Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eef2760-639e-4dfb-87bf-2619bf9286be.roa
File:                     3eef2760-639e-4dfb-87bf-2619bf9286be.roa (raw, json)
Hash identifier:          wjotk4Fz83TTIm9BNePpzvmutzNEQUrBVejNL1Oes7Y=
Subject key identifier:   6E:83:A5:00:23:FB:F9:C1:6C:75:0F:FD:46:D8:92:89:CB:AE:6E:48
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A38A4FAF13E28AA2FF5BFF1B8E6CBB4E9554C1A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eef2760-639e-4dfb-87bf-2619bf9286be.roa
Signing time:             Thu 25 Sep 2025 20:37:09 +0000
ROA not before:           Thu 25 Sep 2025 20:37:09 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.173.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:38:a4:fa:f1:3e:28:aa:2f:f5:bf:f1:b8:e6:cb:b4:e9:55:4c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 20:37:09 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=5e878844663ff343f60aa22cba01cbd08fe61df1781d145981d60f40453b2c4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:18:4e:8a:b5:9a:06:d5:2d:2d:da:a3:93:54:
                    b9:ab:4a:c6:65:2f:2f:09:82:39:c0:64:d0:4a:d2:
                    78:85:14:b7:23:fc:33:aa:0d:25:fd:f7:6c:9f:52:
                    33:74:3a:6e:73:43:84:14:f0:4d:1c:68:40:80:6d:
                    c0:ca:ca:99:f5:f8:15:a8:8e:ef:c7:f8:0a:44:e0:
                    db:4e:9a:4d:b2:44:d9:10:ca:6e:41:2c:60:2c:2f:
                    ef:df:46:fa:e7:28:df:fb:6e:90:64:92:43:ef:fd:
                    cc:12:d9:1b:c6:56:03:8c:02:7a:04:c0:a8:7d:b8:
                    54:80:d2:11:15:34:f3:bd:d3:eb:ba:e6:8e:bd:76:
                    b1:be:9a:26:3d:c4:a4:ab:a7:25:b0:36:55:a5:c4:
                    f9:bc:9c:1d:9b:8d:77:24:cb:be:42:84:50:e4:62:
                    ad:4d:93:74:7c:0a:38:e8:72:cb:cb:40:32:d7:54:
                    f0:78:dc:bb:a6:85:a1:24:e8:59:dc:c2:e3:c7:4a:
                    49:72:6e:95:a7:1a:21:09:59:ff:c8:2d:40:e5:e4:
                    ee:46:47:aa:cd:91:52:db:fe:51:f6:42:c8:23:3a:
                    cf:ce:9c:c1:96:e6:51:b1:21:1e:c1:28:c2:3f:a8:
                    a4:ae:4d:ed:fb:31:1d:da:6e:77:b5:4b:eb:66:36:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:A5:00:23:FB:F9:C1:6C:75:0F:FD:46:D8:92:89:CB:AE:6E:48
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eef2760-639e-4dfb-87bf-2619bf9286be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.173.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:00:1d:85:37:55:26:55:17:74:37:44:ec:a6:26:1c:b3:1a:
         3c:e1:00:c4:f9:8d:79:65:a2:c0:a2:05:36:78:fa:c0:ba:cb:
         71:4c:fe:3d:be:6d:b1:a6:b7:5c:75:ff:b8:cf:bb:4e:29:89:
         6a:3b:6c:43:36:6a:44:e3:01:2f:59:4d:6c:24:96:f1:d2:73:
         a3:e5:7b:c4:3a:7a:1f:9b:59:e9:6f:84:80:67:3a:26:69:07:
         b8:9c:82:b3:2b:63:c2:33:e8:d3:ed:a5:0b:ba:9a:7b:62:8a:
         28:f0:51:11:ec:96:c6:fd:e1:1d:87:7b:fd:6a:50:f3:2b:b2:
         65:ec:51:da:9b:12:4e:82:b9:76:30:7d:6e:e3:79:1e:4c:c1:
         b9:52:8a:24:48:00:49:a2:86:62:04:ba:f6:14:60:d4:01:a9:
         b8:ae:dd:a5:9f:5a:29:82:9d:9b:2b:86:f7:2f:5e:b3:c4:93:
         4d:56:36:67:de:f2:bc:fb:3d:93:30:7a:67:25:3d:b4:f7:ee:
         64:66:d1:9c:46:ff:1c:96:eb:af:20:03:3f:e9:22:59:f2:12:
         9b:5d:09:32:71:68:7b:60:13:d0:bc:c8:ae:a1:30:39:8a:da:
         08:a1:09:18:b2:f9:07:03:71:65:b7:ee:91:97:15:56:2e:13:
         ca:d5:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:18:06 2025 by rpki-client