Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99633928-cf37-4a83-a8bd-cf95325c6111.roa
File:                     99633928-cf37-4a83-a8bd-cf95325c6111.roa (raw, json)
Hash identifier:          9/GyW6ZW3VPkbUAo12iggGuU0+RxiOQVrTx+PMwHGQU=
Subject key identifier:   66:F6:9E:CD:A9:6F:F5:24:A4:7F:32:A4:5A:D9:65:20:70:9F:5E:00
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       394DED83C6CB1BA1EFF547A4C5F4B44E5D64092A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99633928-cf37-4a83-a8bd-cf95325c6111.roa
Signing time:             Fri 26 Sep 2025 02:09:55 +0000
ROA not before:           Fri 26 Sep 2025 02:09:55 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4d:ed:83:c6:cb:1b:a1:ef:f5:47:a4:c5:f4:b4:4e:5d:64:09:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 02:09:55 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=6cf322faf0b45a9bb059f06d0149bf72f01e67dff45a6a72d10ce6351782e5ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:77:da:3c:28:30:2c:12:43:87:70:69:3b:
                    df:b0:ec:ba:77:7d:9c:92:79:29:5d:94:d5:0d:56:
                    23:5c:53:ff:40:1a:db:a4:27:82:26:b3:2c:36:27:
                    01:3d:52:6c:7e:da:8f:cf:f2:03:82:f9:38:65:d8:
                    f2:ae:10:b2:ef:6e:c3:1a:71:62:e7:d6:2a:53:0b:
                    f6:27:8c:0a:46:52:48:32:52:60:a6:48:c6:3b:48:
                    6e:2b:04:b6:90:e3:aa:6f:76:db:b0:d5:65:e5:1c:
                    e8:45:2b:66:5d:55:16:91:7d:f2:38:1c:35:95:2c:
                    f7:ee:f2:d0:cf:68:40:8d:a3:b5:dc:18:71:ad:4e:
                    dc:c4:e0:1c:ce:f3:1a:5a:6a:3d:32:e2:96:1d:a6:
                    5c:ff:09:78:ca:85:46:07:ff:8e:69:32:61:d8:54:
                    69:42:b0:04:3b:7a:7d:91:17:c1:e6:9e:5c:eb:e6:
                    ef:c2:3a:a7:b9:01:8f:92:87:cc:a1:2f:08:af:4e:
                    8b:6e:fb:55:cc:15:70:d6:41:07:8d:1f:ac:14:ec:
                    b7:d9:42:20:d1:db:02:d4:8b:19:be:c1:17:19:7a:
                    ab:ae:4a:9e:e2:4c:f6:53:b8:67:4a:c8:70:92:c1:
                    df:f0:8f:19:c7:72:b8:1d:cf:d4:de:32:c4:ef:25:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:9E:CD:A9:6F:F5:24:A4:7F:32:A4:5A:D9:65:20:70:9F:5E:00
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99633928-cf37-4a83-a8bd-cf95325c6111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:98:14:39:5e:24:d8:24:1e:e9:22:1a:c8:88:a1:0e:3b:00:
         fe:4e:12:b2:ac:0f:00:5e:29:56:8f:b8:4b:fd:93:cd:e9:a2:
         e5:80:7d:d8:c9:4d:0f:0e:cd:26:71:d1:c6:ad:a3:2a:6a:d3:
         a8:ca:b5:e0:cc:7c:1a:43:1b:d3:24:d9:63:1b:bb:d7:49:23:
         d1:89:7e:ef:ac:9f:25:9f:fa:6a:1a:61:7c:60:28:2d:be:35:
         e3:a5:d4:cd:1f:ff:0b:29:03:85:d1:a5:af:d2:d6:05:21:93:
         6c:11:4f:5e:72:17:74:28:ff:ce:66:dd:b0:20:39:85:f2:c2:
         96:97:6d:4b:a8:c6:87:7b:cc:22:e9:0b:2b:cb:5c:21:9a:bb:
         ea:1e:83:a9:9e:d5:4f:fd:26:10:19:63:a8:e5:5a:e8:49:05:
         bd:6e:d3:16:db:e8:16:bd:32:21:a1:3a:79:21:41:cd:d8:fd:
         3d:da:07:ce:c1:91:57:13:90:ae:fd:9a:4b:1a:cc:65:41:e1:
         0f:95:f4:65:93:b4:51:c3:d8:1f:71:b2:ec:13:7b:e1:38:e8:
         c6:39:07:c7:28:78:e8:e9:8a:80:75:1a:7b:56:79:2c:15:ef:
         32:1e:2a:c0:9f:dc:9c:54:8f:28:1e:5b:c0:0e:c9:27:57:30:
         1a:00:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:58:49 2025 by rpki-client