Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/635f8cb8-531d-4073-b933-464c39e268b2.roa
File:                     635f8cb8-531d-4073-b933-464c39e268b2.roa (raw, json)
Hash identifier:          uv3OYdSgAoLFT5R2E2KUarj0CcNl+7IKvayyzQyIqgc=
Subject key identifier:   2F:C5:DE:97:AF:35:E5:E1:27:FE:A3:35:E8:E2:CF:54:E3:C2:98:E9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DE6296AAC6BF42080F08CC9EBA0A84BC01284A2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/635f8cb8-531d-4073-b933-464c39e268b2.roa
Signing time:             Fri 26 Sep 2025 02:09:30 +0000
ROA not before:           Fri 26 Sep 2025 02:09:30 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e6:29:6a:ac:6b:f4:20:80:f0:8c:c9:eb:a0:a8:4b:c0:12:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:09:30 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=f73b3d71ee74e8c4ddf5109d79ec78d6c685b5ad7846b57a083e4ba90122de41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:4c:ba:a4:c3:34:be:f0:44:78:0e:de:4f:
                    da:6a:72:7c:2a:4c:a6:e3:40:10:90:19:ba:c3:31:
                    46:ad:71:99:c7:75:17:0a:ec:60:40:8c:b9:58:a2:
                    7f:13:66:e4:e6:d1:b2:12:5b:1e:e5:15:f8:fe:e3:
                    84:7c:76:4f:1c:44:40:4a:27:fe:6b:f2:43:9e:56:
                    80:0a:79:71:ea:14:43:92:dd:e7:ae:bc:c6:34:b9:
                    e3:07:96:3f:44:02:a5:fd:10:1c:07:7b:3c:43:29:
                    91:05:16:07:fe:cc:1e:15:18:d0:db:2a:28:39:a3:
                    34:f0:2f:65:19:dc:70:78:6d:36:2a:90:01:28:ce:
                    e9:4a:f1:d9:2c:2b:71:bf:51:b1:cc:fe:f8:71:c8:
                    aa:f9:24:85:a7:1b:b6:3c:c6:27:d9:71:f5:55:84:
                    64:6f:73:fe:fe:61:10:31:f9:56:67:04:6b:2f:6a:
                    99:ef:74:54:88:c4:fd:8a:63:6f:cf:58:ac:86:eb:
                    31:b2:2e:ab:38:f7:13:e9:4b:15:50:08:3c:f6:18:
                    0d:65:6e:4f:24:4b:6b:3a:43:77:90:7d:a3:13:1d:
                    35:9e:fc:ad:73:9e:fc:00:a5:36:03:02:4f:e3:ef:
                    ed:8f:ed:a4:3c:e6:f0:0b:02:37:07:26:9b:86:44:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:DE:97:AF:35:E5:E1:27:FE:A3:35:E8:E2:CF:54:E3:C2:98:E9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/635f8cb8-531d-4073-b933-464c39e268b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:63:f3:f0:d1:9f:a6:bc:c4:13:7a:df:52:cf:ff:4b:e2:
         a1:bf:0a:b6:b5:0b:5a:f8:ed:2a:96:34:11:cb:15:b4:4d:53:
         2d:de:6a:c7:85:4d:df:9f:4e:49:09:8f:2c:b9:e4:2e:f6:65:
         ed:75:6c:b8:fa:31:3f:61:57:af:5a:70:5a:e8:f7:d9:48:8d:
         d6:b7:ca:22:21:72:c7:a5:49:47:8d:66:5a:d2:f0:4e:08:cf:
         7c:cf:57:dd:b0:82:f0:f4:9c:82:4d:1b:4f:1a:b9:55:71:1b:
         9d:05:06:2a:66:da:ca:fb:b7:e9:c4:1f:a0:7d:e3:2c:f6:f2:
         a6:1f:c5:eb:14:93:a9:a0:49:09:8a:2a:e3:64:01:87:4b:17:
         36:bf:bd:83:0f:74:db:d6:d5:a6:18:fd:ba:44:0c:d6:d4:19:
         81:7c:de:4d:31:48:70:01:34:e1:47:93:d1:f2:49:07:18:fa:
         05:8e:22:53:00:7c:f1:e1:c2:c7:68:97:42:4d:fa:f6:44:9c:
         53:71:f8:91:24:d8:15:02:d1:63:4c:1c:04:e1:ed:f7:b0:f9:
         ab:8e:d5:9b:6d:36:21:04:12:eb:26:6c:bb:60:09:c6:c3:16:
         17:6d:02:4b:c0:75:c1:e8:70:08:00:f7:32:52:5a:88:c0:29:
         c0:95:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:05:04 2025 by rpki-client