Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ea5686-ad2b-41be-b4b9-5a16c45959af.roa
File:                     94ea5686-ad2b-41be-b4b9-5a16c45959af.roa (raw, json)
Hash identifier:          jT0gZmoo5VwW8MWq0+V7sqKPRiiiIelC3x8zi/++Fzs=
Subject key identifier:   D7:F6:7B:D1:17:99:64:E6:EC:51:04:1F:56:20:D2:A3:C5:92:2F:0D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22EB5CC37D3025BD954CBCDFFC2227356A00ED6F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ea5686-ad2b-41be-b4b9-5a16c45959af.roa
Signing time:             Fri 26 Sep 2025 00:15:39 +0000
ROA not before:           Fri 26 Sep 2025 00:15:39 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:5c:c3:7d:30:25:bd:95:4c:bc:df:fc:22:27:35:6a:00:ed:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:15:39 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=65fb0dd90f4ddd1b91e6a758d204630b21160723e4a1bf85f8aa7c8d0f50f609, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:5b:71:75:2c:26:d5:b3:cb:70:d8:6f:5c:
                    3c:2c:a7:d3:31:0e:bc:b6:50:b6:f1:2c:50:47:08:
                    90:d9:9a:0e:65:5e:75:a7:5a:fd:9c:a0:26:26:9f:
                    2b:0c:f3:5c:45:bd:88:cb:8d:75:0a:76:9e:6c:08:
                    38:47:35:8f:21:46:51:00:7d:d3:cb:42:07:c5:29:
                    ca:92:b1:6d:35:9b:f9:32:96:6a:dc:75:fc:59:f9:
                    b0:f7:4c:40:02:7e:5d:d5:5e:f3:ba:f1:80:fe:a6:
                    f6:ec:a4:d2:c9:46:a6:21:d6:62:71:9e:7c:0a:9a:
                    e4:98:44:8e:f0:e6:a2:c2:ec:90:b0:23:0a:a9:66:
                    04:62:64:c8:52:fc:b5:e8:19:cb:4c:e0:f0:f3:62:
                    c2:4f:a7:6e:9c:b4:76:09:0e:2c:47:a2:79:04:ba:
                    08:6c:86:dd:1f:93:a6:51:17:5a:2e:d7:d1:78:61:
                    05:90:93:77:37:bf:56:cc:50:35:8d:57:e3:b1:04:
                    99:af:6a:45:26:af:98:9a:62:55:3c:30:3a:4f:14:
                    b5:9d:1e:94:fd:4d:48:39:f5:49:46:d1:90:07:fb:
                    fb:70:21:6b:65:2a:af:df:fd:97:f0:04:c8:0a:9f:
                    f8:3d:37:f6:69:ce:54:f5:e7:17:6b:4e:37:86:fa:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:7B:D1:17:99:64:E6:EC:51:04:1F:56:20:D2:A3:C5:92:2F:0D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94ea5686-ad2b-41be-b4b9-5a16c45959af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:6b:6c:29:6a:52:77:49:54:e6:6a:c3:4b:91:d5:26:da:48:
         e0:57:78:45:8d:96:f3:5c:fc:3f:44:24:f0:66:40:5e:b2:fd:
         68:89:6c:4f:e6:22:33:e7:d9:c0:e1:40:e8:41:a4:8f:4f:20:
         10:2b:6d:43:b6:3d:11:ec:5f:7d:ce:54:67:04:b3:b2:34:50:
         b1:41:16:ab:4d:68:7d:df:2f:22:61:14:59:64:bd:a7:91:de:
         e5:69:fa:e0:1e:de:42:a9:bc:15:88:50:18:2f:bc:9b:cc:1d:
         f0:31:3e:7f:08:ce:2c:49:6a:c8:3e:19:8f:be:66:52:34:e0:
         d1:85:1c:2c:a7:12:ee:07:11:d0:69:4f:06:8b:df:97:94:7e:
         84:8e:c2:6b:63:df:25:9b:ca:61:5e:1c:ff:d7:2e:bd:04:60:
         c6:9d:32:f6:e0:f4:10:1b:cb:62:25:cc:ae:f3:72:2f:1c:28:
         4a:bb:10:b1:a5:10:78:bd:e4:34:70:72:0a:63:c5:83:13:cd:
         01:db:8d:cd:13:41:b1:1b:cd:2e:56:42:41:d5:e1:84:7c:b7:
         28:55:b5:03:ac:1b:8c:07:20:5b:e9:f8:66:f3:97:97:dc:32:
         64:8c:be:52:14:6c:da:d8:b3:63:25:5c:99:32:eb:45:7f:4d:
         d3:d4:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:50:32 2025 by rpki-client