Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a77987-efdb-4af0-bb5f-93cc19a81e01.roa
File:                     49a77987-efdb-4af0-bb5f-93cc19a81e01.roa (raw, json)
Hash identifier:          qUpaX//lHEJ/mZyF5RWSocrsCl9XBfAVDlK7pRbm67g=
Subject key identifier:   9B:CA:0F:50:57:75:C1:9E:B1:96:31:49:3D:BF:7E:32:53:FD:AD:AE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73807C09BF2951E646BD8B604141FFA87C1B222A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a77987-efdb-4af0-bb5f-93cc19a81e01.roa
Signing time:             Fri 26 Sep 2025 01:02:01 +0000
ROA not before:           Fri 26 Sep 2025 01:02:01 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:80:7c:09:bf:29:51:e6:46:bd:8b:60:41:41:ff:a8:7c:1b:22:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:02:01 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=9d1578ee4cfcfdcb91d9df7a3d9d7d62534f55bb61b253026beb41643be1c428, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:11:9d:45:43:48:c2:92:c3:7f:1b:7b:aa:
                    20:55:8d:e3:84:bc:c7:88:72:b4:aa:02:7e:66:fb:
                    97:7b:f4:2f:56:2c:98:9d:b8:8a:3b:50:11:5f:de:
                    30:07:b3:f0:00:a4:c4:c1:ba:e7:b8:ec:40:91:bc:
                    50:7c:08:7a:80:fa:ed:03:f4:ae:d4:0b:b6:0c:d5:
                    31:25:df:18:a4:d1:96:cb:d1:ca:02:f4:9f:b0:8e:
                    44:7f:0e:45:d5:17:72:c7:f2:22:d8:0f:10:a5:30:
                    28:41:07:49:31:b1:4b:7d:31:1f:8c:f1:3c:2b:9f:
                    a8:24:2c:a8:9f:1d:1f:df:6f:ea:2c:80:30:0f:1e:
                    1b:e3:18:85:cf:60:20:98:ba:41:11:85:42:e9:65:
                    fe:a6:11:00:4a:a2:8f:83:ef:2b:8a:0d:08:db:18:
                    57:36:df:9d:00:5c:5e:6a:f8:d9:2a:45:cf:1c:f8:
                    30:07:32:7f:e3:77:b5:f7:fa:97:03:9d:58:0d:88:
                    1d:5b:38:45:a3:a5:93:ac:a2:b4:06:94:49:95:9e:
                    bc:15:99:7a:9c:b9:7d:ac:dc:be:3e:90:af:be:50:
                    58:a8:78:f0:21:b2:9c:a4:da:ff:4c:af:3b:fa:0b:
                    3e:87:49:80:52:2d:52:d2:31:c8:3b:43:33:f3:36:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:0F:50:57:75:C1:9E:B1:96:31:49:3D:BF:7E:32:53:FD:AD:AE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a77987-efdb-4af0-bb5f-93cc19a81e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:bc:bf:5e:91:0a:f4:5d:3a:9a:f5:d2:1f:5b:71:4d:30:
         2c:aa:57:22:cd:d4:e6:16:c6:28:14:2a:a9:d1:79:2e:ee:99:
         9e:eb:a3:d9:45:f6:3c:c5:d8:47:9d:e0:d8:dc:57:fa:d6:57:
         c9:1d:44:a3:d5:05:a3:45:f8:c2:d5:d4:c4:30:9c:ab:9e:33:
         5f:e8:8a:3a:00:b0:d4:83:2f:0e:5b:a6:52:0b:71:59:9a:db:
         60:4d:e3:83:60:65:e2:9a:4d:09:1d:cd:6d:91:57:6a:48:33:
         cc:a1:e8:64:6f:7d:af:9a:d5:6d:76:3b:f6:52:92:5f:70:b8:
         c3:b4:3a:61:a3:33:b5:46:8c:e3:f9:fc:09:75:95:22:b0:49:
         79:00:91:f6:a9:a5:8c:e8:40:e5:c2:d4:d2:53:43:c5:f2:91:
         7c:0f:b5:03:97:c9:c7:c1:25:d1:cf:0e:ea:24:e7:10:37:f2:
         65:ab:05:d3:dd:fc:c0:98:99:a0:c9:b7:c0:56:0e:15:9d:45:
         8c:30:1b:1a:ea:eb:64:db:a0:be:87:19:15:45:3c:3b:85:5d:
         a6:03:24:12:47:42:0c:ed:d2:a9:62:9b:17:d0:93:36:c3:9d:
         54:38:6c:95:41:a7:27:38:c9:17:54:51:4c:83:63:3a:23:06:
         20:83:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 07:26:35 2025 by rpki-client