Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca71bef-a3d2-4aad-aeaf-3ee4a90e4587.roa
File:                     6ca71bef-a3d2-4aad-aeaf-3ee4a90e4587.roa (raw, json)
Hash identifier:          WBhNl6uabLzFbo/R+RbYC7W/vDBsrFXMt3cwueFqgew=
Subject key identifier:   DF:B6:22:6A:90:CD:B4:7B:07:C3:CC:14:8C:5B:4E:1B:4D:90:E7:56
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2149FFEA3AD319CA77E083D74B1774F478EF46D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca71bef-a3d2-4aad-aeaf-3ee4a90e4587.roa
Signing time:             Thu 25 Sep 2025 22:10:05 +0000
ROA not before:           Thu 25 Sep 2025 22:10:05 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:ff:ea:3a:d3:19:ca:77:e0:83:d7:4b:17:74:f4:78:ef:46:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 22:10:05 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=dd10046137732fdba02b947693a9d9966f529493cc830a5719a78c734cbfb99c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:6a:b7:31:f6:13:e1:6d:92:3a:5c:8e:8b:
                    b9:ec:54:6c:ea:64:2e:5d:0d:21:8a:cd:9e:ab:c8:
                    d5:bd:1b:f5:50:ba:f9:35:a7:88:43:27:63:fa:21:
                    19:ac:a8:0f:1e:95:fe:2b:be:18:b2:aa:f9:06:ac:
                    59:cb:fd:5e:12:bc:56:fc:a6:1a:bd:1a:1e:b1:ad:
                    f1:ea:da:f7:67:eb:c1:30:9d:d9:5c:7d:b9:8d:de:
                    9f:bc:98:b3:79:df:ec:76:79:0f:fe:cb:86:63:50:
                    33:17:9b:81:e0:ac:a1:ab:99:a3:9a:ff:d2:1d:04:
                    a0:07:68:7d:a3:e0:f0:2e:d2:5b:32:2b:74:e0:7e:
                    19:df:56:40:5d:d3:14:7f:bc:24:50:8d:41:f3:fb:
                    00:44:ec:25:fb:9f:5e:9e:6b:d8:8a:bd:3c:f7:17:
                    89:ce:78:1c:33:53:03:f5:e1:83:e6:0f:6a:cb:4c:
                    67:3a:f0:a4:dd:ea:8f:2d:3b:24:86:1a:b7:16:0e:
                    5d:9f:f4:6f:f1:2b:cf:fd:56:12:5f:b7:96:e2:d3:
                    10:63:48:08:be:0e:f1:c9:3d:df:0b:b7:ca:ea:f8:
                    2a:18:02:b5:8a:13:aa:fc:ab:ef:50:0f:ab:73:6f:
                    8c:a2:f9:4d:34:33:8f:21:b3:6f:b3:a2:89:cb:c2:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:22:6A:90:CD:B4:7B:07:C3:CC:14:8C:5B:4E:1B:4D:90:E7:56
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ca71bef-a3d2-4aad-aeaf-3ee4a90e4587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:99:4c:5f:45:24:f0:0d:af:8d:16:43:f3:17:3d:7b:19:
         b3:b8:3c:92:58:3e:11:76:9a:61:11:86:51:54:2c:b3:bc:63:
         41:21:12:fe:ae:bb:26:ac:a7:76:93:34:17:84:5b:63:84:c1:
         8a:1d:80:09:5c:45:8f:e0:83:32:9e:9e:36:df:7e:d4:b4:d3:
         28:2a:c5:6e:0d:ef:f4:42:c0:57:43:76:01:04:af:57:4e:01:
         d0:56:dd:8e:35:f1:12:53:35:06:5d:75:14:82:1b:13:88:7c:
         d6:0c:0f:fb:9f:0a:38:a5:bb:b7:44:82:4e:b9:2a:6c:b5:83:
         59:f9:69:ea:01:59:fe:23:81:31:ec:1f:26:4c:b2:dc:3a:83:
         e1:2f:06:f5:71:09:dc:9a:72:d7:87:03:f9:7e:ce:90:a7:ca:
         23:fc:0b:a4:48:fe:17:aa:71:df:cb:82:01:ab:1f:af:a8:39:
         61:8c:ab:b7:c8:4f:ec:3c:f2:f9:62:be:59:14:98:f4:c1:f5:
         1f:7a:cf:4c:8e:c4:75:a4:6b:8c:20:01:20:bc:45:0b:fd:ee:
         ab:66:a5:ee:50:b9:50:45:61:4d:1a:02:a2:11:84:77:ee:bb:
         c9:bc:72:8a:84:75:dc:d8:5d:d5:13:43:5d:1f:97:7a:88:6b:
         96:c0:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:03:15 2025 by rpki-client