b2:
         46:9d:1d:b3:01:92:15:0d:98:4c:7e:b6:e4:de:43:16:42:99:
         98:7e:36:2b:26:ff:0c:a2:9b:c3:29:34:a2:af:61:08:5a:70:
         ae:6c:14:3e:d8:f5:2f:89:eb:35:e7:03:21:4b:eb:7f:67:a4:
         c5:07:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:06:16 2025 by rpki-client