Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9895e9e1-20f7-401f-b133-beebb62e7ba8.roa
File:                     9895e9e1-20f7-401f-b133-beebb62e7ba8.roa (raw, json)
Hash identifier:          9TxDXS0Y4LSnTRTvbzhOoyYTkqdSM0HdfqUop4v1n6g=
Subject key identifier:   5F:21:66:90:6F:4F:1E:B1:5F:6D:12:0F:A7:18:72:1E:AE:6D:AE:D4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4E7D6F5005D0417231FE10F31F7313F194694EB4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9895e9e1-20f7-401f-b133-beebb62e7ba8.roa
Signing time:             Thu 25 Sep 2025 17:30:02 +0000
ROA not before:           Thu 25 Sep 2025 17:30:02 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:6f:50:05:d0:41:72:31:fe:10:f3:1f:73:13:f1:94:69:4e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:30:02 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=928ce8a7165a36a150c3da18abcce5b4a111a69a2b6733fb9ece346aee03c698, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:c1:81:5d:b7:d9:1d:7e:55:4d:5b:a4:dd:
                    65:88:e7:98:3c:2a:50:a4:77:6d:09:18:9a:dc:b0:
                    bd:5e:5b:c2:b7:5d:ad:6f:e2:ec:41:47:78:aa:a8:
                    6d:8f:97:62:de:ce:85:ab:f0:70:a6:fe:36:8f:fc:
                    b4:89:0a:f4:88:10:7c:a0:9b:27:c6:88:88:2b:bc:
                    71:42:51:dd:e0:dc:c9:9b:8c:3a:d5:10:9b:4d:77:
                    95:f6:df:6d:7c:b0:21:e1:0e:0b:ba:8a:7f:64:46:
                    2b:80:5a:fb:6f:7a:36:db:55:9e:6c:ac:a7:76:e0:
                    8b:87:8d:44:da:6d:5e:e2:0b:f0:8e:45:ae:b4:3a:
                    0e:bf:1c:65:36:0a:1f:a0:ab:f5:97:50:5f:16:85:
                    ac:98:f4:56:63:7c:c4:25:fb:c0:87:f5:3a:dc:f8:
                    9f:e9:e0:22:5f:70:22:9b:b4:b5:3f:bb:e2:a0:b7:
                    f7:5d:71:24:f2:cf:fe:6f:67:93:9c:b6:91:32:08:
                    83:41:fb:60:82:8e:6b:3e:c2:6d:1d:de:52:d5:2a:
                    8d:51:af:8f:40:a6:1d:cf:98:24:c5:b5:f6:fa:a2:
                    8d:d8:c6:40:6c:39:98:71:7b:3c:24:67:8a:78:cc:
                    3e:95:c2:88:df:e9:18:65:87:e8:11:ad:ca:50:b6:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:66:90:6F:4F:1E:B1:5F:6D:12:0F:A7:18:72:1E:AE:6D:AE:D4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9895e9e1-20f7-401f-b133-beebb62e7ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:06:e8:03:3f:b0:8f:29:09:b4:67:e0:dc:d4:73:cb:a7:
         7e:6c:50:86:30:e6:65:af:56:53:a3:bb:ae:7a:fa:7e:81:3f:
         f5:ec:77:a9:37:8c:ba:d8:83:11:bd:99:6a:47:64:c5:e2:cc:
         e0:1a:87:36:8f:34:5b:70:49:26:52:e9:1b:8d:0c:be:23:36:
         73:e2:43:70:2f:b0:0a:d7:91:ed:fe:13:02:32:46:7a:e3:32:
         f2:35:ff:11:a8:3f:9b:e0:05:b3:7d:ca:1a:4c:ae:70:ff:b0:
         c7:73:66:91:be:ff:88:bd:b1:f7:d5:d9:80:c6:23:7c:65:02:
         1f:78:35:71:01:b5:b6:57:7c:37:5c:6b:f2:5a:c9:de:4b:84:
         41:34:2c:65:43:c7:b9:88:05:4b:60:34:d3:78:a5:9e:8b:36:
         64:4a:42:e6:5d:14:96:77:70:b4:fc:0d:e5:31:54:6c:c2:91:
         4d:76:12:97:b1:53:e9:2f:ea:10:45:7e:00:c8:67:ba:96:78:
         05:dd:9f:49:49:5c:08:ed:27:e0:72:44:b1:2f:df:ca:58:f4:
         90:22:3f:d8:a3:9a:ff:9c:4e:2a:e9:b7:7c:6f:c3:01:37:92:
         74:8f:05:46:9a:32:b0:73:81:c5:b5:71:08:24:b6:05:78:33:
         ca:bc:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:59:37 2025 by rpki-client