Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/394640ef-fe50-469d-a559-8fbe98df7290.roa
File:                     394640ef-fe50-469d-a559-8fbe98df7290.roa (raw, json)
Hash identifier:          pjZ38jddNU977c17AUoOX2ewfpy+jLj8QJY/mYN4CiI=
Subject key identifier:   97:0D:7F:E8:25:C2:D4:4B:F5:E6:BF:91:E2:2F:A3:45:EF:C1:DE:51
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       10842857C2756E553FB4118B14B7EE8BCEDB5E07
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/394640ef-fe50-469d-a559-8fbe98df7290.roa
Signing time:             Thu 25 Sep 2025 21:41:50 +0000
ROA not before:           Thu 25 Sep 2025 21:41:50 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:28:57:c2:75:6e:55:3f:b4:11:8b:14:b7:ee:8b:ce:db:5e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:41:50 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=8cdfbdb2b7f07669c8578906b5a5081dc21aae394a68cafa68d3f679120db0da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:f2:7b:47:ad:ef:f9:58:e7:51:38:f8:a2:
                    62:2c:be:90:f8:8b:27:11:e7:6e:c9:e2:16:01:e8:
                    46:19:c8:08:f4:b4:ed:06:32:71:71:df:03:3c:67:
                    1f:19:46:93:16:52:44:6b:b0:e2:4f:44:16:65:76:
                    1e:55:95:b3:94:cc:2a:6b:d5:a5:e9:12:70:d8:c3:
                    8d:c0:81:4a:fb:82:5a:e5:35:85:b4:8e:cd:07:97:
                    c4:3f:25:52:55:6c:00:75:9e:fd:bf:8e:ff:80:3b:
                    82:4d:fb:5d:31:15:d0:fa:86:de:7e:03:37:3f:eb:
                    a6:7a:69:da:21:e1:0b:de:9b:5c:be:1d:08:3c:3f:
                    6a:2a:cb:c6:69:00:8a:2d:3c:c2:3b:f7:f6:55:3a:
                    c7:c3:20:65:51:e0:f4:b4:c6:03:f4:1e:da:87:9e:
                    d4:9e:ab:46:a2:d0:7d:92:f0:94:53:c0:51:69:81:
                    d4:a2:0b:ad:81:59:f8:52:f3:19:bb:df:a5:2c:59:
                    e5:4e:aa:b4:83:45:77:5c:1c:bb:75:94:43:77:24:
                    ae:4b:8b:c6:4f:e6:cd:52:26:bf:94:42:f4:a6:5d:
                    96:7d:0a:ca:06:1f:db:f4:53:dc:cf:90:48:97:4a:
                    5a:e8:6e:05:45:fd:6f:ba:6e:b8:29:7f:fb:fc:39:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0D:7F:E8:25:C2:D4:4B:F5:E6:BF:91:E2:2F:A3:45:EF:C1:DE:51
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/394640ef-fe50-469d-a559-8fbe98df7290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:a9:02:8f:8a:2d:02:30:ec:4f:8b:4f:8f:a7:89:23:23:
         90:a3:b4:d1:3d:59:da:d2:90:52:d4:47:84:f9:d4:e5:e7:c2:
         8e:95:94:af:ee:b3:b6:be:c4:65:28:c0:71:9a:0b:b0:e0:a4:
         dd:a2:44:69:62:65:bd:63:ae:d5:1a:c9:39:70:57:4b:ff:77:
         50:fc:7c:a3:00:22:ce:c2:77:ba:d6:c0:cc:e7:3b:88:fc:70:
         a3:16:99:1c:81:bb:21:09:13:5b:fa:14:6b:c7:3a:59:f2:b2:
         24:f1:8b:bf:96:dc:e3:f6:c6:c6:a8:1b:7d:1c:13:f5:8d:d8:
         f1:44:a5:31:e7:18:d7:c8:26:81:6b:d0:01:ad:a8:36:98:92:
         21:c1:9a:cc:c0:b6:cc:48:b4:cb:ff:55:ca:6f:f4:b3:c7:2c:
         1c:70:b3:ae:b9:1c:c1:50:af:aa:eb:b8:70:0d:9e:28:b9:24:
         2f:e7:f7:7c:b6:80:3c:20:c2:1c:b7:b6:00:5f:36:44:40:5d:
         67:73:cd:e5:33:4f:31:0a:77:2f:07:4b:88:cf:a7:24:cc:95:
         cd:15:42:59:de:c7:88:95:86:34:20:b1:da:3b:70:59:b4:b3:
         45:ab:5b:a0:a8:85:02:67:e1:23:4e:a5:95:2e:2a:56:6a:aa:
         b1:19:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:10:15 2025 by rpki-client