Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b51bc56-8e4c-4c1c-bc93-094b51cb4a8f.roa
File:                     3b51bc56-8e4c-4c1c-bc93-094b51cb4a8f.roa (raw, json)
Hash identifier:          ywvkUEgbtoB7+jZyhKRZhQyokwkV0b9zXTklrnJhDG8=
Subject key identifier:   DF:B6:65:AA:B6:E7:32:FD:8F:E4:93:1B:2F:82:15:CC:1B:1A:AA:06
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       217F1EA36C6878BD96E69BCB04D26E909AD714EC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b51bc56-8e4c-4c1c-bc93-094b51cb4a8f.roa
Signing time:             Thu 25 Sep 2025 16:57:09 +0000
ROA not before:           Thu 25 Sep 2025 16:57:09 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7f:1e:a3:6c:68:78:bd:96:e6:9b:cb:04:d2:6e:90:9a:d7:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 16:57:09 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=de3d9aa1087fade7614721542962cf21e0bf1f1e17b327d7c9195acc07505e9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:14:2f:14:2d:b3:45:37:b2:51:f8:3a:b3:fa:
                    13:08:16:69:38:3e:f6:40:47:6b:42:2a:ec:96:f9:
                    21:51:02:15:45:4a:50:2f:ce:70:ca:ca:39:e5:c3:
                    fc:5e:7e:7a:b8:04:4c:a3:5c:b0:03:66:ff:ea:2e:
                    f4:13:76:34:c7:00:a8:75:07:d1:41:6d:aa:8b:68:
                    a4:ab:41:09:61:f0:08:40:2d:58:23:38:3a:96:10:
                    84:27:2c:78:ab:ef:31:46:42:ac:ec:4d:90:d4:3b:
                    e0:2a:8e:11:90:2e:04:46:b4:75:33:43:90:09:80:
                    67:15:67:4b:dd:86:73:4c:73:d8:08:e5:93:6f:88:
                    f2:f6:89:3a:4b:01:65:78:ef:71:72:30:66:99:c3:
                    83:0e:f5:69:48:f3:60:91:9b:75:eb:76:20:7a:cc:
                    81:a7:4d:9e:61:f1:99:0a:d6:a0:74:f1:d8:f2:fe:
                    fd:f1:74:8e:cd:20:76:ca:0d:6a:e7:88:ac:dd:f4:
                    5c:19:1f:a2:1b:44:91:78:3c:11:6f:eb:aa:a1:2a:
                    4c:bd:12:6d:41:5a:19:5a:f5:32:59:33:82:fc:50:
                    c0:4a:20:b7:43:48:80:a8:9c:f6:80:d6:38:23:c6:
                    c2:14:d0:59:54:44:f5:fe:54:d2:f2:77:82:59:be:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:65:AA:B6:E7:32:FD:8F:E4:93:1B:2F:82:15:CC:1B:1A:AA:06
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b51bc56-8e4c-4c1c-bc93-094b51cb4a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:97:9d:7c:7f:ad:bb:64:5b:32:5c:66:4c:ef:0e:0d:d9:7c:
         6c:7a:08:d3:2c:ac:ee:80:3c:c1:dc:f5:b8:c8:da:e1:f3:a6:
         7d:df:f6:7e:d7:3e:91:94:2d:e3:f0:68:27:33:b4:a5:9b:06:
         4f:60:f7:c8:ae:af:67:6a:53:6d:71:fe:e6:1c:fd:47:3e:a0:
         87:f3:4e:ec:1d:b6:cc:f1:75:13:e3:6a:71:12:1b:7b:ba:1d:
         f1:1b:b9:af:9c:49:10:f2:12:eb:4d:95:b7:bc:7c:62:c4:ad:
         62:e4:7c:a9:c8:05:3e:4f:7e:c1:0a:39:5c:f8:50:c6:1a:3d:
         6d:b9:16:1b:95:5d:ee:65:9a:10:75:f4:f0:f6:34:96:52:49:
         b7:5a:aa:9c:ab:37:3b:16:0e:ab:ea:6e:4a:8d:d4:f9:59:4e:
         1e:37:75:f7:42:42:87:e2:1e:f6:00:87:1d:4e:51:64:fa:ea:
         7e:0a:22:95:ac:8b:d9:a1:a0:5a:ee:85:a7:86:4d:7c:cd:79:
         ac:f0:fd:f6:5c:31:89:22:6e:cf:12:cb:a7:b7:c9:af:a3:cf:
         37:2e:3a:e0:6e:d5:61:bb:13:18:c4:c4:45:1a:84:c1:b1:d9:
         30:8f:f8:bc:96:b4:9e:c7:e7:8d:24:86:96:c6:31:b3:3e:98:
         05:02:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:12:14 2025 by rpki-client