Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e3eec6-03ce-48cd-a13e-8e2b9f3f76a8.roa
File:                     54e3eec6-03ce-48cd-a13e-8e2b9f3f76a8.roa (raw, json)
Hash identifier:          AJzrt7gcyd7oAfJ6/QMJ/QTqUf7MKEXJsWYEwL0Skeo=
Subject key identifier:   C6:BD:A8:75:32:C7:DA:F9:25:A8:5E:27:07:7D:46:FF:5A:C9:8B:20
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D5957A50D8D21BBBD6E89314DA353E0CC74C431
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e3eec6-03ce-48cd-a13e-8e2b9f3f76a8.roa
Signing time:             Thu 25 Sep 2025 18:32:31 +0000
ROA not before:           Thu 25 Sep 2025 18:32:31 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.166.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:57:a5:0d:8d:21:bb:bd:6e:89:31:4d:a3:53:e0:cc:74:c4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:32:31 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=278401b6af89b3b93b52c48822b374270be8636b508c68a5be37cebd948dee09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:f5:56:6e:c9:68:92:65:cb:ee:f3:98:6a:
                    b7:93:48:af:65:50:c1:a5:fe:74:5b:7d:2b:b4:aa:
                    c8:4a:13:85:42:bc:38:87:ca:bc:eb:ab:7a:bc:f1:
                    2a:70:96:73:6f:28:6b:ac:e0:f3:b5:bf:3d:8f:bf:
                    44:b9:94:6a:f6:50:8b:a4:c9:83:54:78:56:ba:88:
                    58:72:82:86:98:4d:7f:ed:ba:17:e4:2b:95:bd:b9:
                    6f:35:e6:8c:33:1f:5b:5a:72:65:f0:20:c2:8a:bb:
                    98:e4:5b:31:6a:07:3e:6d:f0:e4:6e:fe:ed:7e:9d:
                    a1:9a:37:61:31:e8:72:7d:04:2d:e0:6d:37:08:0c:
                    e9:d7:1b:39:01:b0:7b:60:64:b0:68:18:f9:76:06:
                    04:21:b8:c8:eb:fa:2d:94:b4:6d:5a:10:d3:05:05:
                    f1:85:26:52:4d:07:32:c5:bd:d5:30:be:ff:e8:aa:
                    ac:57:0c:7d:86:1e:a9:0d:a3:78:78:a2:77:9c:9f:
                    36:e6:98:35:a4:97:9d:ff:45:52:20:67:ce:74:56:
                    71:dd:a9:cb:5f:c1:4d:3a:08:e0:a1:b2:dd:67:e2:
                    99:44:1f:34:43:f6:24:30:2f:da:a4:76:eb:6a:75:
                    91:3e:e8:f8:de:a1:2c:62:57:c8:ab:0c:30:00:74:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:A8:75:32:C7:DA:F9:25:A8:5E:27:07:7D:46:FF:5A:C9:8B:20
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54e3eec6-03ce-48cd-a13e-8e2b9f3f76a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.166.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:31:db:21:1f:fc:e5:d0:a0:65:30:d2:b8:b5:d8:73:d6:
         53:db:3b:83:e6:f1:8b:f3:b5:e0:ef:d7:ef:1c:c5:5f:be:4e:
         d9:7e:a0:69:35:22:54:0d:4c:b3:7b:7a:e4:05:89:fe:a0:44:
         a1:73:3c:2f:c6:99:33:51:76:13:d4:10:c4:e4:e2:c1:15:02:
         9f:48:28:05:49:d0:5f:fd:4e:cc:ae:14:67:2a:0d:50:d0:6a:
         28:ed:b2:d2:83:7c:58:ee:67:0d:39:e2:c3:71:e4:8c:cb:4e:
         54:1a:71:b6:67:78:f3:8e:a6:75:76:89:41:84:f5:92:25:4a:
         cb:e4:af:8e:ec:3f:46:bf:4d:88:91:fe:ef:3d:a4:9c:7c:e8:
         02:bf:3f:cc:91:52:8c:af:8b:c3:df:15:90:7c:f1:8e:bb:4e:
         14:f1:26:c3:61:02:31:d2:55:83:99:8b:b7:ca:4e:b7:6b:98:
         4a:de:d7:f3:b8:5a:4a:02:f3:ea:c6:d5:fa:a3:3d:82:f2:71:
         a4:25:2a:76:32:23:dd:cb:fc:49:75:cd:b8:e8:05:34:cc:3b:
         2e:87:73:09:e9:b0:a5:16:9d:29:68:e8:c7:a7:db:7d:2d:92:
         82:3c:c1:60:55:8a:aa:fa:0a:28:82:f3:9b:68:79:ad:2a:64:
         6e:ee:fd:26
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULVlXpQ2NIbu9bokxTaNT4Mx0xDEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgzMjMxWhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzg0MDFiNmFmODliM2I5M2I1MmM0ODgyMmIzNzQyNzBi
ZTg2MzZiNTA4YzY4YTViZTM3Y2ViZDk0OGRlZTA5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsLvVWbslokmXL7vOYareTSK9lUMGl/nRbfSu0qshKE4VC
vDiHyrzrq3q88SpwlnNvKGus4PO1vz2Pv0S5lGr2UIukyYNUeFa6iFhygoaYTX/t
uhfkK5W9uW815owzH1tacmXwIMKKu5jkWzFqBz5t8ORu/u1+naGaN2Ex6HJ9BC3g
bTcIDOnXGzkBsHtgZLBoGPl2BgQhuMjr+i2UtG1aENMFBfGFJlJNBzLFvdUwvv/o
qqxXDH2GHqkNo3h4onecnzbmmDWkl53/RVIgZ850VnHdqctfwU06COChst1n4plE
HzRD9iQwL9qkdutqdZE+6PjeoSxiV8irDDAAdKxxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxr2odTLH2vklqF4nB31G/1rJiyAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU0ZTNlZWM2LTAzY2UtNDhjZC1hMTNlLThlMmI5ZjNmNzZhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADppkwDQYJKoZIhvcNAQELBQADggEBAGilMdshH/zl0KBlMNK4tdhz1lPb
O4Pm8YvzteDv1+8cxV++Ttl+oGk1IlQNTLN7euQFif6gRKFzPC/GmTNRdhPUEMTk
4sEVAp9IKAVJ0F/9TsyuFGcqDVDQaijtstKDfFjuZw054sNx5IzLTlQacbZnePOO
pnV2iUGE9ZIlSsvkr47sP0a/TYiR/u89pJx86AK/P8yRUoyvi8PfFZB88Y67ThTx
JsNhAjHSVYOZi7fKTrdrmEre1/O4WkoC8+rG1fqjPYLycaQlKnYyI93L/El1zbjo
BTTMOy6HcwnpsKUWnSlo6Men230tkoI8wWBViqr6CiiC85toea0qZG7u/SY=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:57:41 2025 by rpki-client