Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85aa47a1-8eeb-447c-bf36-bf6b3a0bff4d.roa
File:                     85aa47a1-8eeb-447c-bf36-bf6b3a0bff4d.roa (raw, json)
Hash identifier:          A9iWpqW6hwk3WRUOLizTSVz/6+qFPeaMKXcovpLQFbI=
Subject key identifier:   BA:27:AB:50:D9:86:DD:7B:A7:A6:A8:B2:55:00:54:5D:37:CB:34:11
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4982BB36116D2EDA1B0271EC714C84CCFFC260A8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85aa47a1-8eeb-447c-bf36-bf6b3a0bff4d.roa
Signing time:             Thu 25 Sep 2025 18:29:27 +0000
ROA not before:           Thu 25 Sep 2025 18:29:27 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.165.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:82:bb:36:11:6d:2e:da:1b:02:71:ec:71:4c:84:cc:ff:c2:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:29:27 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=a0b7d6bb2391709d30d94e7abddf4a695f0888d57e365fe0719c359e5328fa49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:27:9a:d4:60:c3:57:b6:c5:1a:09:9b:59:
                    c4:86:3d:18:a0:c9:2e:91:d0:8c:8a:83:c2:da:f1:
                    e7:35:32:22:15:eb:d6:11:04:8b:2f:e1:da:8a:61:
                    2c:f3:4a:53:7c:9b:75:1f:c7:d9:6c:56:8f:45:d2:
                    89:76:2d:80:9b:db:b5:be:04:d9:c8:65:a8:46:8a:
                    46:82:27:db:f6:d1:32:56:08:3b:09:cb:65:90:45:
                    9e:3c:91:55:ed:9a:82:9c:35:54:bf:4f:52:1c:f3:
                    48:9e:db:1b:d8:37:f3:2d:e4:71:4d:da:eb:6b:37:
                    0f:06:61:fa:b9:ca:90:2c:a7:70:1f:32:81:fa:ab:
                    05:26:f5:d1:97:14:c7:78:f5:b8:72:ab:cf:57:96:
                    92:e1:28:70:a8:ad:b5:c0:66:91:77:ce:9f:59:32:
                    d8:c0:29:b5:ab:8e:aa:cd:92:0f:6d:0d:64:ab:c0:
                    e0:4a:9c:3a:23:14:aa:a0:78:a7:e3:ec:20:3b:6f:
                    5a:c3:c4:c3:1e:f8:77:c4:63:00:89:f1:c0:1f:fa:
                    ee:0f:d8:0b:4b:85:62:d5:e9:ae:23:99:e5:b5:2b:
                    1a:26:37:2d:18:70:6d:01:3c:4a:82:d0:d2:54:e0:
                    8a:6b:30:de:39:36:3e:f7:d9:57:00:4d:bf:33:04:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:AB:50:D9:86:DD:7B:A7:A6:A8:B2:55:00:54:5D:37:CB:34:11
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85aa47a1-8eeb-447c-bf36-bf6b3a0bff4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.165.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:c8:4a:6b:f9:2a:f0:0d:ce:52:78:74:a0:5c:cf:be:c0:
         17:33:fe:89:74:03:3d:1d:06:e5:d9:e1:31:35:da:e2:ea:77:
         0d:5b:e8:53:b6:71:f3:00:a2:57:ee:99:81:3d:b4:ae:94:3a:
         d9:33:ad:8d:33:64:6d:4c:70:eb:6e:d0:50:31:5e:79:d5:df:
         97:9a:c5:e1:97:53:b7:3c:92:5c:29:93:18:be:ee:74:73:78:
         9a:e6:82:23:17:92:cf:59:f3:57:18:fa:1e:53:8b:ed:ca:6f:
         0d:d0:92:ec:0c:d5:50:b7:07:52:69:9f:3f:dc:d3:87:0c:a6:
         cc:2c:c7:f6:ee:bd:7f:07:d0:63:b1:f7:28:04:ed:d5:f4:14:
         a0:25:eb:16:1c:8c:3e:c3:e2:24:e9:81:5f:a1:c3:95:94:a3:
         79:98:6d:54:04:b7:77:02:fa:03:a2:1d:c6:ff:fc:80:52:b9:
         2d:ec:6e:6f:7d:c8:73:b7:ed:a7:78:7c:c2:3d:b6:5d:3f:c7:
         82:dd:c1:00:0f:a9:c9:e5:8c:86:7a:27:fb:04:7b:35:65:e8:
         7a:2d:2b:3a:de:12:12:11:24:7f:16:69:ce:db:49:d7:c4:80:
         ed:4a:df:1c:e5:b1:93:ff:5a:8e:00:a9:36:29:a4:e2:59:42:
         76:56:d2:19
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSYK7NhFtLtobAnHscUyEzP/CYKgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTgyOTI3WhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMGI3ZDZiYjIzOTE3MDlkMzBkOTRlN2FiZGRmNGE2OTVm
MDg4OGQ1N2UzNjVmZTA3MTljMzU5ZTUzMjhmYTQ5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvrCea1GDDV7bFGgmbWcSGPRigyS6R0IyKg8La8ec1MiIV
69YRBIsv4dqKYSzzSlN8m3Ufx9lsVo9F0ol2LYCb27W+BNnIZahGikaCJ9v20TJW
CDsJy2WQRZ48kVXtmoKcNVS/T1Ic80ie2xvYN/Mt5HFN2utrNw8GYfq5ypAsp3Af
MoH6qwUm9dGXFMd49bhyq89XlpLhKHCorbXAZpF3zp9ZMtjAKbWrjqrNkg9tDWSr
wOBKnDojFKqgeKfj7CA7b1rDxMMe+HfEYwCJ8cAf+u4P2AtLhWLV6a4jmeW1Kxom
Ny0YcG0BPEqC0NJU4IprMN45Nj732VcATb8zBETpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuierUNmG3XunpqiyVQBUXTfLNBEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzg1YWE0N2ExLThlZWItNDQ3Yy1iZjM2LWJmNmIzYTBiZmY0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADpWIwDQYJKoZIhvcNAQELBQADggEBAD20yEpr+SrwDc5SeHSgXM++wBcz
/ol0Az0dBuXZ4TE12uLqdw1b6FO2cfMAolfumYE9tK6UOtkzrY0zZG1McOtu0FAx
XnnV35eaxeGXU7c8klwpkxi+7nRzeJrmgiMXks9Z81cY+h5Ti+3Kbw3QkuwM1VC3
B1Jpnz/c04cMpswsx/buvX8H0GOx9ygE7dX0FKAl6xYcjD7D4iTpgV+hw5WUo3mY
bVQEt3cC+gOiHcb//IBSuS3sbm99yHO37ad4fMI9tl0/x4LdwQAPqcnljIZ6J/sE
ezVl6HotKzreEhIRJH8Wac7bSdfEgO1K3xzlsZP/Wo4AqTYppOJZQnZW0hk=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:01:50 2025 by rpki-client