Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b0f7d76-7505-4a26-94cf-3c0b9f5dbf74.roa
File:                     3b0f7d76-7505-4a26-94cf-3c0b9f5dbf74.roa (raw, json)
Hash identifier:          AFK6P+a0QIaXzIKoXyEne/qrYVj7Lujono2T3UCFTBM=
Subject key identifier:   B5:66:F8:0F:5C:4D:B9:67:C7:FD:52:50:27:26:DC:4C:2A:01:C9:31
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       03870E9F6C5F26FAE42C8B0B4056A6F1F018A45E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b0f7d76-7505-4a26-94cf-3c0b9f5dbf74.roa
Signing time:             Thu 25 Sep 2025 23:39:36 +0000
ROA not before:           Thu 25 Sep 2025 23:39:36 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:87:0e:9f:6c:5f:26:fa:e4:2c:8b:0b:40:56:a6:f1:f0:18:a4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 23:39:36 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=d54f0e354fce1a6e572810138d583890cb14da94ed41a2e893f1a48bc72fc620, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:0e:c7:02:19:9d:0e:6a:11:ed:f0:68:a8:
                    f0:a0:9c:ae:de:7e:e9:1f:51:66:d7:61:3a:6b:d9:
                    db:9c:14:51:81:48:94:76:e2:1a:13:3c:42:0a:d8:
                    dd:61:4d:b8:0a:07:dd:cc:5d:00:9c:f6:79:2d:b9:
                    b3:df:db:22:ac:50:39:57:6d:a7:bb:b8:ec:78:05:
                    f8:6f:ad:6d:b8:c8:a6:4c:c5:14:10:2a:4c:c7:2c:
                    2d:48:25:fe:08:61:f3:f1:2b:49:7d:7c:8a:73:c4:
                    3f:17:b8:dc:f8:bd:d4:b9:ee:07:40:6a:fd:79:4c:
                    8f:ab:cc:cb:ff:a8:67:69:5b:6b:74:29:f8:c9:2d:
                    b5:70:ab:ec:c2:9a:b3:d5:c9:0b:9e:b8:6a:74:33:
                    80:2f:ad:91:14:ef:cb:16:25:3e:85:74:8c:d5:a8:
                    a0:76:87:6f:18:0b:7c:85:42:3b:14:4f:7b:5d:e4:
                    6c:e4:cd:6b:19:b8:51:30:5d:28:a6:d7:d3:d3:9e:
                    f1:a6:58:db:57:99:1c:8c:cb:66:51:88:2e:53:d7:
                    05:6f:af:7d:35:82:0b:81:79:78:30:0c:b1:2e:81:
                    19:f8:3e:4b:09:f0:3b:48:74:a5:23:7b:45:1a:e9:
                    fb:31:6a:51:d9:54:43:8a:b6:a6:fe:17:1c:8f:09:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:F8:0F:5C:4D:B9:67:C7:FD:52:50:27:26:DC:4C:2A:01:C9:31
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b0f7d76-7505-4a26-94cf-3c0b9f5dbf74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:89:2d:b0:fe:16:0f:44:43:99:af:02:6b:7f:73:17:00:
         9c:fb:bb:e6:2c:9e:fb:a9:d4:9b:e5:51:ef:ed:c7:f5:d4:84:
         2a:af:df:76:c9:55:d0:61:14:3b:35:08:5a:53:ba:6a:0a:c6:
         a6:23:b8:bb:dc:ac:00:c1:ba:c9:96:95:0b:01:2e:c6:1e:a2:
         d7:6e:f3:14:6f:76:0a:b8:9a:b3:31:0a:c2:be:e7:31:1c:22:
         eb:62:1c:fa:41:59:b6:2d:34:f1:4b:60:58:48:2a:a7:e8:ce:
         f2:dd:54:f2:83:0b:19:db:11:b5:ed:73:cf:bc:af:fe:a7:c2:
         fe:93:3b:e4:fa:aa:eb:ed:5f:ea:3a:9b:16:2e:d8:d1:3d:c5:
         e5:d6:55:16:cf:46:a4:86:cb:07:d0:73:01:f3:97:a2:0b:b5:
         b7:b7:bc:c1:03:d0:44:6e:a1:95:b4:f5:8c:8c:55:e1:2f:42:
         8f:42:50:14:99:cc:28:a2:1b:83:1c:87:03:1b:56:5e:f4:7d:
         9c:ea:32:87:7f:60:f2:8b:01:ed:35:89:a2:ac:c2:7c:9f:3a:
         0c:7e:a8:71:da:0e:a5:d5:3f:2f:28:4e:aa:d4:31:37:26:4f:
         72:1e:19:e9:da:27:c6:dd:77:8b:27:d6:fd:52:31:20:78:07:
         38:f8:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:49 2025 by rpki-client