Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f2231c8-31bf-4a7f-8af6-d5dfc43b30ef.roa
File:                     6f2231c8-31bf-4a7f-8af6-d5dfc43b30ef.roa (raw, json)
Hash identifier:          BInac6dxUfBbpEOE9drklDbUfHkWQ2IExTRLn6Xd+HM=
Subject key identifier:   B4:B6:90:66:07:66:24:F3:B5:E3:85:93:A1:D2:11:E2:6A:8E:99:80
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       25FE489CA8F405396910F5FB34FC28F2DD35B83B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f2231c8-31bf-4a7f-8af6-d5dfc43b30ef.roa
Signing time:             Fri 26 Sep 2025 01:47:18 +0000
ROA not before:           Fri 26 Sep 2025 01:47:18 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:48:9c:a8:f4:05:39:69:10:f5:fb:34:fc:28:f2:dd:35:b8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:47:18 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=b5a7dbb679367ff37f7b6ad9c9e7c3166d2962f207fe20add2bb03ede5360719, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:4b:16:9d:65:95:b0:04:f8:45:65:12:0e:
                    83:4a:f7:84:5f:5b:ed:6d:97:fe:51:97:66:e4:23:
                    66:35:56:91:cf:dd:bd:e2:c0:c8:93:3d:17:5c:7f:
                    2c:91:22:6a:43:10:f4:c3:f5:aa:4e:53:bc:ef:29:
                    a7:b3:a1:5f:df:21:40:63:e5:a9:7c:29:33:95:b2:
                    4a:d4:9b:18:54:c0:15:7b:95:b7:b8:ef:35:c3:b5:
                    c7:63:3b:22:d9:a6:1d:08:b6:a6:4b:e6:fd:67:75:
                    a0:31:e5:77:4a:c0:e2:62:55:94:c8:6b:4f:09:46:
                    bb:96:bc:e4:01:bc:3e:f5:ff:26:30:e8:ac:67:d6:
                    af:3e:22:18:22:87:8b:43:67:36:fb:bb:eb:06:4e:
                    72:88:35:3b:d8:1e:39:66:e0:88:ac:21:eb:7d:1f:
                    7a:77:e7:2f:ae:d3:a7:05:64:81:3b:ec:b5:e5:56:
                    f1:fd:05:6b:94:ee:d5:0f:b2:38:68:50:d0:ec:61:
                    f9:13:0c:dc:f9:0d:2b:01:c8:88:79:53:64:d9:d1:
                    cd:19:45:9b:02:b3:91:aa:2e:78:16:e6:31:b7:2f:
                    5d:eb:b9:db:13:dc:4d:f2:bf:7b:25:cf:5e:45:f9:
                    56:80:4b:5f:7e:23:65:43:b0:eb:8b:dd:eb:85:4d:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B6:90:66:07:66:24:F3:B5:E3:85:93:A1:D2:11:E2:6A:8E:99:80
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f2231c8-31bf-4a7f-8af6-d5dfc43b30ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:53:59:81:bf:72:e9:cd:66:5a:09:c2:c4:26:06:37:a9:fb:
         40:cf:d2:95:7b:a5:42:8f:97:13:30:47:98:9a:ab:54:a3:19:
         40:88:6b:63:69:3e:5b:f1:1a:9f:d4:1e:1a:b1:4a:f9:ee:59:
         ac:ba:b7:e5:a3:be:c3:02:4a:da:63:71:58:a3:7f:e5:c9:0b:
         2b:54:76:75:a5:d9:49:2e:de:b2:77:80:fc:84:9f:d4:42:4c:
         d2:7e:38:99:fd:87:fd:f7:19:08:a9:ff:04:7c:f8:2b:c1:45:
         58:ee:21:37:da:b5:c9:17:7e:74:02:5c:4b:53:c5:81:96:e9:
         1a:44:4a:4b:ee:aa:8c:bf:c9:c9:42:e4:7d:85:4a:8a:b7:1e:
         7c:e3:be:ec:02:42:bf:99:df:a8:ed:11:d2:85:45:f2:4b:c3:
         8d:39:0f:31:ee:aa:15:82:d7:ff:d4:86:31:09:41:a6:8a:71:
         61:0e:a5:66:5e:ff:cc:1f:10:d8:6b:49:68:05:e6:42:71:fa:
         28:b5:9d:03:ea:20:3f:ae:47:f3:86:82:d6:fb:8e:5d:c8:9a:
         00:05:fd:5c:2a:a7:97:7a:f0:51:11:98:bc:08:c5:7f:d4:7b:
         3d:e2:60:cb:36:49:c0:2f:52:e1:c8:57:16:8e:e0:9f:3a:06:
         b6:36:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:55:25 2025 by rpki-client