Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2769fdc0-3858-45b5-b6c7-4c41fc8ba29e.roa
File:                     2769fdc0-3858-45b5-b6c7-4c41fc8ba29e.roa (raw, json)
Hash identifier:          8r48cglaMRxakU1Fr4EecqwVZ9INVmBJmCYoGGfPxVA=
Subject key identifier:   AA:71:2B:DF:E1:DB:55:E3:8D:FC:FA:11:7D:C2:AF:3C:C3:1B:6C:6F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5B5EC00464688CD2869338B42FEC7401881059B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2769fdc0-3858-45b5-b6c7-4c41fc8ba29e.roa
Signing time:             Thu 25 Sep 2025 17:12:05 +0000
ROA not before:           Thu 25 Sep 2025 17:12:05 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5e:c0:04:64:68:8c:d2:86:93:38:b4:2f:ec:74:01:88:10:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:12:05 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=5c2e12fb7b9350123d2878487f546c2d3f0c13c36b195c315d61057fe5bd4d52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:20:5b:b7:e8:9d:e1:f3:c6:54:e1:be:52:
                    56:e6:92:68:2f:be:d8:e1:e8:2b:88:44:2c:7c:be:
                    62:aa:d8:7e:c5:ff:d4:f5:f6:7c:f6:31:37:ab:2d:
                    69:81:06:4b:ce:e8:37:87:01:d1:3b:b4:32:57:c5:
                    24:ee:ad:95:8b:45:1e:45:95:a6:6b:2f:8e:88:32:
                    43:3d:c2:88:9a:cc:a3:d5:f3:d5:51:d7:e1:b8:81:
                    e6:a0:e8:c3:15:53:a9:13:50:0e:a8:15:b8:8a:b1:
                    f4:56:fd:9b:e3:62:3d:cb:74:c4:96:fa:e0:b2:81:
                    64:dc:7d:f8:1f:8e:88:3c:59:4a:32:6d:84:b5:7f:
                    14:9d:9c:a5:3a:2e:99:d4:8a:54:70:66:69:52:8b:
                    c3:8b:9a:30:a3:92:16:c3:32:16:e4:76:44:a2:a9:
                    cc:ab:2b:24:57:54:cd:f1:f4:db:b7:1d:02:f0:5a:
                    9a:26:ee:af:9c:40:aa:7b:9d:1c:07:cb:04:53:64:
                    f8:20:06:68:93:85:de:44:48:63:3c:65:03:fc:e8:
                    eb:a7:b6:5a:4d:9b:1d:74:25:1f:7f:5d:79:b9:d0:
                    66:1d:93:18:92:c7:0a:60:a6:a3:47:09:d9:3e:27:
                    0e:99:0b:49:a5:69:82:ce:6b:83:38:12:60:bd:96:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:71:2B:DF:E1:DB:55:E3:8D:FC:FA:11:7D:C2:AF:3C:C3:1B:6C:6F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2769fdc0-3858-45b5-b6c7-4c41fc8ba29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:74:5d:b3:88:0f:28:1b:65:45:80:e8:37:43:3a:1e:f8:
         f9:e2:c8:13:3a:a9:db:0f:13:1b:92:db:5e:4b:10:8a:07:e8:
         e5:cd:e4:fd:21:1e:61:ad:b2:bc:01:95:4e:0d:01:92:a9:b6:
         16:a8:4d:db:f6:ef:84:d3:16:91:58:7f:5d:72:58:f2:bd:8e:
         d5:0f:ae:0b:4f:9c:ea:51:e8:95:c3:6c:1d:5a:09:4c:15:d9:
         9e:56:54:88:16:91:3e:5c:87:b4:8a:f8:17:1f:50:73:ec:5c:
         64:ae:9d:91:05:9b:cc:3d:62:39:de:6c:8b:fa:cc:84:26:26:
         77:9b:7f:a8:b2:e3:53:3d:75:1c:89:7e:c6:b1:48:93:94:64:
         74:dd:84:f5:3f:69:f7:98:b2:c3:4f:2f:6f:bd:3e:f3:51:66:
         17:b5:30:47:2d:bc:83:6b:32:ba:6c:1b:83:7f:50:79:60:f1:
         ab:8d:9a:34:e9:18:8d:ba:fa:fc:05:74:2f:6b:81:93:5a:0f:
         91:1f:04:85:28:8b:d6:06:8e:a5:96:38:a0:a4:78:a2:d0:1d:
         bc:4e:d0:5b:ad:06:40:df:7d:13:d0:e7:6d:50:0d:3d:41:35:
         4f:4a:ac:90:18:0e:21:8c:6d:24:ca:ee:f0:66:31:04:41:22:
         9a:54:0b:74
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW17ABGRojNKGkzi0L+x0AYgQWbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTcxMjA1WhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzJlMTJmYjdiOTM1MDEyM2QyODc4NDg3ZjU0NmMyZDNm
MGMxM2MzNmIxOTVjMzE1ZDYxMDU3ZmU1YmQ0ZDUyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpmCBbt+id4fPGVOG+Ulbmkmgvvtjh6CuIRCx8vmKq2H7F
/9T19nz2MTerLWmBBkvO6DeHAdE7tDJXxSTurZWLRR5FlaZrL46IMkM9woiazKPV
89VR1+G4geag6MMVU6kTUA6oFbiKsfRW/ZvjYj3LdMSW+uCygWTcffgfjog8WUoy
bYS1fxSdnKU6LpnUilRwZmlSi8OLmjCjkhbDMhbkdkSiqcyrKyRXVM3x9Nu3HQLw
Wpom7q+cQKp7nRwHywRTZPggBmiThd5ESGM8ZQP86OuntlpNmx10JR9/XXm50GYd
kxiSxwpgpqNHCdk+Jw6ZC0mlaYLOa4M4EmC9lmiRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqnEr3+HbVeON/PoRfcKvPMMbbG8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI3NjlmZGMwLTM4NTgtNDViNS1iNmM3LTRjNDFmYzhiYTI5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADoVkwDQYJKoZIhvcNAQELBQADggEBAK/VdF2ziA8oG2VFgOg3Qzoe+Pni
yBM6qdsPExuS215LEIoH6OXN5P0hHmGtsrwBlU4NAZKpthaoTdv274TTFpFYf11y
WPK9jtUPrgtPnOpR6JXDbB1aCUwV2Z5WVIgWkT5ch7SK+BcfUHPsXGSunZEFm8w9
YjnebIv6zIQmJnebf6iy41M9dRyJfsaxSJOUZHTdhPU/afeYssNPL2+9PvNRZhe1
MEctvINrMrpsG4N/UHlg8auNmjTpGI26+vwFdC9rgZNaD5EfBIUoi9YGjqWWOKCk
eKLQHbxO0FutBkDffRPQ521QDT1BNU9KrJAYDiGMbSTK7vBmMQRBIppUC3Q=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:10 2025 by rpki-client