Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49d1a77a-619a-486e-981c-466196e4bc78.roa
File:                     49d1a77a-619a-486e-981c-466196e4bc78.roa (raw, json)
Hash identifier:          /uCdMFb7rFiTDG++dHMPLJrHjURH11mQm9Zn3mOs53k=
Subject key identifier:   B6:01:E0:30:F6:B4:09:E7:7C:04:CB:16:65:E3:30:10:A7:5D:B5:3A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0160D6E9CE860D711FA6A7C50ED1F2FA869CAB35
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49d1a77a-619a-486e-981c-466196e4bc78.roa
Signing time:             Thu 25 Sep 2025 18:11:57 +0000
ROA not before:           Thu 25 Sep 2025 18:11:57 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.165.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:d6:e9:ce:86:0d:71:1f:a6:a7:c5:0e:d1:f2:fa:86:9c:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:11:57 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=fb23aca8f184e8478a73332345eaec6052ad522d57cf433934f1ebc5cb113f1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:6f:14:9b:fd:4e:ec:3f:cc:d3:aa:85:f0:
                    59:83:a7:9a:af:76:89:50:8a:a2:2b:07:64:19:20:
                    65:5f:ff:c4:fb:55:fd:88:06:7f:9a:bb:e8:6a:61:
                    39:22:a4:48:f9:6d:05:7e:f6:1b:8c:04:5c:05:11:
                    cc:b6:b1:29:6d:af:d9:d8:31:56:e8:fa:e6:4e:e5:
                    71:79:4d:86:b2:92:2e:4f:79:64:bd:bd:3e:0c:5f:
                    bc:60:ff:09:ec:3d:0c:d1:60:6d:8c:80:aa:64:53:
                    28:3d:0e:3b:96:eb:85:97:f1:c3:54:da:34:38:81:
                    f5:62:64:09:8c:1a:fa:c5:52:c7:bf:39:a7:9e:37:
                    ce:03:21:c4:f7:e3:ff:82:ce:99:c8:39:74:75:c4:
                    7b:ae:de:2b:eb:ce:b0:26:9b:dd:aa:96:be:8c:11:
                    b5:13:8d:23:44:da:ac:cf:2c:74:ee:c1:45:78:91:
                    b1:5b:07:10:c1:29:6c:3f:2b:7c:6a:df:6a:ac:e0:
                    6b:c2:4d:51:7d:a2:fe:11:19:53:b7:09:d6:9b:5c:
                    66:96:de:a0:e6:61:96:da:34:cc:c8:52:15:76:9f:
                    71:3a:08:ca:f9:2a:c9:c3:63:bc:ec:7f:5a:e9:0c:
                    31:0e:0f:8e:90:f7:1a:a7:82:0f:7d:2c:88:ba:4c:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:E0:30:F6:B4:09:E7:7C:04:CB:16:65:E3:30:10:A7:5D:B5:3A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49d1a77a-619a-486e-981c-466196e4bc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.165.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:85:2e:42:fe:0e:0e:39:b9:a8:fb:33:e3:a4:33:d3:00:
         6f:c1:12:91:db:f5:a2:27:d6:5e:9e:76:06:64:74:4b:fd:0e:
         af:e3:d4:65:70:cb:39:c2:07:eb:3d:27:84:bd:75:a6:fc:c5:
         1c:52:08:5a:c7:1b:78:f7:a9:df:9d:4b:44:25:fc:53:92:f3:
         27:91:72:72:68:ae:89:6d:80:79:d8:2a:4e:00:7b:ca:2d:60:
         14:39:f2:33:86:0b:51:55:db:c1:87:b8:6d:93:24:67:12:95:
         34:a9:09:41:59:f7:2a:fd:79:c2:4d:fa:db:d2:3d:b9:c1:4a:
         5f:cf:e2:80:ff:7f:d2:ee:e6:67:40:41:15:d2:5c:23:63:04:
         17:e2:47:a6:f7:d5:e5:d6:0f:a3:b4:64:13:9a:b9:ad:39:68:
         57:f6:03:d0:ba:b0:a7:b7:06:87:79:80:18:38:f2:ff:63:eb:
         e0:bb:fc:f2:b8:9b:45:8c:68:ea:32:0e:ef:98:ad:8c:2d:f1:
         03:9e:7b:a9:53:41:e1:f6:63:74:bd:43:2b:c1:d3:1f:6d:46:
         6e:fc:8c:4f:74:4f:da:46:82:3f:e9:28:8b:33:59:45:0a:0e:
         de:5f:e7:9a:41:ae:38:46:01:73:90:8c:59:35:7f:ab:f6:e5:
         31:bc:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 00:00:26 2025 by rpki-client