Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83bbbd0f-6799-4d20-b2ad-069e72890921.roa
File:                     83bbbd0f-6799-4d20-b2ad-069e72890921.roa (raw, json)
Hash identifier:          cZRjywI0LC5lMCXxIs32K5orQ+PAk4iNydtLmSBcMi8=
Subject key identifier:   98:40:4A:90:A7:D5:69:39:70:2F:9B:4B:EB:A8:37:07:C7:FA:14:67
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       50E9529A585E00739C5FEDC73DEA106CAA5BADF2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83bbbd0f-6799-4d20-b2ad-069e72890921.roa
Signing time:             Thu 25 Sep 2025 21:21:58 +0000
ROA not before:           Thu 25 Sep 2025 21:21:58 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e9:52:9a:58:5e:00:73:9c:5f:ed:c7:3d:ea:10:6c:aa:5b:ad:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:21:58 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=9715013c4a1518bda43be28020aea67dd2977feed134d52fee00bc15c0a6871e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:4b:6f:98:c2:29:e7:43:cb:83:0c:ae:07:
                    4c:f1:ef:ea:f4:5b:a2:1e:6d:e1:0d:ab:f8:57:f9:
                    79:ee:93:b2:7c:69:0c:9f:13:b7:f7:6a:6b:ea:0b:
                    a4:aa:2b:92:22:9e:0f:64:bc:9e:d8:68:36:33:d4:
                    02:cf:90:a0:f2:a4:09:d6:ac:d3:3b:b7:8c:c3:84:
                    1a:da:7b:6d:d3:81:3f:20:f0:5f:8a:a8:72:10:75:
                    1f:f5:04:aa:c7:0f:d8:f1:a7:75:e1:84:86:41:dc:
                    69:c0:78:9c:af:a7:5b:e9:08:21:84:2f:a2:40:d4:
                    7f:01:ff:6e:b7:35:84:61:21:2c:9b:bd:89:0d:13:
                    99:e7:a1:db:c6:17:5e:ee:f9:a0:b0:4a:00:95:a2:
                    0a:d1:f0:86:61:0e:e9:da:19:1a:56:85:73:84:db:
                    be:1a:a4:e8:45:dd:01:ff:66:19:31:1f:a2:91:fd:
                    08:0c:4d:57:33:b1:9c:0a:03:ce:64:84:c0:8a:40:
                    4a:dc:63:1f:b8:36:77:c4:d1:ea:93:3a:c2:1a:99:
                    df:23:95:8c:d7:91:f1:a1:9a:99:4b:99:c6:59:89:
                    53:24:a9:d8:f9:33:b0:d2:80:23:14:df:3b:37:cc:
                    9e:b1:0e:bb:1d:d7:2d:a3:9e:0a:b8:84:a9:97:38:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:4A:90:A7:D5:69:39:70:2F:9B:4B:EB:A8:37:07:C7:FA:14:67
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83bbbd0f-6799-4d20-b2ad-069e72890921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:ad:d7:5f:67:63:73:3b:f2:91:2f:d1:85:99:37:e9:30:
         c8:7e:00:a0:84:94:ce:6c:27:a0:72:3c:cf:11:4d:f9:24:6c:
         bf:28:37:3a:f5:12:e9:6c:cb:00:e5:a3:1d:46:30:fa:68:22:
         bc:83:39:1f:fa:5f:0a:07:2f:1b:8f:aa:9a:8f:4c:54:6f:8f:
         8b:07:a4:41:2a:22:62:b6:e9:bf:fb:ce:d2:8d:0b:cd:ee:a9:
         e5:24:0d:03:63:5d:0e:d8:63:57:aa:79:37:0a:5a:3d:c8:fb:
         2d:d1:bd:16:cc:74:1f:1e:8a:bd:d4:65:1e:56:1c:be:02:56:
         37:67:f7:95:06:e8:9a:e4:66:b7:29:9c:c5:52:fb:2e:9b:c3:
         ee:70:a8:ef:d0:5c:ec:e8:20:f3:55:05:c4:3d:69:6e:58:17:
         51:a1:8b:90:e3:ca:4a:eb:52:6a:ee:d6:97:1f:0c:22:b1:d0:
         19:f6:44:7c:21:b7:ef:b6:08:8b:22:d4:04:1c:e6:7b:50:77:
         77:b2:c7:68:75:1c:45:4b:36:93:4a:78:b9:a4:1f:b7:49:61:
         ac:a3:ea:a5:32:53:70:cc:aa:3f:7d:0e:50:e1:07:cc:17:bd:
         b2:83:30:91:f9:f9:1f:e6:f5:29:9e:a0:92:3f:c3:0b:6f:af:
         91:4b:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:50:22 2025 by rpki-client