Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35b2e2ed-5fe6-4e63-96ff-a68834bc1c17.roa
File:                     35b2e2ed-5fe6-4e63-96ff-a68834bc1c17.roa (raw, json)
Hash identifier:          meEMcJgYklJalEHLMptdtypZpku2Zdkd3LS6uLKJMsc=
Subject key identifier:   BA:89:55:99:F5:45:FB:B6:08:44:F8:E9:33:CA:46:8C:D9:DC:8A:85
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4D8014CC80742C7A8835F3C7E5EC0F88CCEC4EEA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35b2e2ed-5fe6-4e63-96ff-a68834bc1c17.roa
Signing time:             Fri 26 Sep 2025 01:14:56 +0000
ROA not before:           Fri 26 Sep 2025 01:14:56 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:80:14:cc:80:74:2c:7a:88:35:f3:c7:e5:ec:0f:88:cc:ec:4e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:14:56 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0dd66299f2fc50c0c02ff62877c5d35fcff672156efd239643aa7789840e7f1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:1c:7e:24:6f:24:dc:95:e1:5c:2d:ab:f5:
                    f7:98:da:bb:17:7e:a6:1d:f1:a2:00:2f:10:7b:c2:
                    ac:08:99:d7:3e:82:d4:95:7a:7e:f5:92:68:bd:e9:
                    16:58:dd:35:48:08:bf:54:fb:3a:94:59:06:95:14:
                    eb:36:0e:23:fb:33:97:20:e6:f2:05:1c:7a:1d:61:
                    4e:2d:de:8f:e1:ae:47:90:a6:7f:25:8c:f4:9c:7a:
                    50:dc:57:e7:f5:a6:63:ea:c1:cd:fd:f9:f7:bc:14:
                    43:7a:68:c1:bd:f6:59:79:e5:db:c6:7c:55:7c:2a:
                    82:75:1e:de:9d:b7:98:b5:75:f9:8f:8f:b3:cc:42:
                    ff:08:73:12:b3:e0:eb:50:d1:7d:85:81:8a:d9:e1:
                    19:df:24:bf:f0:9e:c0:77:99:60:2f:eb:58:79:6d:
                    8e:02:a3:9b:6a:e7:1b:d2:6d:37:27:93:96:ad:dc:
                    cf:1d:12:cc:f5:76:53:57:1b:bc:12:bc:e4:77:5a:
                    92:74:3c:c6:6b:bd:b8:3b:67:71:6f:aa:68:aa:81:
                    d9:fa:44:12:dd:e3:8a:e9:0e:35:ee:92:7e:bf:63:
                    62:67:1e:9d:b0:ee:ab:08:2b:8b:29:2a:80:2e:ce:
                    49:9f:f5:b8:07:4e:ed:81:8c:54:8a:33:be:b7:d3:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:55:99:F5:45:FB:B6:08:44:F8:E9:33:CA:46:8C:D9:DC:8A:85
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35b2e2ed-5fe6-4e63-96ff-a68834bc1c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:15:53:f3:f5:66:7b:71:68:9a:ba:99:9c:aa:79:f2:5c:21:
         1d:16:34:b5:d4:00:af:31:91:7d:aa:22:89:85:ee:37:1f:22:
         3f:49:25:34:8a:94:6e:ce:1a:78:76:48:12:ba:08:ec:a5:60:
         67:21:ff:2b:81:be:e6:6b:07:b4:10:9a:2e:67:22:29:5a:8a:
         5a:64:69:17:c0:c3:9f:6a:ba:94:52:18:c9:e4:d8:24:b6:cb:
         4c:cf:a5:41:46:e6:be:04:cf:c5:0b:6d:8b:70:b5:0b:81:0c:
         aa:91:c7:02:8e:78:06:52:1d:64:a0:01:7e:36:ea:90:d7:a3:
         d7:f2:fb:b3:eb:d5:07:f1:04:32:74:50:7d:80:99:26:9e:ae:
         e2:a0:36:3f:c3:18:82:53:dc:d2:42:3a:53:97:21:1e:51:09:
         f1:1e:41:59:07:ff:1d:67:36:68:75:24:46:51:16:c7:7b:ce:
         3c:0d:24:19:40:1f:79:0b:72:26:47:9d:d1:e6:3c:13:4a:d1:
         54:d9:e5:28:aa:aa:d4:88:4e:a3:04:dc:b1:dd:f4:76:8c:5f:
         10:f1:27:79:bb:29:d0:fb:e0:02:88:ef:7a:12:29:87:ea:9b:
         16:6e:9b:e2:2c:69:b7:2f:fd:92:bc:62:4f:6b:fc:9f:7d:04:
         4c:a6:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:14:32 2025 by rpki-client