Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76dab018-bfdb-4d8a-9d6a-4897784af46e.roa
File:                     76dab018-bfdb-4d8a-9d6a-4897784af46e.roa (raw, json)
Hash identifier:          3BcVnkaz7ZigjVqD6tQXkWzmaEJUGGeo2uGa7VfOxL4=
Subject key identifier:   F3:78:68:35:6F:8A:7F:C6:6E:FB:3F:7A:2A:7E:63:31:A5:82:29:FD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       57B326EBA9DCD351D867748EF86203F8FBC22CAB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76dab018-bfdb-4d8a-9d6a-4897784af46e.roa
Signing time:             Thu 25 Sep 2025 17:16:49 +0000
ROA not before:           Thu 25 Sep 2025 17:16:49 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b3:26:eb:a9:dc:d3:51:d8:67:74:8e:f8:62:03:f8:fb:c2:2c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:16:49 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=652c1a2d7d97a79e560c4f71dae47e5a9f360fd08439feb08f6e0a539a75a784, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:c2:5a:8c:97:0e:0c:c1:14:20:df:c7:cc:
                    3b:5a:fd:03:cc:4d:ea:92:15:4d:4c:f9:df:4b:ec:
                    24:ad:f7:6b:07:f1:62:94:69:30:7c:db:65:61:1f:
                    8f:b0:58:61:94:82:28:d3:a7:98:8d:82:fd:27:8b:
                    fd:56:0e:d2:98:2b:e3:7c:e0:09:b9:82:58:40:11:
                    ec:58:0c:63:90:0e:f3:11:99:fc:6b:59:1f:39:ea:
                    73:91:5d:c8:db:57:4b:d4:05:e4:1a:57:23:32:41:
                    8e:19:d3:f0:03:3e:98:88:49:10:82:a6:04:e0:5a:
                    76:03:d4:0a:6c:e2:2a:9a:73:f4:b7:a3:23:0e:95:
                    04:85:7b:08:7e:fc:93:02:2b:a1:a5:d1:58:01:1d:
                    00:dd:d9:d3:be:77:cd:fd:de:66:d6:c7:58:25:36:
                    46:f4:15:a1:c4:72:cf:05:6b:51:e2:48:3d:15:ff:
                    b2:8a:63:96:e9:ea:c6:97:1c:47:4f:cd:18:43:ee:
                    7a:9d:46:3b:70:6a:46:8b:3d:3e:58:cf:59:72:0f:
                    10:67:02:11:31:a8:04:ab:2c:a5:19:93:4a:16:aa:
                    0d:63:98:25:e4:93:d5:8f:e1:3f:45:de:9a:48:74:
                    40:47:a0:76:e9:40:50:97:20:9d:40:0f:a1:29:72:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:68:35:6F:8A:7F:C6:6E:FB:3F:7A:2A:7E:63:31:A5:82:29:FD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76dab018-bfdb-4d8a-9d6a-4897784af46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:74:5f:a0:88:78:ba:ab:ce:11:36:6d:25:35:25:c4:7b:79:
         25:3f:aa:d9:b2:89:8c:4c:29:a4:a3:4b:17:b2:ba:04:fe:af:
         17:84:a0:29:63:54:d2:5d:cc:72:52:ea:5d:0e:7a:64:64:24:
         bb:00:97:74:f1:9d:49:3f:62:a3:23:34:a8:fc:d6:a9:f2:48:
         96:16:b4:d7:35:54:bc:f8:03:19:b4:22:b9:15:d3:a7:94:36:
         2a:c0:4f:78:3f:0b:3c:69:6e:e5:5c:9c:a4:28:4b:95:f1:5a:
         4d:ee:4c:7c:ab:7e:0f:94:c7:c8:d7:6f:0c:9c:33:dc:47:83:
         21:60:bc:27:8a:fa:93:b8:09:53:cf:84:85:ac:3c:fd:20:80:
         48:6e:ef:ff:d5:df:04:ff:ad:6c:9b:09:79:b1:d4:6f:e0:19:
         bd:07:d3:62:31:1a:0b:46:9d:3a:bf:a0:17:ab:04:6a:f8:c1:
         19:01:8c:73:5c:f5:3e:e3:f9:b1:7d:d4:0c:36:2d:7c:dd:74:
         55:49:c9:59:9a:db:46:1d:3a:a8:3e:a8:ba:f9:ac:48:6f:4d:
         6a:3b:ee:75:73:e4:53:e5:22:f7:97:c8:78:13:d8:80:70:cf:
         c5:9a:1b:f8:fe:36:0c:6b:45:f3:e8:b4:a4:db:21:66:83:05:
         8c:93:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:02:23 2025 by rpki-client