Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a3abcf4-77ab-4d6d-a8c4-105e6d051f7a.roa
File:                     9a3abcf4-77ab-4d6d-a8c4-105e6d051f7a.roa (raw, json)
Hash identifier:          ogxGxDfbN7bfxMvEo/sk0j+kHpWDvYy8jZGLphw3jzw=
Subject key identifier:   B1:FD:11:F0:41:B0:AF:96:80:0F:DE:2B:CC:CA:52:58:05:CA:3C:4C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51C680193FCB80517BDACC12D507309C133F20FC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a3abcf4-77ab-4d6d-a8c4-105e6d051f7a.roa
Signing time:             Thu 25 Sep 2025 17:12:01 +0000
ROA not before:           Thu 25 Sep 2025 17:12:01 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.161.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c6:80:19:3f:cb:80:51:7b:da:cc:12:d5:07:30:9c:13:3f:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:12:01 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=6648555b5c05ecae6506cc714547907e4a9051c3a0b3d20770b7af0ec112b40c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:b5:f3:34:51:a7:47:e7:a6:8e:bc:40:30:
                    4c:07:81:cf:31:10:8e:46:40:f2:89:88:9b:21:ca:
                    14:91:89:c9:07:50:ca:1d:3f:57:6b:06:d7:e1:f6:
                    ba:91:7c:72:a6:63:bb:b7:2b:d8:ac:b1:b0:fd:78:
                    1f:1b:3f:75:38:8a:76:35:bd:dd:32:28:74:17:92:
                    8a:be:e4:95:45:5b:c7:05:eb:9f:36:24:57:ac:45:
                    e8:89:2a:2f:91:39:b4:fe:8d:67:19:cb:54:a7:14:
                    96:f3:7a:7b:59:5e:cb:07:4b:81:e1:0c:1c:6c:44:
                    90:f2:1d:c2:e7:d0:aa:fb:af:45:de:af:ac:17:f5:
                    11:b5:1e:db:68:d6:9a:83:44:60:26:f8:cf:23:2a:
                    a5:87:6c:e4:07:fc:5e:8d:ce:f3:84:00:42:85:27:
                    07:cb:3e:2f:1e:1a:e3:89:48:9e:78:8b:1a:e5:57:
                    e5:24:22:46:98:a3:e0:97:61:18:40:c9:0a:aa:03:
                    ed:73:9d:1f:a3:cb:71:0a:d5:1c:de:c0:26:84:03:
                    b7:dd:5a:52:32:fe:91:df:e3:64:53:c8:45:bd:77:
                    94:89:ec:6c:38:c5:ca:6b:9e:67:15:60:50:36:74:
                    9b:8e:d4:aa:1b:51:dc:d1:28:2b:10:d9:6b:55:26:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:11:F0:41:B0:AF:96:80:0F:DE:2B:CC:CA:52:58:05:CA:3C:4C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a3abcf4-77ab-4d6d-a8c4-105e6d051f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.161.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:53:f4:19:8d:c9:6c:3b:67:84:7c:9e:a8:cf:21:e3:9b:f4:
         ab:6b:d6:b1:bc:1c:c4:fe:28:e8:85:69:29:b0:c6:45:ed:9a:
         3a:b8:aa:50:93:fe:91:7b:61:84:ea:f4:42:0a:2e:a8:87:97:
         02:ff:ad:f5:33:b5:66:bb:ae:72:7c:93:c5:f6:3b:e4:6d:f6:
         93:39:59:4d:08:68:3c:db:c1:ad:ca:84:79:71:19:a3:0b:7d:
         d4:86:87:8a:af:05:4b:87:df:88:b3:0e:a5:f8:df:5c:00:69:
         86:49:fd:43:12:37:41:8a:95:46:fb:4d:5f:cb:a9:4e:e9:17:
         3c:be:d4:e6:be:a4:9a:f0:00:22:39:48:07:c3:97:77:31:80:
         34:13:d9:7d:3f:51:c4:fe:3b:4d:9e:c2:a3:1f:80:9e:1d:fc:
         ca:fe:5c:62:14:e2:8a:06:86:ec:8a:40:da:40:98:18:99:ba:
         2a:d2:24:05:81:a8:50:d9:4a:6b:6b:93:30:b5:6f:e3:ae:d6:
         f3:d9:9e:9e:6f:a0:85:09:3c:9d:a5:db:38:b4:ba:d0:eb:fd:
         12:81:82:86:3d:74:98:86:06:4c:0e:09:e6:29:a8:61:86:ba:
         1d:9b:4e:d0:ac:15:96:8a:ce:ef:6d:3d:3a:73:a8:fc:fe:82:
         11:75:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 22:03:02 2025 by rpki-client