Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f922c4b-8c67-46e5-8df3-ea325e0634ba.roa
File:                     5f922c4b-8c67-46e5-8df3-ea325e0634ba.roa (raw, json)
Hash identifier:          cU4z3Aa9hHNO2Uv1QHoVLUmabImuXyen4QMGXlLWBQ4=
Subject key identifier:   EF:F0:BD:35:44:4F:05:E9:40:B3:98:29:1F:C0:14:83:4A:DB:55:20
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4B606B0AE5FA2FEFAB5986A9F5475D95F53013CA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f922c4b-8c67-46e5-8df3-ea325e0634ba.roa
Signing time:             Thu 25 Sep 2025 20:52:13 +0000
ROA not before:           Thu 25 Sep 2025 20:52:13 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:60:6b:0a:e5:fa:2f:ef:ab:59:86:a9:f5:47:5d:95:f5:30:13:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 20:52:13 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=1df9f123d23c6c3d1cb7d8d28ce9505012fe36b3f645a56d0f5b0527707b3024, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:33:0e:f4:33:fa:47:15:82:46:21:51:7c:
                    c6:6c:f8:cd:b4:5d:01:b1:38:86:54:63:29:30:f8:
                    a4:f8:6e:87:a5:bb:2f:8e:7e:5f:eb:4c:3d:ea:c2:
                    63:1c:32:d5:1b:a7:27:f5:4d:d7:43:fa:24:1d:d9:
                    a7:c7:1f:3a:8d:1b:ef:be:df:8c:57:97:f0:10:29:
                    7a:9a:57:36:31:d4:ce:6e:d9:59:3b:5f:76:be:ec:
                    63:56:af:c0:bf:27:e6:2f:2d:31:a2:0f:d8:8c:63:
                    12:a8:63:98:d3:04:5a:7b:75:4b:45:6e:d5:89:93:
                    46:ff:67:02:05:19:55:44:89:b9:65:3b:cb:39:b4:
                    9c:35:bb:4a:19:29:fa:32:a1:58:2c:a9:f9:19:77:
                    de:12:8c:75:c0:6f:17:61:a0:99:fe:39:db:5e:68:
                    f3:1c:d0:00:89:f7:d2:d1:89:27:65:da:8e:64:95:
                    68:75:41:bf:b1:6d:18:f9:a3:7f:a0:41:01:33:12:
                    f0:4b:35:c0:a9:a4:8f:b3:7b:63:3b:26:72:16:3e:
                    36:02:47:bc:fc:18:a3:74:9a:53:b1:7f:3d:03:4f:
                    94:b7:48:62:a1:58:b3:d3:e8:ef:52:7c:8c:7e:2e:
                    f3:2b:b0:e9:8e:df:80:2a:0e:78:c3:e9:fd:7b:77:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:BD:35:44:4F:05:E9:40:B3:98:29:1F:C0:14:83:4A:DB:55:20
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f922c4b-8c67-46e5-8df3-ea325e0634ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3b:e0:b8:63:9e:94:5c:d8:f2:b4:38:c3:43:2c:18:c0:fa:
         a7:fa:43:92:6a:0f:bf:07:ee:eb:97:80:e9:13:cb:73:07:95:
         16:e0:f0:e1:74:f1:51:89:97:47:b7:ad:90:0e:c5:db:47:8b:
         db:07:c8:e2:bc:31:04:ce:f7:64:65:92:5b:ad:40:cc:28:61:
         7e:69:7c:6f:f0:c0:fa:83:1e:9b:0b:07:ba:76:ee:56:ce:8d:
         fd:e9:4d:b3:86:af:3b:7c:d8:b2:b6:a1:6e:1b:48:35:43:ee:
         1e:52:4c:49:02:bc:87:2e:c4:21:73:41:fc:6f:5e:08:d9:db:
         a6:cd:4a:9e:e5:3c:26:0b:5d:b4:eb:05:1d:a1:de:6f:11:79:
         80:e4:5f:bf:25:a0:47:22:3f:5a:79:2a:08:54:d7:d2:0a:e2:
         66:25:b0:8e:93:4b:e9:f1:34:dd:0d:c1:a4:f1:b5:e9:17:cb:
         29:7f:bd:97:08:89:cf:c3:56:a6:92:20:55:7e:44:b3:8b:f0:
         b8:3b:69:38:a6:a1:63:43:14:8f:4c:9b:ce:b8:62:0f:55:55:
         74:bf:57:ea:12:f8:60:69:75:0c:7c:5f:f4:2c:cc:e8:6b:db:
         34:3f:a0:27:4d:2e:30:51:fb:e2:f6:68:e0:1d:ec:7a:0d:76:
         64:d3:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:03:27 2025 by rpki-client