Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0d0de9-11da-403c-8704-61f6e720fbeb.roa
File:                     3c0d0de9-11da-403c-8704-61f6e720fbeb.roa (raw, json)
Hash identifier:          +liS0swCL7bWvji0kf8TR56ljm04EoVsIjviqZwKYuA=
Subject key identifier:   10:1F:91:47:15:ED:B6:B7:65:94:25:D1:17:09:5D:96:D8:C6:C4:B9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       701BBEB3193E959375B74F55CAA1A3604BEFE850
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0d0de9-11da-403c-8704-61f6e720fbeb.roa
Signing time:             Thu 25 Sep 2025 21:03:09 +0000
ROA not before:           Thu 25 Sep 2025 21:03:09 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1b:be:b3:19:3e:95:93:75:b7:4f:55:ca:a1:a3:60:4b:ef:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:03:09 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=16a81727d5bfa3bdd3c7bf73abb5c91d22512d7762a350a1e5fffa6153b6d354, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:93:cb:03:62:56:a8:b5:da:b5:aa:be:98:
                    dc:44:07:74:fc:4b:45:61:c3:97:d6:28:b7:75:45:
                    c5:f2:3d:26:a6:e2:22:13:be:10:11:8e:83:be:af:
                    5d:b6:3a:d1:cf:57:26:b1:02:29:ad:8d:3f:80:f5:
                    f5:0e:3b:7c:01:60:4f:c7:41:37:78:7c:5e:d7:9b:
                    07:9f:1e:a0:dd:ec:d4:59:f5:33:1f:75:e6:03:21:
                    33:31:c6:5a:54:b3:da:4b:91:d1:a3:de:6c:dd:0a:
                    2f:17:df:d5:7b:ce:cf:4e:df:bf:28:eb:6b:a3:d8:
                    a7:1e:83:77:42:ee:cf:f8:ea:8c:49:e8:c1:f7:ab:
                    5c:e0:a8:14:e0:77:4c:41:af:ef:d3:23:da:93:ef:
                    c9:b7:24:ed:10:05:f8:b4:52:4a:44:ac:13:ef:ea:
                    28:bc:eb:ec:0b:98:7d:54:7c:19:b0:9c:c2:92:51:
                    3c:b9:49:0b:c8:40:83:24:a5:4d:b5:8b:cf:87:dc:
                    83:cf:2f:59:00:fc:8f:bc:b6:a4:6a:ad:2e:f1:b2:
                    25:f9:50:8a:db:b4:fb:4b:8a:a8:48:56:c3:cf:3c:
                    4a:74:5e:d6:9f:59:e5:45:e0:f7:a4:25:07:ec:80:
                    a0:4f:5a:cb:59:47:c2:b6:35:b9:c6:67:f2:00:4b:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:91:47:15:ED:B6:B7:65:94:25:D1:17:09:5D:96:D8:C6:C4:B9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0d0de9-11da-403c-8704-61f6e720fbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:6b:f3:39:5d:42:a7:06:13:7a:63:ab:7e:99:fb:aa:6d:
         3e:cd:e4:5a:e5:da:0f:d4:d9:30:c7:a1:5c:04:2d:f6:a7:30:
         1d:01:cf:31:5b:b9:5b:39:24:86:8b:95:6d:bf:3c:33:57:9f:
         28:d4:64:34:67:f4:13:cb:4e:d3:ec:26:fc:12:52:6c:a9:d7:
         dd:83:e6:a8:cc:0d:a4:0c:26:17:c9:7c:35:12:db:8d:48:32:
         a6:e0:e4:76:38:bb:aa:b4:34:93:1c:4e:16:23:6b:01:33:1c:
         55:37:72:b1:e0:cb:fd:b8:9b:10:51:37:1f:2c:32:81:60:bf:
         98:39:00:61:fc:f9:05:47:ef:11:53:f6:2a:5f:44:d4:e2:0b:
         06:45:7f:78:b7:ea:65:b0:a8:8c:43:0d:5a:8b:44:6a:80:ac:
         0a:08:f6:8b:14:3c:63:bf:a5:a3:41:89:27:48:ee:d8:c3:82:
         5e:30:f8:86:7a:ed:bf:67:32:06:8d:95:0f:14:4e:57:d1:fa:
         99:b5:eb:14:76:27:fd:b9:f1:da:3e:53:c8:2e:d6:17:70:61:
         9d:f8:5a:fe:b9:a7:6e:ac:a7:5f:19:60:13:f8:41:d5:08:f8:
         32:de:eb:72:de:f1:68:74:f4:c2:c2:a0:e8:e3:39:cb:5d:bb:
         2f:85:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:11:51 2025 by rpki-client