Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa
File:                     37fd8900-a007-4426-b74b-1c213c31c48b.roa (raw, json)
Hash identifier:          Kf+j/uVyzjw/u7V86mTjJ9Tgp0+kpMZrdnHIuucC+U0=
Subject key identifier:   86:63:EE:8A:09:04:38:56:8A:EA:40:54:FC:B0:43:D2:2A:BF:A7:2F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       61F971D7E3AD1C85C19D002519D3EAC464F311BA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa
Signing time:             Fri 26 Sep 2025 00:56:25 +0000
ROA not before:           Fri 26 Sep 2025 00:56:25 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:71:d7:e3:ad:1c:85:c1:9d:00:25:19:d3:ea:c4:64:f3:11:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:56:25 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=e7428dca8aa18faaa25afcc1957d88ffde602fa0b964d8b2110ffae787a145cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:86:be:4b:1c:62:87:20:4d:6a:3f:9a:88:
                    d4:50:f0:73:24:35:95:76:a4:b7:58:df:5e:c5:98:
                    37:3d:a0:cc:a1:c8:55:8c:ef:26:3a:c2:c2:9d:b8:
                    88:52:d5:4d:1d:a2:b7:89:01:e0:26:30:7e:88:03:
                    ea:b1:7e:ad:99:61:71:86:05:1e:66:12:07:69:a0:
                    1d:63:63:fd:f5:ed:9d:0c:6b:59:01:1f:fb:ad:f4:
                    d0:76:15:27:66:df:8f:20:a9:66:5c:ad:da:fc:a0:
                    c1:0b:95:29:da:14:c5:7e:d9:73:dd:b0:27:51:d1:
                    93:b3:7a:3d:7e:9f:f6:e7:f8:e5:db:fc:f6:b5:c9:
                    f1:eb:77:43:e6:df:9b:86:0a:af:62:e7:f3:31:97:
                    8d:9b:dc:48:92:61:ee:94:d1:ba:e2:d2:3b:e4:56:
                    a5:f3:1c:e2:3e:8f:08:cc:aa:c5:d6:a3:2d:42:81:
                    48:ea:b9:a3:fb:ab:c6:1b:41:66:38:ae:98:e7:be:
                    c1:5a:d2:bc:19:a8:1e:db:91:23:db:5e:1e:0f:e9:
                    b9:eb:21:82:e0:6d:3c:73:1f:e1:02:3b:02:4c:ab:
                    01:36:e2:dd:9e:32:98:cf:4e:63:0e:09:81:a5:01:
                    ba:b3:36:73:37:3c:9d:b7:17:32:ed:c5:12:56:2e:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:EE:8A:09:04:38:56:8A:EA:40:54:FC:B0:43:D2:2A:BF:A7:2F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:de:38:66:f5:c0:24:81:0b:b5:7c:69:8c:07:5e:8e:11:6a:
         b4:4f:8b:54:00:f6:57:79:c4:4b:da:7e:56:1f:2e:59:bc:a6:
         a8:d5:a1:15:4e:b3:4e:f7:76:b3:3f:41:15:99:26:2a:8b:db:
         94:6f:05:ca:10:ea:57:10:72:6d:90:58:57:e9:a0:29:23:26:
         0a:46:7c:86:a9:32:4b:66:3f:e9:f6:5c:5b:e6:70:67:a5:93:
         f5:bc:d5:97:cb:32:18:64:f9:38:c9:fd:78:72:41:09:fe:e6:
         71:cf:52:5c:e1:4a:3e:15:bb:ce:0d:10:15:23:6a:ce:10:4c:
         8d:79:7e:b8:5b:26:f2:3d:30:1a:dc:0e:65:06:bc:1b:ce:6e:
         61:85:4b:08:a7:af:bc:5d:f6:b3:ef:6e:c1:28:09:e1:92:91:
         17:9f:15:5a:64:0b:73:c3:7b:57:df:d5:a0:f7:e2:2b:4d:ff:
         23:56:a0:36:7c:66:60:94:4b:00:ea:3d:00:8c:2a:72:ed:6f:
         e3:44:17:3d:9e:49:a4:25:e0:f6:85:28:cf:40:4d:b3:ef:31:
         63:35:1a:0f:35:99:a7:9c:89:10:76:78:9d:88:e9:d5:ff:5c:
         5f:e5:e4:34:4a:03:72:8c:13:29:b9:45:a8:9e:27:8a:e0:1a:
         b2:0a:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:15:24 2025 by rpki-client