Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62b84281-9703-42f8-9033-d73658a0ad78.roa
File:                     62b84281-9703-42f8-9033-d73658a0ad78.roa (raw, json)
Hash identifier:          6y5ZzKZBnVM6dSH+mtsVb6qHuLG/2+OAR/BspTLnR+I=
Subject key identifier:   59:80:AD:6E:98:2C:EF:39:E4:7D:17:C8:0B:F1:63:B3:6C:22:1A:6F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1C31B8F3878BCC81AC935BB7F699391F1BEEEF3B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62b84281-9703-42f8-9033-d73658a0ad78.roa
Signing time:             Thu 25 Sep 2025 23:59:52 +0000
ROA not before:           Thu 25 Sep 2025 23:59:52 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:31:b8:f3:87:8b:cc:81:ac:93:5b:b7:f6:99:39:1f:1b:ee:ef:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 23:59:52 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=479ddd4a08becaf8589c16d005a91acf4f58473233b2cd684737f3b6dba06291, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:07:d3:e3:b1:b9:48:e8:0c:8d:bd:9b:16:
                    48:8a:f6:50:10:23:a7:5f:71:e5:5e:a2:5a:32:dc:
                    5b:cf:bf:9d:c9:38:d8:eb:fe:3d:07:70:36:20:61:
                    1f:8d:57:ea:ea:eb:fc:68:11:a3:e9:d3:df:ac:fc:
                    7a:c4:f3:e0:8a:87:e8:43:a0:4e:ff:17:7b:73:7a:
                    f1:7e:8d:81:78:e4:8a:fa:ba:26:d8:60:4b:e9:50:
                    90:af:90:3d:a3:c3:fb:48:6d:a2:fc:c7:17:1c:e8:
                    a9:94:57:38:97:09:66:01:ba:2b:36:c8:a0:20:45:
                    0b:f9:80:ff:cf:3e:5d:b8:61:23:93:43:a9:1a:ff:
                    e9:b9:c6:cb:ec:a3:7d:19:7c:dd:65:69:ce:ba:5b:
                    51:5c:ad:ba:66:98:b7:47:06:37:7e:20:27:84:1c:
                    ca:53:4e:8e:57:2a:95:7c:7a:64:ce:9d:13:d5:c0:
                    49:c9:dd:67:18:1a:6a:68:69:30:2a:aa:f3:e7:bd:
                    2c:6e:e8:2b:09:aa:7d:36:59:89:62:86:aa:47:e0:
                    8a:51:75:28:69:e1:92:97:c1:2f:90:0e:7d:1d:59:
                    fa:56:68:91:99:95:38:56:35:cc:98:79:64:d2:17:
                    59:e2:6b:0b:a2:9f:e4:78:90:be:19:d3:bd:17:35:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:AD:6E:98:2C:EF:39:E4:7D:17:C8:0B:F1:63:B3:6C:22:1A:6F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62b84281-9703-42f8-9033-d73658a0ad78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:db:0d:3c:a0:50:d2:04:20:21:63:5d:83:54:0e:0b:67:
         d4:25:bb:19:9f:ee:b3:02:dc:e5:a3:42:59:54:73:d5:47:7b:
         92:f1:93:2b:af:29:6a:42:ff:54:de:f8:53:1b:a3:0b:2f:8b:
         54:ff:14:3d:bf:c7:ec:18:63:f8:71:a3:03:25:30:d9:80:8a:
         0d:b1:a3:8f:88:f5:99:c4:a8:87:2d:33:c4:6c:9a:fe:4d:8d:
         e6:1b:a5:c8:26:96:24:8e:40:7b:48:b3:a4:8e:f8:de:b1:eb:
         41:9b:ea:8a:1d:ba:13:11:8e:d1:7d:e7:24:b8:7b:a3:9a:44:
         4d:70:d9:2f:f3:5c:b4:24:f1:91:1b:f5:c4:2e:8a:59:33:00:
         5f:1a:db:08:bc:26:9d:fa:46:c3:51:35:0c:39:42:a8:7d:4a:
         0d:81:cf:72:25:2b:71:c6:f9:8c:80:e3:81:ee:04:ea:52:6a:
         7f:bb:fe:e5:15:10:0d:d3:5b:42:89:a3:64:94:dc:21:08:da:
         f7:23:6c:32:64:1f:f6:a9:35:2f:b8:a8:8d:dc:55:eb:03:93:
         b7:d3:fa:c2:df:3a:0f:7d:21:d3:e1:53:1a:61:f1:98:65:af:
         cf:68:db:20:d2:13:fa:36:69:7b:67:15:78:bf:bd:20:e8:1b:
         20:50:c4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:54:14 2025 by rpki-client