Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66694af5-19af-4e77-8e41-dc699a6a0447.roa
File:                     66694af5-19af-4e77-8e41-dc699a6a0447.roa (raw, json)
Hash identifier:          PgjwG+Mp541ibSCY8Rg1OH+3RFSQQudL2ryMQW/6s3Y=
Subject key identifier:   5B:1C:1D:6F:57:4A:72:C9:54:B6:9A:DE:7A:8A:35:17:47:5B:18:76
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1F6E18AB261D43BF756C70EBE547C8CBEAB078C4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66694af5-19af-4e77-8e41-dc699a6a0447.roa
Signing time:             Thu 25 Sep 2025 17:44:34 +0000
ROA not before:           Thu 25 Sep 2025 17:44:34 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.163.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6e:18:ab:26:1d:43:bf:75:6c:70:eb:e5:47:c8:cb:ea:b0:78:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:44:34 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=674b605fa5bedfa4522efd20cecdcc8ced49550e3e42bae06ee73a2410cf4d08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:4b:12:b5:c8:6d:33:83:34:e0:57:9f:6b:
                    8a:4a:e1:8c:d5:e6:33:97:a7:69:d7:3f:cf:7e:ad:
                    1a:24:34:d0:b1:83:6e:d2:a7:75:dc:14:e4:9e:d4:
                    8a:40:ba:a0:1f:b9:2b:f6:f1:22:f1:ae:39:eb:66:
                    4e:ef:5a:58:15:c3:04:34:e6:40:e7:cf:19:3e:eb:
                    f4:4c:fb:dc:be:52:b3:88:10:6c:51:c3:67:46:5f:
                    42:21:f5:a3:e3:16:77:3b:89:69:9e:8f:32:40:c7:
                    73:fc:08:22:66:ce:59:b8:76:72:7a:37:96:b3:cd:
                    5a:1a:fb:42:d4:6a:a9:79:15:92:ae:fb:b7:fc:16:
                    fe:bd:46:4e:e7:4a:fa:5d:ea:92:7a:f7:b4:c2:a5:
                    70:c0:da:cf:95:8c:26:ac:72:31:7f:8a:dc:06:9a:
                    c8:d4:e5:7d:f7:d1:7b:68:84:90:bc:1b:9e:6d:13:
                    a3:83:8e:4a:9e:db:d0:2c:00:14:31:ef:2c:23:d2:
                    fe:d5:97:9f:6a:d0:3b:35:e3:8d:1c:dc:a6:20:7b:
                    dd:c3:10:25:00:da:31:ce:6e:f5:b8:e0:a1:02:cc:
                    a1:41:e6:87:c6:87:93:97:e4:1a:6e:fc:98:65:bb:
                    6c:f3:48:04:06:b2:74:fd:e9:43:e8:19:6e:76:cb:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:1D:6F:57:4A:72:C9:54:B6:9A:DE:7A:8A:35:17:47:5B:18:76
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66694af5-19af-4e77-8e41-dc699a6a0447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.163.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:f9:be:e8:1e:be:40:68:9c:6f:91:bd:7a:01:3e:47:0f:
         bf:c8:c8:a6:66:0f:be:c6:1d:ba:c4:01:0d:7d:85:4c:90:85:
         ff:8b:2f:07:1b:d0:f0:97:97:fc:b3:46:dd:8f:c1:56:92:23:
         af:d8:05:be:05:48:89:85:4b:05:cf:d1:eb:f1:a1:1b:55:f4:
         18:a7:fa:a0:dd:a5:28:4a:16:aa:66:58:0d:db:56:a2:9e:62:
         96:af:d8:67:3b:cb:00:b5:77:0d:74:78:8a:a2:43:0e:f3:9d:
         16:3c:f1:10:1e:14:8c:58:89:b6:d8:2f:1b:05:3f:55:85:dc:
         6a:7b:b9:ea:84:a4:a3:d2:4b:fa:2c:0f:fb:71:8c:58:cc:15:
         3e:9b:b6:21:dd:59:56:ee:85:7b:6d:1e:84:dd:f3:8b:35:35:
         d2:59:95:d8:8a:84:3e:0d:05:19:d9:c2:bd:3a:ea:f0:51:1b:
         8e:04:57:25:9a:f6:0d:04:2c:c8:e5:24:d2:ca:84:4f:06:6f:
         2f:fe:a7:9d:f0:f2:20:47:74:d9:a6:1e:e1:28:61:45:98:e2:
         ea:56:27:e1:f8:b2:7a:3a:64:47:1a:ea:35:ac:e8:af:e0:c6:
         24:55:e7:65:2d:3a:5e:4f:b2:5c:3c:17:00:20:6b:3d:57:40:
         04:74:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:52:33 2025 by rpki-client