Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78c21faa-58ce-4a6e-ba37-372d6a615f74.roa
File:                     78c21faa-58ce-4a6e-ba37-372d6a615f74.roa (raw, json)
Hash identifier:          IpPz2tVyC/v2LlI2KA/hETgw4g2oukBh45d3g6ahHx8=
Subject key identifier:   26:88:D9:62:C6:AC:A3:75:4B:4B:CA:26:23:EE:B8:8B:55:C0:7D:F4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       750DB4F094B0020E57E3103B06DE052CD17956
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78c21faa-58ce-4a6e-ba37-372d6a615f74.roa
Signing time:             Thu 25 Sep 2025 18:11:44 +0000
ROA not before:           Thu 25 Sep 2025 18:11:44 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0d:b4:f0:94:b0:02:0e:57:e3:10:3b:06:de:05:2c:d1:79:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:11:44 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=12b1ccf885bcad91db001f30444419c52ce482948eae004f676a0617f456eb75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:ce:50:96:86:0d:ed:80:c3:c0:92:63:2b:
                    e5:87:45:c6:94:90:1f:b4:f6:0f:6b:f0:32:ab:91:
                    c3:ee:6f:9a:76:dd:c2:c1:29:51:c9:ca:e9:7d:97:
                    d9:56:b4:d6:be:80:7f:13:4a:c4:70:79:36:95:06:
                    0e:ac:31:ae:eb:1b:4d:24:d3:80:16:02:70:42:35:
                    13:c6:ee:19:b8:dd:ea:39:bb:a9:9e:a5:d4:d7:0d:
                    5c:16:6c:12:5e:a1:74:ac:d5:9d:90:4a:d5:4c:94:
                    0c:f1:c0:f6:97:8c:9b:a1:e0:c2:8a:b0:db:49:00:
                    5b:7b:58:2f:e1:91:ae:4e:d7:98:85:45:a1:cd:86:
                    e5:0f:93:70:a8:fb:70:ea:20:fb:ce:8b:7e:ad:08:
                    8e:13:9e:82:74:53:e9:d3:ba:e8:2d:a7:78:f1:7f:
                    f4:f5:b6:9b:ac:91:82:b5:01:bb:90:bd:33:e7:fc:
                    ac:2e:a1:35:8e:5a:ff:c3:ce:dc:a9:54:de:de:bf:
                    f5:e5:a8:44:de:fd:58:77:53:f6:3a:9b:68:db:ed:
                    f0:1d:1d:e7:f0:f8:56:01:dd:25:f3:d9:10:78:99:
                    e4:be:cb:69:2f:15:56:aa:40:7b:93:83:d7:9d:7a:
                    97:ce:43:e9:a9:77:20:0b:1f:3d:98:9d:59:7e:b3:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:88:D9:62:C6:AC:A3:75:4B:4B:CA:26:23:EE:B8:8B:55:C0:7D:F4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78c21faa-58ce-4a6e-ba37-372d6a615f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:3f:35:4d:65:6d:ca:47:7f:23:ca:26:c4:68:91:cb:c3:
         43:b6:a6:73:d7:f9:90:ef:5f:a8:46:11:e6:65:d6:f5:f2:fb:
         03:16:73:fe:85:ac:e0:36:72:ba:60:1c:3d:56:97:41:8d:9f:
         6a:a9:3c:39:16:89:e0:a5:e8:97:76:8b:ef:d0:5b:44:83:af:
         33:45:cf:39:ee:88:2d:cf:6a:fe:60:c6:4d:1c:89:a1:c1:e1:
         b2:73:8d:3f:43:2e:c9:7c:04:4f:76:ac:1b:b8:17:41:2e:77:
         1c:f1:43:16:a2:62:6a:ea:2e:48:fd:3c:f8:90:80:e2:98:03:
         25:20:56:a7:1f:ed:2f:40:53:b3:17:0f:06:bb:9f:d4:3f:7e:
         b3:35:00:1c:a2:7f:d9:d2:70:da:96:ef:91:31:ab:b6:3f:6f:
         e0:21:ef:ea:54:0e:93:e3:83:75:ad:ff:51:67:e1:99:9f:4a:
         73:36:03:c1:2c:cd:22:d0:2c:e4:1a:28:a0:df:d2:3e:dc:41:
         cb:33:4d:4b:2c:ef:96:45:0d:96:f4:2f:2e:ae:ef:f5:cc:f5:
         7e:14:37:7d:2f:0e:ab:28:96:88:7b:1a:8f:c9:0c:00:d2:d0:
         a1:eb:7e:5b:6d:c0:3a:23:4d:fa:ac:bb:f7:e6:55:e5:ba:a2:
         fc:76:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:04:01 2025 by rpki-client