Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/691c978c-5b7a-4fd4-a388-3b36beb4a883.roa
File:                     691c978c-5b7a-4fd4-a388-3b36beb4a883.roa (raw, json)
Hash identifier:          Jpc436pM/4S2i/QqVaNVByx/y7SRaj2+/O3ZUt00ots=
Subject key identifier:   12:03:5E:13:7D:BE:A7:4C:80:DB:E4:C1:26:A3:DA:D8:84:25:9F:6A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7834420EE445EB8831EF0B2066548864ABD9654E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/691c978c-5b7a-4fd4-a388-3b36beb4a883.roa
Signing time:             Thu 25 Sep 2025 17:32:24 +0000
ROA not before:           Thu 25 Sep 2025 17:32:24 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.163.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:42:0e:e4:45:eb:88:31:ef:0b:20:66:54:88:64:ab:d9:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:32:24 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=e2c96bf9283fe7e4e6c76209d334da85e16f3ae31387eb2b12da7baf99376b0c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:6d:a5:93:2e:8b:5f:81:c3:77:c4:0c:83:
                    54:bd:a2:8d:7c:71:e3:ed:8c:16:54:02:ca:92:9f:
                    1c:04:c0:79:8f:48:ea:54:19:00:ea:0c:e7:55:41:
                    03:d1:b9:a7:cd:fc:c3:bf:80:2c:fd:54:a1:3e:b9:
                    ee:ec:b4:b5:dd:ba:ab:24:69:0f:25:eb:80:65:3b:
                    1a:56:74:59:a8:39:48:3e:4f:de:5e:48:3b:8c:75:
                    9b:eb:16:16:28:57:c4:8b:2d:f2:0c:fb:6d:23:f8:
                    ab:d0:07:01:bb:a8:e9:2f:da:5e:14:91:4b:01:f0:
                    c7:12:3f:86:00:9a:75:75:af:61:9f:60:26:62:45:
                    f0:4d:64:38:d3:7a:60:8b:bd:e4:58:91:a8:ed:bc:
                    92:44:1f:af:74:ad:b6:11:6e:ee:01:0d:71:85:5d:
                    f3:f4:b2:8c:2c:80:40:11:fe:27:ec:32:a7:d5:1a:
                    31:32:af:b6:db:8b:9d:19:76:e8:42:d4:2e:de:ad:
                    18:57:a8:04:9e:ce:26:66:2f:e3:78:95:ea:bd:0d:
                    b7:7b:39:3a:9d:80:6b:9a:e2:6c:56:ca:6c:bd:9d:
                    4c:ce:e6:05:18:33:79:38:34:71:b9:18:15:b6:32:
                    3a:e5:57:c3:13:c2:4a:bf:c9:8a:fc:58:ee:8d:f2:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:5E:13:7D:BE:A7:4C:80:DB:E4:C1:26:A3:DA:D8:84:25:9F:6A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/691c978c-5b7a-4fd4-a388-3b36beb4a883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.163.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:ab:90:67:ca:69:f2:d3:5a:05:ff:eb:80:e9:b1:00:4b:
         0f:6b:38:18:80:87:86:ff:59:52:bc:68:fe:c7:a1:2d:2c:18:
         05:a1:77:38:7f:1d:6c:8a:df:ab:f4:70:25:82:28:0b:ab:c9:
         a2:34:89:87:4e:76:07:e9:94:58:6d:28:3b:84:39:fa:81:7b:
         6b:89:d5:3a:16:a6:02:5d:90:23:ae:61:79:ba:85:74:0f:86:
         17:84:8a:ab:31:10:ce:05:b4:cc:27:cf:30:78:6e:22:e3:dd:
         17:98:4e:b0:ad:26:e6:d9:b8:83:59:f0:b6:b8:88:b8:63:a6:
         c3:e8:d2:30:1a:66:c2:02:3a:9a:7b:aa:d6:08:ac:59:4b:25:
         69:20:8b:6d:13:2b:c4:da:7b:97:e7:6a:de:44:1b:21:f2:37:
         af:ab:2f:22:ba:bc:5d:d4:92:77:b7:3e:60:c8:79:b4:0d:e3:
         43:42:ba:f6:69:87:91:0f:63:bd:80:e1:36:19:ff:be:60:08:
         00:97:bf:45:60:ab:b8:5b:cd:30:34:1a:19:54:fa:58:1a:97:
         30:cb:58:c3:a6:c3:0f:c3:1b:cc:7e:ec:0a:be:e2:37:25:ca:
         25:16:b8:a9:3c:dc:4e:1c:84:59:14:c3:6a:f7:2f:da:06:c3:
         3b:3a:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:47:55 2025 by rpki-client