Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90adffd4-3590-4c50-aeb8-4ca21f94f85a.roa
File:                     90adffd4-3590-4c50-aeb8-4ca21f94f85a.roa (raw, json)
Hash identifier:          LcMRM+dusDqXOL9Ss6ShpBBhE8TfFa7wRDMV74DMIIs=
Subject key identifier:   25:F2:99:70:DB:F0:02:82:5D:9B:48:F0:C3:02:A6:AB:9B:A6:67:60
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0692ADA0D4918AF80BA4DD6462C3D7F58BD4A2B7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90adffd4-3590-4c50-aeb8-4ca21f94f85a.roa
Signing time:             Thu 25 Sep 2025 20:52:10 +0000
ROA not before:           Thu 25 Sep 2025 20:52:10 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:92:ad:a0:d4:91:8a:f8:0b:a4:dd:64:62:c3:d7:f5:8b:d4:a2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 20:52:10 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=f1e159170683162e394764b86e05e39631e42767b04c69279e98fdd00330cf0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:45:7e:5d:08:78:46:64:1e:37:69:27:e3:
                    f8:58:de:dd:20:a6:4c:49:51:30:e7:18:55:b3:0a:
                    7b:4e:1b:bf:95:3d:53:aa:56:83:62:3f:0c:92:e3:
                    63:a1:73:e1:1e:00:4b:f8:6c:0a:28:a2:c4:89:2e:
                    d6:50:85:9b:1f:f4:06:b7:53:db:b1:bd:bd:d3:ca:
                    8c:8d:33:5c:fc:f5:01:b3:ee:cd:ae:d7:8a:ae:1d:
                    2a:b4:3f:11:34:29:c7:94:1b:02:5e:ef:0e:e7:61:
                    17:7f:eb:dd:c1:22:ff:52:1c:8a:01:fd:08:7b:d7:
                    7e:1e:a5:10:db:4b:6a:e6:ae:af:ab:aa:74:f8:75:
                    dc:1f:23:ae:80:66:dd:52:99:90:13:7e:7d:a2:9e:
                    2e:6f:0d:89:94:04:67:eb:61:47:b0:5c:a0:45:9f:
                    4d:16:3b:ee:fb:00:54:7d:88:57:7a:15:87:e6:e0:
                    3a:83:58:52:00:42:ea:bf:ef:71:d6:74:65:8e:bb:
                    1e:ac:08:dc:8b:d9:25:a0:86:d2:8e:ff:39:25:18:
                    a1:00:da:22:a1:7e:28:2e:d5:8e:9a:a1:23:f9:3e:
                    38:62:4f:cd:5e:11:53:2e:c7:69:0f:a2:7e:0f:4f:
                    08:f3:fa:f2:fe:35:34:52:78:61:c3:21:66:06:ea:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F2:99:70:DB:F0:02:82:5D:9B:48:F0:C3:02:A6:AB:9B:A6:67:60
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90adffd4-3590-4c50-aeb8-4ca21f94f85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:e6:99:f6:4b:26:69:c6:af:0c:0f:4b:c5:1e:5f:92:cb:
         0d:b7:82:c1:5e:37:44:1d:2c:44:2d:fb:17:11:cb:d4:ff:e7:
         20:ed:7e:01:72:b1:2f:69:c5:29:67:d7:b0:37:3b:0a:c7:50:
         3c:94:67:50:c6:99:d3:71:33:eb:48:24:89:89:9c:16:63:b3:
         0a:ba:73:e7:70:58:a9:51:5c:59:8d:96:a9:9d:15:66:e4:59:
         fe:d0:dc:db:f0:d9:94:89:5d:75:66:c0:6b:1f:2c:92:88:8e:
         7e:70:5b:47:97:e4:a1:84:c1:b5:5a:32:5f:86:25:77:1b:88:
         be:82:9c:78:36:da:69:a0:c1:76:b9:03:7b:d9:1c:64:34:cc:
         d2:fe:fc:07:2a:c3:c5:47:bc:80:91:97:dd:46:dd:94:00:6a:
         44:65:91:55:c7:dd:b8:f4:81:97:cf:c6:42:82:40:ef:f8:d7:
         2c:87:63:2c:15:5c:35:84:90:42:44:5f:63:94:99:08:7e:5a:
         60:0f:fe:4b:70:16:e5:a7:1e:a9:39:8e:d2:56:dd:01:af:5d:
         c7:a4:ee:02:6a:3c:96:db:44:84:da:77:c4:8a:b4:a4:1b:ff:
         9d:9d:cf:61:b4:f7:ad:2d:41:8b:94:d3:cc:cc:39:e8:c2:d8:
         82:81:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:59:05 2025 by rpki-client