Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67eed033-9d7d-4e3f-bb19-dd52c8618cc0.roa
File:                     67eed033-9d7d-4e3f-bb19-dd52c8618cc0.roa (raw, json)
Hash identifier:          WCivhlTdPBX2MWi+phe5UrkNTN4HtYz1zkTcu2No/y0=
Subject key identifier:   38:4F:80:C0:87:03:71:D1:8E:0C:A5:29:37:49:5B:2B:EA:B9:5E:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62E907ECE32D4C39DB0E1615C946D7BE87780B86
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67eed033-9d7d-4e3f-bb19-dd52c8618cc0.roa
Signing time:             Thu 25 Sep 2025 23:32:20 +0000
ROA not before:           Thu 25 Sep 2025 23:32:20 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:07:ec:e3:2d:4c:39:db:0e:16:15:c9:46:d7:be:87:78:0b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 23:32:20 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=1c374985b7baa3ae141bdddb1e8e4fabbdb2e327d3bc6a04f33d8e2a6bd43ed7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:4c:07:b2:2b:02:78:db:1f:29:47:6a:7e:
                    18:5d:61:85:7c:f9:99:dc:81:00:84:1d:cf:99:10:
                    de:7c:20:ba:52:87:38:2a:72:78:30:70:4f:9c:74:
                    46:32:3f:9f:70:b0:ae:b1:bf:af:5b:9f:50:85:08:
                    29:30:0e:8e:47:09:a6:f6:25:60:97:7f:54:5f:83:
                    39:8e:72:18:4a:48:47:9f:41:b4:14:77:0e:92:6f:
                    67:4e:62:09:25:eb:7e:7e:ad:af:5f:6c:5e:8f:cb:
                    bf:30:9f:9d:cc:90:30:ad:cd:87:7d:8f:8f:79:e9:
                    b4:d5:4b:6c:7c:e6:90:37:32:92:5d:0b:11:a0:82:
                    de:3e:42:d2:5e:0f:38:f8:a5:94:8b:a9:f4:99:85:
                    88:35:fd:4e:ee:c5:57:2c:b5:9c:18:cd:05:5a:98:
                    a0:a1:50:a3:3b:53:b8:83:8d:51:39:61:9d:18:60:
                    f5:9a:2d:0a:b9:e6:9b:a3:dd:ad:07:05:7e:bd:a2:
                    b1:0f:b2:44:e1:24:dc:10:52:6c:d7:d4:5d:d3:8b:
                    8e:17:86:ab:77:d3:01:fb:75:f8:f1:91:9e:26:94:
                    bc:4e:37:e0:33:85:45:45:ee:1d:54:64:a5:a3:46:
                    95:e2:40:59:b9:3b:81:da:64:47:01:e7:93:a2:e4:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:80:C0:87:03:71:D1:8E:0C:A5:29:37:49:5B:2B:EA:B9:5E:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67eed033-9d7d-4e3f-bb19-dd52c8618cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:e2:e9:a0:48:79:6e:3e:45:8f:a0:61:6f:ee:8e:8c:96:47:
         8f:31:df:30:60:0a:e0:bc:88:3b:d6:db:d5:50:f6:a7:4c:46:
         4e:13:0b:43:1f:6f:dc:c7:10:fb:1f:47:7f:b7:e3:e3:99:b2:
         75:32:01:b0:74:30:de:8b:d4:b3:fa:40:ce:11:20:08:09:fc:
         41:f8:81:c5:6c:af:6b:64:ad:2f:3b:c5:fe:96:d1:96:8e:d1:
         81:86:ef:a9:e3:aa:b1:00:33:d8:bc:c0:41:f6:03:2e:a6:56:
         ed:0a:8d:a1:45:f7:4a:58:9b:f7:bd:17:94:01:c2:08:07:5d:
         05:fd:c3:2f:96:d1:44:4f:30:88:92:e7:04:92:84:a7:ab:57:
         09:ce:82:6f:17:ef:82:2e:ba:75:d0:50:38:34:4d:c6:d9:8c:
         f3:02:ff:5a:03:3a:90:07:81:b8:6a:ae:bd:7c:23:43:a0:8e:
         1b:a3:03:6d:ee:be:f7:75:05:70:78:96:e6:2a:2c:fe:9d:db:
         b9:ab:80:db:df:d5:a5:bc:e2:a6:29:3b:be:ab:06:58:82:fd:
         6c:1b:59:9b:fe:3d:5d:de:db:d6:78:70:8c:2b:3d:39:15:ba:
         64:68:ee:e3:26:03:e1:b8:23:6d:fa:9e:0e:65:a9:9d:d9:e6:
         18:fa:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:57:18 2025 by rpki-client