Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d2ef71d-dec0-42a7-aad7-a5872f3b7ba9.roa
File:                     7d2ef71d-dec0-42a7-aad7-a5872f3b7ba9.roa (raw, json)
Hash identifier:          5f+kEo76Ze/dQevH59a++6fh1z8RY0NjuQvmCx3ZBc4=
Subject key identifier:   76:E3:FA:1F:CA:A8:16:9E:E7:BE:88:37:2C:01:6F:88:D6:76:48:76
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2453BA3AE9067B6562D190802FBDD8FF5CC11CA1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d2ef71d-dec0-42a7-aad7-a5872f3b7ba9.roa
Signing time:             Thu 25 Sep 2025 17:57:22 +0000
ROA not before:           Thu 25 Sep 2025 17:57:22 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:ba:3a:e9:06:7b:65:62:d1:90:80:2f:bd:d8:ff:5c:c1:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:57:22 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=8ac16427d3ccfb0815164f1b410f312ff08722678cf3468bf9a4fb1ce8442789, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:9c:6d:0a:57:95:c1:84:7a:fc:03:f3:d7:
                    4c:10:61:cc:d4:aa:d1:fa:23:2b:33:ac:a5:79:0a:
                    2d:d1:a2:4b:45:73:7f:88:36:58:6e:80:56:a9:f3:
                    56:1d:68:44:8e:c4:bc:bc:1b:c4:af:53:39:c6:7d:
                    65:12:8b:e3:62:24:91:f5:16:f1:17:dd:e2:43:1b:
                    cf:2c:f8:67:f8:bc:c4:e1:5c:bb:c5:00:f7:be:70:
                    5a:19:7a:18:2c:26:d5:68:41:30:93:d9:83:1e:40:
                    4c:60:2b:bb:a6:06:07:0c:08:c7:1e:7e:0a:c4:64:
                    1e:75:ce:4b:f7:7e:f5:fe:6d:c0:84:e3:08:27:4d:
                    7f:5e:c8:e4:87:41:ea:5c:64:33:ea:e5:5f:ed:6b:
                    0c:e5:c9:99:0d:0d:f0:da:cb:8d:31:ce:be:59:a3:
                    23:97:06:10:91:3e:16:ff:0f:15:ca:37:b8:de:ab:
                    41:b5:89:24:8d:6e:bf:23:6b:bf:9d:0b:b3:4c:bb:
                    9f:e4:56:b7:2c:95:b9:e9:57:e8:33:97:72:3f:c2:
                    48:f9:57:a5:71:9a:db:62:73:ec:cb:09:a5:a0:b3:
                    e0:5b:ab:5f:0c:12:59:1a:e7:27:5d:f9:8a:87:15:
                    b9:79:bb:f5:b5:ce:51:c7:1a:bc:07:21:af:36:c9:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:FA:1F:CA:A8:16:9E:E7:BE:88:37:2C:01:6F:88:D6:76:48:76
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d2ef71d-dec0-42a7-aad7-a5872f3b7ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:98:cd:ec:4a:6d:f8:15:87:64:15:6c:ba:e7:04:7e:3d:
         71:fb:ef:7c:b3:84:47:45:57:ae:82:c3:10:ee:77:00:1c:71:
         b6:d0:c6:54:07:d4:01:d2:88:d7:96:3d:b5:2b:2c:ac:f4:da:
         91:b2:dc:37:12:24:f1:59:bf:62:eb:a5:93:99:cc:1a:c3:9a:
         2f:27:a0:8f:f2:2d:97:0a:9f:14:96:ca:f8:33:d6:fe:5c:a4:
         5c:c5:f7:39:e8:77:23:36:ea:ae:8c:8b:34:a2:b2:b6:14:27:
         ea:01:fc:7b:93:cf:ee:8c:a0:d3:53:f0:ee:69:4d:bf:b8:69:
         2b:ae:93:b8:33:22:9e:5e:b6:a7:84:73:80:1a:0c:c8:65:0b:
         6b:ab:22:31:d8:d6:b1:3c:b4:a6:51:a9:91:e0:24:6d:af:ad:
         d1:ee:e9:ca:8e:e3:b8:0f:d5:e3:ce:cd:47:13:b7:5d:e3:4e:
         87:b9:7b:95:09:e2:44:b1:14:35:55:64:20:d0:fa:8a:40:40:
         5e:47:8f:ce:a2:44:2b:6e:ef:8f:5a:bd:21:f5:56:aa:d3:59:
         0c:eb:ec:5d:1d:24:34:35:f1:c7:18:f9:73:e7:f2:ca:5e:68:
         8c:a2:42:4d:6e:d8:11:bf:25:43:25:4b:19:de:3d:75:55:64:
         5b:a8:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:41:12 2025 by rpki-client