Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90233c6b-c806-4c40-8540-6e9e69aa0544.roa
File:                     90233c6b-c806-4c40-8540-6e9e69aa0544.roa (raw, json)
Hash identifier:          RXqzv/qDs1WGQHN3y+QRY/VJnUr1KG6mLtxcUJwmqLM=
Subject key identifier:   6E:E2:1F:6B:1B:53:03:D7:4A:26:BA:60:52:0C:23:BC:FB:6D:70:4C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       456CA719168668E5361840CFFE0733E764854C64
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90233c6b-c806-4c40-8540-6e9e69aa0544.roa
Signing time:             Thu 25 Sep 2025 17:12:05 +0000
ROA not before:           Thu 25 Sep 2025 17:12:05 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6c:a7:19:16:86:68:e5:36:18:40:cf:fe:07:33:e7:64:85:4c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:12:05 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=e2a14db7f9a3ed3fece743099adba9fa7f1fbb55c4a2a7d8407402bfdd1bc07b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:17:9d:59:2d:54:75:30:98:bd:3e:ee:b4:
                    e7:48:d4:e5:89:01:53:26:81:19:9e:92:c1:cd:31:
                    bb:8c:7c:7b:e2:cf:ed:1b:6f:93:92:57:07:25:ff:
                    f2:a3:96:97:2f:c7:e3:5a:6b:85:02:6c:b1:b7:63:
                    68:d9:e6:2e:e7:24:be:fe:43:3d:7e:c7:0c:34:8b:
                    2f:11:02:59:24:a6:8c:89:00:0d:86:0e:f9:05:51:
                    8c:2b:e0:5f:67:11:9f:9a:19:35:cf:7a:4b:37:d9:
                    6e:03:86:59:45:a6:49:e0:2a:9c:c0:cc:06:a7:2c:
                    cb:d5:c9:b9:c9:28:ea:17:4f:3f:a8:34:4f:32:ca:
                    32:fe:60:20:34:88:0d:9b:8b:5f:58:86:6d:dd:4c:
                    b2:dc:21:03:ba:f4:a8:ce:5c:32:de:b5:a7:31:1d:
                    5c:4c:ae:3a:d6:b2:7d:da:ec:d4:b1:47:55:ef:6f:
                    a0:64:e7:5f:85:22:14:62:41:44:33:13:f6:08:45:
                    d6:27:a2:30:fe:18:d3:e5:36:cd:90:0e:cb:65:e3:
                    50:e4:6f:a9:86:4d:13:36:7e:f7:50:30:23:68:7a:
                    42:07:0b:7c:a3:f1:ee:1f:50:33:08:e7:ba:cb:2f:
                    a4:c8:58:84:3a:3f:8e:ea:72:a7:ad:ce:e8:ab:70:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:1F:6B:1B:53:03:D7:4A:26:BA:60:52:0C:23:BC:FB:6D:70:4C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90233c6b-c806-4c40-8540-6e9e69aa0544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:e5:bb:a2:e9:79:94:e6:74:9b:ea:e6:3c:30:74:bd:1a:
         a9:24:b4:7a:f2:2f:0a:2c:12:5e:1b:a0:53:2e:f0:a9:b6:bc:
         71:da:0e:be:53:39:70:f7:01:9c:cd:40:f8:c2:07:c9:d9:db:
         61:c5:31:a2:fb:42:f9:4f:ed:ae:27:52:2b:de:01:07:10:cf:
         2c:09:7b:4d:d8:4d:c0:14:51:46:9f:95:1d:81:06:84:14:2e:
         2f:69:71:d4:7b:c7:a7:71:7c:ab:11:22:79:43:32:ae:7f:4a:
         31:6c:8c:01:b1:9e:50:95:4b:76:0a:c6:02:92:b3:4d:de:32:
         91:83:92:4f:38:5e:3d:dc:dc:eb:6d:46:e2:56:79:e9:fb:e9:
         8c:16:b1:d7:f5:e3:91:88:60:1f:66:21:f1:05:23:84:c8:7b:
         2d:a7:65:6e:74:2d:0d:ff:f3:a0:4a:ca:b0:d0:29:36:41:a2:
         06:9b:35:1f:08:bd:4b:df:2a:1a:f7:c7:51:c3:23:7b:26:21:
         4f:00:5d:29:b7:0b:e1:8c:70:c1:07:cd:df:78:27:10:9f:bd:
         a9:f9:89:e1:14:b0:54:98:b3:cb:99:8b:83:a2:a0:01:cc:8f:
         9c:d4:1f:50:50:a7:ca:4f:8a:fe:bf:63:7c:76:5d:cb:34:07:
         ec:06:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:52:03 2025 by rpki-client