Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551c9896-a9c5-4ea3-8a51-80aa4892c9cb.roa
File:                     551c9896-a9c5-4ea3-8a51-80aa4892c9cb.roa (raw, json)
Hash identifier:          pj/9r0ajSDBn9Nd7i3Sw480ZzCf0uqPyddY/5W5P2wU=
Subject key identifier:   21:DD:AD:9F:64:3E:2C:89:BD:12:91:96:EC:F2:6F:29:03:97:4F:E8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4E729EC293AB608FD15060B5F470832D240DE891
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551c9896-a9c5-4ea3-8a51-80aa4892c9cb.roa
Signing time:             Thu 25 Sep 2025 21:11:49 +0000
ROA not before:           Thu 25 Sep 2025 21:11:49 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:72:9e:c2:93:ab:60:8f:d1:50:60:b5:f4:70:83:2d:24:0d:e8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:11:49 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=0417185523ac1f3b83fb6a472b2137cabbe7dc3ed55786ac2db38d460db23e52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:fd:e7:70:af:e2:ab:8a:56:b9:fb:b7:db:
                    92:90:64:97:a6:57:35:9a:be:ae:16:38:a2:f1:62:
                    0b:ed:2f:c2:4d:c0:c7:71:6b:33:a8:3e:9f:b3:1e:
                    07:ca:1f:d6:79:49:55:ce:fa:cf:da:93:60:52:38:
                    66:57:06:01:14:80:26:eb:4a:81:38:5e:fa:85:f5:
                    81:53:10:f8:08:17:fc:14:4f:9d:76:00:88:a7:cb:
                    31:bf:40:70:38:d9:c7:53:c6:16:22:ee:8d:11:28:
                    47:e4:b3:87:65:a1:e1:7b:ae:fc:3d:19:1a:1d:40:
                    77:00:0b:9d:81:f1:9f:b8:07:b7:b1:16:81:e1:b1:
                    4e:93:fa:a7:96:c0:93:27:42:e2:67:a2:04:b3:59:
                    55:9d:15:3b:e9:99:74:88:6a:80:82:78:8f:a3:4b:
                    3a:27:14:28:a1:bd:37:f5:39:f4:73:3f:4a:6c:99:
                    d9:01:b2:c9:f4:05:f3:cf:0e:07:8b:2a:a0:79:da:
                    f7:7a:a4:87:74:7f:29:92:cb:6b:22:5f:95:04:b8:
                    a3:c2:60:a2:02:b2:d2:60:10:c8:52:40:79:35:cc:
                    d3:fe:41:22:04:ca:c2:95:ec:e6:8a:da:20:f7:44:
                    8a:10:90:8d:41:93:87:a0:71:16:37:9d:88:d2:ce:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:AD:9F:64:3E:2C:89:BD:12:91:96:EC:F2:6F:29:03:97:4F:E8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551c9896-a9c5-4ea3-8a51-80aa4892c9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:57:7b:22:9f:fa:b3:ae:f6:37:9c:73:2f:45:4d:44:93:
         3a:ce:1a:10:98:45:88:98:b3:57:0d:53:6b:60:a5:81:9b:66:
         c1:78:f2:db:a7:7d:51:f0:f4:29:51:0a:14:30:95:54:1b:f9:
         79:bf:a5:bf:3e:f4:d0:a6:cc:cc:8d:97:51:f1:c4:7a:41:32:
         57:8d:68:23:d5:e6:3a:c6:bb:64:16:5a:b2:fb:98:84:a5:08:
         f5:d3:bb:36:ec:54:8d:dc:3b:28:c2:ba:c1:3d:69:0c:44:06:
         21:2d:96:60:61:25:d2:82:43:f9:0d:2b:d1:d2:f0:2e:c1:d2:
         c2:db:b2:0e:c3:36:80:94:55:e3:dd:50:a2:b9:04:83:4f:5e:
         cf:b1:ac:2d:d7:30:e9:2d:4c:6f:af:9b:4b:d6:c8:89:65:5f:
         a1:b0:b9:56:0e:39:f1:5c:7b:1e:5a:f1:a1:3a:50:f6:4c:b9:
         b6:2b:d3:0b:b3:3c:4b:f8:33:92:d5:f1:88:43:f0:9a:49:8f:
         b5:7b:cf:22:b6:6a:4c:34:2e:bb:85:5c:1e:96:34:54:8e:ee:
         a7:88:1b:6e:97:9c:d6:dc:3b:ef:46:db:a4:56:c0:31:0d:95:
         92:88:04:be:e3:0c:fd:1f:27:b4:de:36:9f:d9:af:c3:57:13:
         00:b8:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:18:52 2025 by rpki-client