Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d6c6164-dbe1-4ee1-ad74-37dd2586e5df.roa
File:                     2d6c6164-dbe1-4ee1-ad74-37dd2586e5df.roa (raw, json)
Hash identifier:          8K3ATMWoK9mD4J4RJyI8bTYIFpILycBJ3ReQwgp9T0U=
Subject key identifier:   3B:8D:88:9F:60:59:F2:95:65:BC:47:B1:DA:65:F4:72:A4:37:21:34
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       358F6F41C89A996ED42FCAFE129E8DB69C7DE2EA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d6c6164-dbe1-4ee1-ad74-37dd2586e5df.roa
Signing time:             Fri 26 Sep 2025 01:32:12 +0000
ROA not before:           Fri 26 Sep 2025 01:32:12 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.171.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:6f:41:c8:9a:99:6e:d4:2f:ca:fe:12:9e:8d:b6:9c:7d:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:32:12 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=8da21104f5b188a6d890c7e22fde3f72700357d24d31399a75418e1adf5fbf20, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:17:63:15:e4:83:e8:2a:36:31:aa:90:b4:
                    1c:2a:70:60:b5:03:00:7a:c1:89:73:29:53:f6:b1:
                    05:a0:e9:2a:7f:58:ad:72:78:35:ec:3d:86:32:6e:
                    4f:7b:13:a2:ab:c2:8a:75:3f:dc:3b:73:0d:fc:01:
                    d5:3b:b5:10:5d:0b:dd:81:db:06:6b:20:9a:3c:ac:
                    56:31:06:5d:a2:5f:db:97:31:ae:31:53:82:8f:c5:
                    2d:6c:1e:3a:12:88:b2:41:36:70:26:fb:2b:8a:b1:
                    ea:e3:14:ed:17:f9:46:ad:67:77:f5:db:a6:e4:51:
                    21:2b:d1:4d:d9:c5:9a:82:ad:17:68:36:f5:f8:dd:
                    04:18:2c:4c:3a:8a:d1:9e:84:2f:4c:fa:4e:1a:65:
                    26:ea:bc:ee:16:dd:48:c3:2e:e6:44:b5:9b:63:1d:
                    73:f2:3f:19:34:b9:d5:e3:71:82:01:85:28:dd:b0:
                    5e:aa:c8:32:7e:7c:10:59:e1:d0:e4:ae:38:23:1e:
                    2e:39:8b:d2:df:6c:e9:54:0d:5d:b9:ed:ba:33:f2:
                    73:b3:30:6b:38:6b:f5:00:16:a5:85:c1:37:bd:7d:
                    e3:f4:29:01:0f:18:14:ee:d9:38:3a:e8:da:03:08:
                    44:4c:2f:85:f1:b3:e1:a6:75:f1:85:86:de:1b:a8:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:88:9F:60:59:F2:95:65:BC:47:B1:DA:65:F4:72:A4:37:21:34
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d6c6164-dbe1-4ee1-ad74-37dd2586e5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.171.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:40:c8:e2:44:11:b3:58:31:8e:c2:1e:99:09:38:b1:bc:
         59:0f:04:08:54:7d:c3:99:f8:93:03:eb:58:50:66:59:65:f7:
         d1:f8:df:52:96:45:06:6c:7d:fa:67:77:bc:13:aa:76:6a:7f:
         ae:30:99:c4:9c:5a:e7:ed:cf:5d:c7:f0:64:f7:e9:eb:b3:29:
         f2:82:33:4c:6d:29:8c:4c:5b:af:65:54:a1:b5:58:63:31:c7:
         09:84:1f:da:6e:e4:c2:14:4d:c3:d2:2d:82:bc:83:3e:e8:b3:
         28:a1:28:1c:a9:fb:fb:6a:36:e0:45:ca:f5:23:1b:ae:86:61:
         c3:5d:e2:13:dc:4c:99:c2:8e:5d:65:41:06:e0:63:ed:92:0e:
         e7:b0:00:25:41:3e:6b:e0:91:3c:c7:0f:91:74:bf:70:a1:44:
         54:ba:09:61:04:9b:7b:97:82:4d:92:15:e3:a9:63:d8:bf:dc:
         eb:8f:59:b3:a0:06:77:bb:53:bb:95:c6:cb:bb:60:2c:4a:5d:
         32:99:aa:3e:32:5f:71:b3:33:85:64:d1:7d:ae:6f:ca:c8:ff:
         fc:36:36:60:44:88:6d:97:da:22:a9:05:d9:f1:c9:34:ca:47:
         21:ff:86:54:49:43:cc:5b:04:41:f0:ee:0d:3e:f7:54:4c:53:
         09:d1:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:13:06 2025 by rpki-client