Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb3f97-cb8c-4f74-ab3d-2dc09a9755af.roa
File:                     72fb3f97-cb8c-4f74-ab3d-2dc09a9755af.roa (raw, json)
Hash identifier:          fJmzAVfTfxBff0sipcxAuVJP/cA+tMVwPeHO1OByysE=
Subject key identifier:   1A:0D:09:8D:13:8F:44:CE:AA:E8:78:FC:4B:F3:9F:2C:F5:E1:26:B5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5E9C2012D405AB42E7E18D34223C782EB659BEFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb3f97-cb8c-4f74-ab3d-2dc09a9755af.roa
Signing time:             Fri 26 Sep 2025 00:42:28 +0000
ROA not before:           Fri 26 Sep 2025 00:42:28 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9c:20:12:d4:05:ab:42:e7:e1:8d:34:22:3c:78:2e:b6:59:be:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:42:28 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=3706ef1796b45e1ff6993649aeec5e8bc97d57485edef06195cb352a400094e0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:20:cc:d8:b2:e2:78:ed:5f:66:24:7b:8b:
                    9a:0f:9a:a2:b3:c9:52:c8:6a:6d:1b:09:e9:6c:50:
                    d2:e0:59:d4:b0:d1:ce:a4:77:38:86:dc:9e:e8:46:
                    9d:6f:fc:79:ce:a2:12:2b:4c:25:c3:3b:29:74:ea:
                    8e:2c:f4:f3:4e:03:b1:94:38:ae:58:66:31:17:ea:
                    ac:fa:70:c5:d2:bf:e8:67:ca:64:d5:c7:4a:ab:f5:
                    ae:c8:1a:16:52:b9:a5:81:b1:ed:eb:a3:27:45:d0:
                    ff:8e:e3:e3:4f:6d:b5:2d:6b:bf:f9:34:e7:4a:eb:
                    89:5c:4a:13:29:d3:bc:e4:9f:74:b2:d5:41:5e:09:
                    0b:01:16:7f:29:77:06:c9:4f:e9:bb:ea:6b:35:ab:
                    c0:05:9c:1a:5c:9a:75:c8:23:0e:cf:75:e8:cc:39:
                    95:22:53:2e:01:6a:7e:b6:54:a6:cb:0a:b6:f7:83:
                    8f:77:93:3f:21:33:77:c4:43:01:64:eb:f5:2c:f9:
                    6b:9a:f4:51:a8:62:af:b7:5b:db:08:d3:cc:b4:4b:
                    15:48:47:26:4c:fd:14:c0:1c:34:d8:57:89:cc:a3:
                    14:1a:9a:2d:c5:13:1f:30:95:ff:55:47:d8:9f:84:
                    f8:36:99:59:fc:ee:ef:11:e3:d3:c7:6f:62:d7:1c:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:09:8D:13:8F:44:CE:AA:E8:78:FC:4B:F3:9F:2C:F5:E1:26:B5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72fb3f97-cb8c-4f74-ab3d-2dc09a9755af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:38:ef:fa:2a:38:79:8a:1a:f2:a8:a2:0c:83:5c:48:90:bc:
         73:f7:1b:89:b4:61:23:35:d4:36:d3:45:dc:c4:d8:9a:df:f4:
         39:bd:4e:7d:13:d3:16:82:48:b7:63:60:6c:64:7d:4a:76:60:
         2e:82:7a:b0:55:46:f4:f5:28:52:e5:90:a1:d7:5e:aa:11:dd:
         bd:70:db:b8:51:ee:2f:4b:5c:14:f7:f3:cc:b3:da:bf:30:5c:
         66:fc:f9:9b:35:38:4b:c6:38:df:87:6f:e5:c4:e5:fc:3a:4c:
         33:1d:5e:0b:30:96:33:a4:7d:2c:4d:f6:1a:75:0f:71:6b:cc:
         67:a2:df:5c:34:22:0a:b4:c8:71:45:23:35:37:cb:2f:88:ad:
         5d:0e:28:36:42:fc:57:a2:61:52:00:72:cd:d0:99:ec:a8:94:
         41:78:ea:cd:ed:01:38:15:28:12:ad:80:4b:13:d0:d3:6a:41:
         38:5b:b1:cc:c5:a0:29:91:9a:f9:87:4d:60:48:cd:74:47:e2:
         76:99:c2:78:ad:ed:1f:0d:78:bb:4c:03:10:bc:ff:40:0c:52:
         a3:b0:9b:e1:c7:d8:ab:be:1a:92:09:e5:b8:93:98:34:96:5b:
         a6:21:79:e3:49:35:bc:1f:d1:e4:f0:ec:c1:ee:6f:55:a4:10:
         54:b9:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:57:23 2025 by rpki-client