Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27241cdb-eb78-4c21-b5dc-47ff8930df35.roa
File:                     27241cdb-eb78-4c21-b5dc-47ff8930df35.roa (raw, json)
Hash identifier:          KjYdUegXKmUSdRDrVcbMyQ7BEB1vowCixEm8j1YxvJ4=
Subject key identifier:   F5:E9:D4:85:6A:09:A6:9D:C5:C1:F8:10:3F:DC:1A:C2:6B:F4:10:EC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       77CAB5922A3E931CB44D90BB6C169CF678C8ABE4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27241cdb-eb78-4c21-b5dc-47ff8930df35.roa
Signing time:             Fri 26 Sep 2025 00:18:37 +0000
ROA not before:           Fri 26 Sep 2025 00:18:37 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.165.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ca:b5:92:2a:3e:93:1c:b4:4d:90:bb:6c:16:9c:f6:78:c8:ab:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:18:37 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=7876e48784866b64fcfa182894ff1264067af03df067d8cc321b77e81233f4af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:34:7c:07:5f:82:40:c5:23:23:ab:23:f4:
                    10:9d:e0:23:96:d1:6d:8d:32:f1:3f:83:7b:6b:15:
                    e5:08:b6:07:9e:1e:a7:d0:ef:30:ec:fe:23:75:cf:
                    99:ad:a1:6c:c2:aa:db:9c:8a:2b:3f:ce:b5:11:6f:
                    b5:b3:43:3c:1d:f7:1b:cc:4c:01:03:f4:0d:49:17:
                    37:69:a7:7d:6a:eb:eb:4d:a2:b9:b7:70:94:ad:d6:
                    5a:28:6f:d9:b8:9b:e4:3a:80:09:9d:71:df:95:f8:
                    e1:13:03:39:14:28:55:a6:d4:23:f2:cb:31:e3:ff:
                    a8:ef:0c:03:b4:85:e7:49:bf:84:ce:25:b7:e1:f2:
                    b4:be:c3:7a:c2:8d:d5:c7:6a:62:57:7e:76:c7:44:
                    76:f7:b5:44:5e:b3:b2:fd:12:ff:29:93:e1:72:f0:
                    68:48:00:9a:2f:81:71:6c:1e:dd:3e:ff:3c:6c:19:
                    20:2f:d2:38:86:6a:50:ad:da:2f:4a:a1:44:cc:b9:
                    07:71:15:a7:8f:7a:ad:dc:38:92:6d:96:e8:27:d1:
                    4c:c0:13:ce:5e:11:90:4d:a4:a7:66:73:b5:89:7e:
                    9c:7d:7f:b4:ac:8f:57:f9:ac:bd:77:97:7d:24:5e:
                    f4:2e:f2:1d:e2:7b:99:ec:0b:37:97:0f:c4:dd:42:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:D4:85:6A:09:A6:9D:C5:C1:F8:10:3F:DC:1A:C2:6B:F4:10:EC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27241cdb-eb78-4c21-b5dc-47ff8930df35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.165.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:65:42:8a:47:46:d4:29:55:fb:9c:0a:38:f2:12:32:0a:
         92:b6:2d:d4:90:ba:51:29:a9:74:1d:14:e9:c5:ce:87:14:59:
         8a:1f:76:33:ae:43:ff:10:7a:73:d0:6a:5f:8f:50:e8:ec:e9:
         44:07:73:28:d0:f9:27:6e:7c:6c:1b:c0:11:ac:be:c7:33:58:
         a6:07:02:9c:e7:68:52:ec:79:55:4f:8f:c9:d7:0a:b2:a2:97:
         6b:d6:5d:2d:cb:35:01:30:1a:1d:8e:9c:03:91:61:b7:18:c8:
         74:5e:9e:45:43:0b:48:16:ef:83:f3:52:57:a9:23:5a:59:03:
         4c:da:14:4b:19:be:ed:9c:34:8f:8c:ff:3c:1a:76:e2:36:4c:
         f1:24:1e:fa:24:8c:b3:3a:f1:91:1f:8d:80:2b:d7:80:41:6e:
         96:23:8d:9e:a7:2e:81:69:f6:53:64:c4:9a:88:a3:3a:e1:df:
         0b:c4:39:28:77:b1:0e:e9:a0:50:81:dc:c5:af:6e:ab:88:73:
         01:a3:f9:0c:38:50:65:54:a3:13:c8:73:f0:25:b6:45:3f:f7:
         48:75:6d:7e:69:da:08:30:0a:46:98:ef:b7:ec:83:ad:0c:6c:
         cd:63:da:76:c7:65:01:dd:f3:f2:47:bc:ca:6a:5c:69:77:d7:
         7a:f6:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:15:07 2025 by rpki-client