Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a62214-44f6-47c3-9ebb-e62bd60f74f4.roa
File:                     94a62214-44f6-47c3-9ebb-e62bd60f74f4.roa (raw, json)
Hash identifier:          keLqlZ5UXEGB7nHzUvYTLQmGqVzJPPjJg83Qm3skdvU=
Subject key identifier:   3C:42:35:52:9C:4E:7F:CA:84:9F:9D:36:08:7B:76:75:F2:C0:68:C2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2E94AC28600DF944586674584E3D77BA9D4B0A08
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a62214-44f6-47c3-9ebb-e62bd60f74f4.roa
Signing time:             Thu 25 Sep 2025 22:29:34 +0000
ROA not before:           Thu 25 Sep 2025 22:29:34 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.166.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:94:ac:28:60:0d:f9:44:58:66:74:58:4e:3d:77:ba:9d:4b:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 22:29:34 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=b89398fba7ea2445e50285149c9357d594df53f775088db86762af03df26a986, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:60:7a:94:78:06:5f:5e:4a:af:0f:f2:c5:
                    02:2f:d1:4a:6f:08:40:11:bb:43:46:73:c5:08:fd:
                    3b:17:bf:6e:1b:19:5e:8a:61:44:d9:16:91:0e:c2:
                    83:13:d2:be:92:b0:b5:2e:e5:55:32:88:40:48:a5:
                    21:5a:5d:83:1a:c9:ee:fd:87:da:49:a5:fd:e3:e6:
                    f0:49:43:e0:70:36:20:a8:4e:72:4a:fb:ff:9c:ec:
                    f0:e5:a8:f6:d2:cb:2d:0e:3d:25:1f:d9:b8:20:26:
                    2d:8a:19:61:5a:86:f8:d3:9f:a5:ca:7a:ee:1f:91:
                    80:b6:03:f5:24:af:e6:cc:9c:cb:82:f7:84:a0:b1:
                    2d:4a:72:3c:5d:dd:2b:71:d5:bc:82:2b:28:ef:87:
                    00:d3:30:15:bf:d7:4e:40:c2:96:f8:0a:5f:ef:ad:
                    0f:98:27:10:00:47:38:34:26:10:15:74:7f:64:a3:
                    29:e8:25:0a:61:54:89:9e:14:4f:cd:74:99:0b:0a:
                    bb:ed:79:75:b3:20:15:c0:87:06:d1:e5:82:85:26:
                    ad:26:d4:a2:09:b2:2b:cd:4b:ba:ba:fc:7d:13:ee:
                    c1:b8:fb:ae:b6:d9:e4:3e:28:a6:5a:fd:73:76:20:
                    5d:f2:c0:e1:75:ab:6d:0c:34:ec:6f:71:8b:d4:3a:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:42:35:52:9C:4E:7F:CA:84:9F:9D:36:08:7B:76:75:F2:C0:68:C2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94a62214-44f6-47c3-9ebb-e62bd60f74f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.166.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:59:f7:77:d7:61:c6:b4:12:63:36:b6:18:a6:f0:95:69:
         43:d9:02:c7:25:5d:06:6c:f9:fa:2a:af:38:6d:19:52:19:85:
         a0:3a:c2:cd:5c:1f:ef:c6:ee:89:12:ef:ca:19:e7:4f:c3:fd:
         6f:19:55:80:1c:69:74:ed:d4:b4:34:5e:b5:12:0b:a5:c7:47:
         d3:6c:0f:1f:7e:87:a2:9b:3c:14:37:65:6f:87:e7:3b:c9:37:
         b0:6d:c9:fc:4d:d3:31:ac:e8:ca:ea:f8:f8:f2:83:f3:03:24:
         6a:e4:5c:66:e1:32:39:ca:43:3c:e6:ac:ae:01:67:5a:6c:bc:
         94:08:c0:3c:a5:5b:bc:f2:84:20:58:40:70:21:22:36:ee:15:
         fd:fb:dc:0c:a5:8c:0e:20:30:14:28:f3:23:3c:51:89:2e:64:
         67:4d:ec:5c:11:4a:1f:4d:b6:f4:21:56:18:f4:14:50:e9:2c:
         ce:52:73:34:34:93:fb:a9:31:99:0e:ec:52:f0:39:28:96:8c:
         e1:ed:ec:0c:bb:a7:66:aa:9a:3c:8c:1a:bf:67:b5:cf:48:1d:
         de:eb:9b:5e:c6:c9:22:f9:d5:37:4f:08:64:74:06:72:1b:26:
         91:9c:04:43:51:2c:9c:fd:02:4d:91:83:f5:bf:40:67:36:39:
         4a:2f:42:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULpSsKGAN+URYZnRYTj13up1LCggwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIyOTM0WhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiODkzOThmYmE3ZWEyNDQ1ZTUwMjg1MTQ5YzkzNTdkNTk0
ZGY1M2Y3NzUwODhkYjg2NzYyYWYwM2RmMjZhOTg2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNsGB6lHgGX15Krw/yxQIv0UpvCEARu0NGc8UI/TsXv24b
GV6KYUTZFpEOwoMT0r6SsLUu5VUyiEBIpSFaXYMaye79h9pJpf3j5vBJQ+BwNiCo
TnJK+/+c7PDlqPbSyy0OPSUf2bggJi2KGWFahvjTn6XKeu4fkYC2A/Ukr+bMnMuC
94SgsS1Kcjxd3Stx1byCKyjvhwDTMBW/105Awpb4Cl/vrQ+YJxAARzg0JhAVdH9k
oynoJQphVImeFE/NdJkLCrvteXWzIBXAhwbR5YKFJq0m1KIJsivNS7q6/H0T7sG4
+6622eQ+KKZa/XN2IF3ywOF1q20MNOxvcYvUOhilAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPEI1UpxOf8qEn502CHt2dfLAaMIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk0YTYyMjE0LTQ0ZjYtNDdjMy05ZWJiLWU2MmJkNjBmNzRmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDpkgwDQYJKoZIhvcNAQELBQADggEBABvaWfd312HGtBJjNrYYpvCVaUPZ
AsclXQZs+foqrzhtGVIZhaA6ws1cH+/G7okS78oZ50/D/W8ZVYAcaXTt1LQ0XrUS
C6XHR9NsDx9+h6KbPBQ3ZW+H5zvJN7BtyfxN0zGs6Mrq+Pjyg/MDJGrkXGbhMjnK
QzzmrK4BZ1psvJQIwDylW7zyhCBYQHAhIjbuFf373AyljA4gMBQo8yM8UYkuZGdN
7FwRSh9NtvQhVhj0FFDpLM5SczQ0k/upMZkO7FLwOSiWjOHt7Ay7p2aqmjyMGr9n
tc9IHd7rm17GySL51TdPCGR0BnIbJpGcBENRLJz9Ak2Rg/W/QGc2OUovQps=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:02:43 2025 by rpki-client