Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd9d0d1-426a-49e6-81c9-24229bf6b882.roa
File:                     4cd9d0d1-426a-49e6-81c9-24229bf6b882.roa (raw, json)
Hash identifier:          qlKh/YNOqg30rDkOmakmriHAn9rMEgUegQfPt2SUJ3I=
Subject key identifier:   B2:0B:3C:54:C2:61:3B:53:41:F4:6B:B8:D5:CC:E7:3F:16:F4:52:D4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3CF8C43ACCD095E316A4D99031A4E524560B2429
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd9d0d1-426a-49e6-81c9-24229bf6b882.roa
Signing time:             Thu 25 Sep 2025 21:09:51 +0000
ROA not before:           Thu 25 Sep 2025 21:09:51 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f8:c4:3a:cc:d0:95:e3:16:a4:d9:90:31:a4:e5:24:56:0b:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:09:51 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=38f711fe2abf9ccb58b84212bae79709724dfe05d36e35de2ea01759f3919b8b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:d5:7a:d8:93:94:29:85:ee:78:54:13:1a:
                    1c:40:59:0e:84:52:cf:a1:37:be:d4:3f:bc:92:df:
                    81:86:25:3d:b7:aa:2f:ae:ff:47:2c:3b:cd:ff:31:
                    5e:cf:4b:52:4b:e1:25:57:45:17:ff:15:31:e5:59:
                    40:5d:14:15:e1:57:30:b1:16:21:ed:6e:3d:0e:85:
                    71:7b:60:3c:66:01:d5:71:d3:b5:2d:34:ca:fd:1e:
                    25:7f:d3:0d:03:b9:22:4e:c4:c5:d3:00:ba:1a:12:
                    46:03:29:03:fe:bf:61:f5:ff:82:c6:c3:7c:34:09:
                    e1:11:f0:91:e0:97:c6:30:7b:5a:bc:03:96:c3:99:
                    3c:b7:48:a9:6f:4e:e1:b4:95:a5:29:f7:09:21:2d:
                    d5:6a:64:82:ff:ad:42:df:43:78:be:b9:44:88:19:
                    6c:ef:48:fc:cb:1b:da:d0:ea:43:7d:ca:a1:58:a7:
                    e9:c4:53:ce:c8:83:2d:e9:e6:96:e8:95:8e:ec:8b:
                    ba:24:42:22:8b:6d:b7:93:7b:ca:40:21:d8:05:d6:
                    d5:a5:94:f5:2e:be:07:98:e4:8e:bc:5d:73:09:b0:
                    13:05:77:fa:50:a1:c4:a4:32:4d:a4:ac:f8:64:b7:
                    bd:9c:e9:16:f2:69:cc:cb:8b:58:8b:9b:7b:bf:69:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:3C:54:C2:61:3B:53:41:F4:6B:B8:D5:CC:E7:3F:16:F4:52:D4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd9d0d1-426a-49e6-81c9-24229bf6b882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:83:67:21:5b:14:ba:1a:a5:7d:42:d8:a8:a9:75:61:2e:
         f1:c6:1f:dc:db:3a:b8:c7:7d:28:e9:7d:e9:a0:d0:98:0a:fb:
         4a:f5:ac:1e:8f:d6:52:90:b5:9f:b0:d0:87:0c:c7:35:b6:8c:
         a0:60:31:ea:f8:82:f4:6b:6e:31:e5:3f:ff:8b:56:65:1d:61:
         89:e1:bb:25:e0:60:ea:0a:24:f8:9b:8b:25:9a:e1:5b:6c:1b:
         a7:1a:37:d1:04:61:22:e9:18:84:e1:1b:8e:e5:83:7b:cd:f5:
         6a:44:43:28:e4:71:44:10:dd:e7:54:06:97:aa:e9:39:37:f2:
         cc:c3:ab:4a:f6:ae:39:f7:ba:e2:03:d3:27:ba:ee:51:e4:0b:
         1d:a6:0c:ce:4c:07:af:51:7e:f3:b3:d7:6c:d5:f6:92:b4:b0:
         cd:1d:b4:c3:e4:11:df:44:13:7e:85:ed:db:85:60:8c:2b:07:
         44:ff:76:61:62:f0:30:d9:dc:5e:20:71:3a:70:4d:4a:d9:ed:
         0e:80:a9:68:f0:dd:c2:1b:17:8e:9f:fd:96:f0:75:24:ae:a5:
         23:09:06:e9:a5:57:38:15:74:e1:0d:04:4a:a5:13:e2:12:32:
         19:0d:41:49:c7:e1:68:dc:1b:0e:a5:4f:ef:96:d0:88:89:43:
         db:ab:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:57 2025 by rpki-client