Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fcc9290-6dbc-4a58-bc3c-053b8f3dec6b.roa
File:                     3fcc9290-6dbc-4a58-bc3c-053b8f3dec6b.roa (raw, json)
Hash identifier:          49Jqkql39zUQgxinwasx/DxKi/oDvpuCH4IRIl2st4A=
Subject key identifier:   C9:9D:C2:31:14:4C:4B:88:9C:23:7C:3F:AF:C6:E5:CA:79:22:80:C2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0FAB46D2B420D3BB04629C4F0802F93904B2982D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fcc9290-6dbc-4a58-bc3c-053b8f3dec6b.roa
Signing time:             Thu 25 Sep 2025 22:54:04 +0000
ROA not before:           Thu 25 Sep 2025 22:54:04 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:46:d2:b4:20:d3:bb:04:62:9c:4f:08:02:f9:39:04:b2:98:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 22:54:04 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=9ebd97b7d31ddaf3ef98a5c54a0b96af464a03f346c24a724b2840c73a985c37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:3a:e3:39:04:06:a5:80:09:03:8b:94:f8:
                    a5:99:00:e3:ff:b9:3d:aa:c8:7d:44:1d:f1:44:f7:
                    2d:34:e6:c4:2c:3a:86:9d:4c:3c:23:9d:c6:76:11:
                    b0:76:ac:a4:01:ef:61:42:a0:19:49:e4:48:c4:1c:
                    8c:f1:70:ba:63:5a:e8:76:fc:89:0b:fc:f9:63:d5:
                    8f:57:57:d4:9b:7d:57:e8:f8:22:b2:82:14:0a:58:
                    de:70:df:8c:59:90:cb:ec:69:09:66:c7:25:91:fe:
                    73:f3:3b:af:a2:e2:6b:b7:64:9a:7a:3b:96:56:da:
                    41:dc:db:b3:08:d8:e0:df:ce:fe:e6:d0:6c:f4:25:
                    a5:39:0c:69:bf:bd:24:39:d6:26:09:68:22:75:ea:
                    79:ea:b4:e3:9d:33:02:21:0d:bc:b6:05:2d:84:58:
                    09:58:96:81:60:59:99:bf:e5:01:9c:cc:86:c3:63:
                    70:f5:44:2f:7e:d7:f0:8b:b5:b5:66:2e:10:c4:ae:
                    5f:6c:20:b3:e0:40:21:b4:e4:14:a3:9e:18:37:d5:
                    06:a6:2a:87:8e:6a:7d:85:51:25:06:3c:96:6b:53:
                    e7:8b:9f:96:b0:16:f8:85:f0:b1:ce:52:37:a2:a2:
                    5e:a6:2c:0e:e3:88:3b:b9:31:29:74:d5:16:7b:2b:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:C2:31:14:4C:4B:88:9C:23:7C:3F:AF:C6:E5:CA:79:22:80:C2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fcc9290-6dbc-4a58-bc3c-053b8f3dec6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:44:85:bf:a5:ba:54:45:50:65:ed:be:b9:cd:2c:bd:1e:
         cc:e6:bd:64:2d:2b:16:6c:75:fa:3e:d9:cf:c5:c1:39:98:32:
         59:c0:2e:33:8a:3d:6c:3d:72:af:20:6d:51:96:4e:5c:9e:c1:
         a0:40:91:ae:00:2e:79:14:c0:af:5d:09:21:b8:2d:c1:f8:30:
         a6:64:0b:62:a5:e5:d1:a9:ea:56:0c:67:74:cb:60:63:73:29:
         4c:92:a5:f6:22:99:3c:9e:b9:1f:7c:c2:d4:20:e2:91:c6:80:
         3c:c8:98:8e:f6:ed:40:f3:d9:a3:28:83:f6:83:f0:5e:1f:c7:
         52:c8:31:a4:3d:07:98:89:c2:ee:a7:e9:9e:58:b9:41:95:da:
         b6:e7:69:bf:bd:d4:c6:6b:3c:1b:e1:04:bd:37:b2:ce:aa:23:
         a1:87:f8:5c:d7:14:5b:c0:d1:0e:1d:76:cc:35:8b:cf:bc:21:
         55:08:a9:c4:ff:5c:f0:ba:b5:91:92:11:aa:e0:1c:49:17:e2:
         fb:46:f7:3d:44:30:ae:92:c7:1d:d8:6a:48:38:37:ad:05:33:
         e2:f3:56:7d:00:8f:97:a5:d0:39:b6:33:a9:60:57:d9:9b:19:
         b2:ca:34:77:cd:65:33:b6:2f:65:44:94:a6:08:2c:2c:08:11:
         b7:1f:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 02:13:02 2025 by rpki-client