Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d6bc200-89ca-4160-a4ce-a21b91557e5e.roa
File:                     7d6bc200-89ca-4160-a4ce-a21b91557e5e.roa (raw, json)
Hash identifier:          hL3bpkDcleexnzlLXXGi6IBHxlSNPOnJs6L0tsMHOp8=
Subject key identifier:   CB:FB:53:73:69:FA:85:90:C3:C7:86:02:4B:96:9E:D5:4D:52:C7:95
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       351402D860A37089E184C653C76BEB5F0F1B740D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d6bc200-89ca-4160-a4ce-a21b91557e5e.roa
Signing time:             Thu 25 Sep 2025 21:03:08 +0000
ROA not before:           Thu 25 Sep 2025 21:03:08 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:02:d8:60:a3:70:89:e1:84:c6:53:c7:6b:eb:5f:0f:1b:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:03:08 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=5d2d898e78b6401670e299c2acb3a9cc7c2a8f976e8725eac4d6e22f628f89a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:68:93:e8:5f:b1:6a:82:86:39:55:bc:68:
                    74:6c:6e:1c:43:7d:51:2d:b8:33:17:cb:be:78:e5:
                    8e:b9:b5:ce:3f:21:b6:e7:1d:89:45:ef:fb:73:0c:
                    55:8b:36:53:8f:1f:f8:5c:45:9e:fc:6c:a0:f5:b2:
                    cd:ef:e2:4f:3f:2f:5e:83:7a:61:19:8a:dd:ca:fe:
                    ae:7c:9e:cf:a7:2d:4b:94:0a:88:80:77:5e:1a:bc:
                    fc:86:b5:cd:c2:88:75:7a:c4:56:1a:01:3f:ca:38:
                    d6:ff:38:a7:89:14:87:6e:ae:94:aa:34:f2:02:87:
                    5d:a7:a9:d5:31:8e:c8:21:54:33:10:69:11:ce:45:
                    49:11:98:18:07:e7:5b:7e:a6:2b:51:04:f8:a5:27:
                    6d:7b:d4:97:c8:66:a0:3b:c3:c3:74:29:45:59:33:
                    1a:0b:6b:cb:76:ce:15:d4:cd:31:19:6a:8e:00:99:
                    c7:33:c0:42:10:55:1f:be:e5:fb:61:77:99:74:cc:
                    7c:cb:8c:d7:fd:d0:5f:54:03:49:81:d0:76:28:f7:
                    15:cf:d0:54:ed:a6:80:fe:07:22:72:42:d5:8c:1c:
                    07:98:bc:34:fa:ff:09:f5:20:0f:31:76:c1:81:27:
                    5a:6c:33:db:68:bc:65:92:0a:60:e3:43:54:12:27:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:53:73:69:FA:85:90:C3:C7:86:02:4B:96:9E:D5:4D:52:C7:95
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d6bc200-89ca-4160-a4ce-a21b91557e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:29:da:ab:b4:c7:92:bf:af:0f:e5:97:62:ac:5e:4b:c4:fb:
         91:d7:cd:0e:16:b6:a4:f9:9e:25:67:e1:1a:2e:53:f2:21:1b:
         0a:6a:92:4a:aa:1b:b0:06:e0:70:46:86:e7:cd:5d:2f:87:50:
         c8:77:4d:ab:3c:86:ff:dc:fc:31:18:37:15:be:68:e4:2f:10:
         d0:62:43:28:8a:8b:33:5d:b5:dd:22:8c:3e:b4:f7:ca:65:92:
         74:78:33:61:f9:58:ff:88:1e:d6:b0:b6:4a:77:ff:41:8d:2c:
         d9:a4:de:a7:8d:18:6c:18:d7:ba:33:c6:3e:f7:9f:5a:4b:42:
         2a:b0:f6:9a:ff:f8:dc:1a:40:5e:29:2d:a3:a6:c4:70:af:6b:
         9b:3f:05:9f:8f:0e:5d:f6:ed:31:7d:4a:a3:ea:24:7d:6e:b8:
         f8:8d:f0:7a:16:74:fd:c1:dd:41:05:88:fc:90:6d:f4:2f:f3:
         03:89:92:04:13:4a:b5:91:85:2c:94:04:1d:b6:08:fb:51:ab:
         37:4a:ab:da:e1:f6:04:31:82:e3:e1:6f:05:d4:bb:8d:3e:84:
         02:4f:24:be:78:18:75:f5:6e:e4:b4:4c:9a:61:87:21:b1:04:
         e8:04:78:2c:2e:10:85:bf:a3:2d:b5:eb:46:f4:39:c5:bd:bb:
         78:6b:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:04:17 2025 by rpki-client