Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b0a326d-fe8e-4257-ab31-b7889b93a4e9.roa
File:                     9b0a326d-fe8e-4257-ab31-b7889b93a4e9.roa (raw, json)
Hash identifier:          Ekhwmlu4TrryntYdp0cQMJhTEJrYM/CJEIxNTTY3JCA=
Subject key identifier:   2F:0E:0E:5D:AE:E7:AC:7C:8E:87:CF:8A:F4:0B:3C:8D:37:2D:0F:91
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0FE09775ED2048643BDB16981080559E73BAAA3C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b0a326d-fe8e-4257-ab31-b7889b93a4e9.roa
Signing time:             Thu 25 Sep 2025 17:36:30 +0000
ROA not before:           Thu 25 Sep 2025 17:36:30 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.163.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e0:97:75:ed:20:48:64:3b:db:16:98:10:80:55:9e:73:ba:aa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:36:30 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=618f8a334d0acf42cd5d356ab8d2d568856df5a0ba45dbb71351ff4ca10057d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:0e:de:5a:8e:dd:c7:71:35:c0:1e:00:66:
                    f9:05:a7:db:b3:ad:01:df:cb:04:4c:0b:b3:18:11:
                    38:11:55:62:7e:0a:c9:f2:a7:07:c6:b8:fc:ac:0c:
                    6d:97:74:08:e7:38:90:b1:e1:b2:f5:62:56:dd:4b:
                    59:8a:b5:b3:59:58:74:f3:e1:47:72:1d:fd:a9:30:
                    24:32:56:11:84:33:3f:19:fb:30:07:ce:9a:15:af:
                    d2:d8:a4:56:b9:8e:48:a7:ef:5c:ae:38:43:46:48:
                    2b:c0:81:56:a8:55:74:70:c4:dd:c4:bd:e2:ee:02:
                    ab:07:6e:0c:83:13:a5:fe:2e:35:a1:16:19:f4:34:
                    1a:ec:24:58:3a:89:af:c0:9f:e3:33:b7:17:0c:fb:
                    ab:3c:c7:a1:27:2f:37:5f:2f:ed:72:c7:90:0d:39:
                    1f:2f:f1:ba:84:ea:6f:f9:05:4c:20:bf:71:c4:24:
                    0e:59:c6:b4:c9:ca:37:a8:14:ad:17:34:e4:21:62:
                    c2:01:09:fe:89:4a:e2:3b:48:b7:a7:54:5b:c3:f9:
                    f1:c7:cb:2c:c9:0a:da:af:d6:f1:ef:3f:62:73:1f:
                    14:17:ae:bf:c5:59:cd:b6:c1:30:12:e4:6f:0c:92:
                    48:36:07:ac:ec:fe:e2:09:91:8b:12:5c:0a:44:66:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:0E:5D:AE:E7:AC:7C:8E:87:CF:8A:F4:0B:3C:8D:37:2D:0F:91
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b0a326d-fe8e-4257-ab31-b7889b93a4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.163.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:86:0e:95:15:35:61:d3:60:85:ec:19:ea:4b:77:d4:27:93:
         72:1a:e9:09:96:88:bf:0e:93:db:3c:56:bc:42:3c:2b:e4:c1:
         56:b7:21:25:61:61:9f:66:ec:00:84:a8:4c:3b:7f:dc:d1:89:
         4b:ff:8c:60:7a:53:08:d2:2e:dd:21:0c:72:76:10:4e:45:72:
         67:45:d2:a5:0d:2e:c0:27:19:42:5d:ef:fe:07:24:63:ab:44:
         26:73:77:30:ac:a7:4b:8c:3e:a1:51:86:18:87:d6:a1:50:20:
         c2:fd:fb:f2:ff:3b:bc:ec:14:ce:ed:cb:70:6d:16:d0:95:24:
         5d:f9:75:d4:0f:9b:69:03:be:da:da:f6:65:2c:ca:47:f9:a9:
         77:f4:a2:3d:94:f0:a8:89:cf:1e:5b:a9:e0:92:dd:50:4c:35:
         17:7f:e5:91:cb:55:8a:8d:e3:c8:e4:da:b8:a5:6f:3b:23:c5:
         04:30:00:25:bd:20:d2:fb:2c:0f:a7:45:07:c0:0c:a4:23:db:
         f1:78:9a:59:4e:5f:68:37:7b:1f:28:d2:e8:63:79:a0:5c:14:
         b7:ef:74:87:85:65:c1:da:e1:36:56:9f:b8:f5:e1:61:8b:23:
         d7:d1:a0:5e:7a:4f:12:cd:c1:fd:9f:8f:62:27:6d:cb:84:ce:
         b5:25:a1:e9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD+CXde0gSGQ72xaYEIBVnnO6qjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTczNjMwWhcNMjUxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MThmOGEzMzRkMGFjZjQyY2Q1ZDM1NmFiOGQyZDU2ODg1
NmRmNWEwYmE0NWRiYjcxMzUxZmY0Y2ExMDA1N2QzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCI2w7eWo7dx3E1wB4AZvkFp9uzrQHfywRMC7MYETgRVWJ+
CsnypwfGuPysDG2XdAjnOJCx4bL1YlbdS1mKtbNZWHTz4UdyHf2pMCQyVhGEMz8Z
+zAHzpoVr9LYpFa5jkin71yuOENGSCvAgVaoVXRwxN3EveLuAqsHbgyDE6X+LjWh
Fhn0NBrsJFg6ia/An+MztxcM+6s8x6EnLzdfL+1yx5ANOR8v8bqE6m/5BUwgv3HE
JA5ZxrTJyjeoFK0XNOQhYsIBCf6JSuI7SLenVFvD+fHHyyzJCtqv1vHvP2JzHxQX
rr/FWc22wTAS5G8Mkkg2B6zs/uIJkYsSXApEZt8DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULw4OXa7nrHyOh8+K9As8jTctD5EwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzliMGEzMjZkLWZlOGUtNDI1Ny1hYjMxLWI3ODg5YjkzYTRlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADo4EwDQYJKoZIhvcNAQELBQADggEBABmGDpUVNWHTYIXsGepLd9Qnk3Ia
6QmWiL8Ok9s8VrxCPCvkwVa3ISVhYZ9m7ACEqEw7f9zRiUv/jGB6UwjSLt0hDHJ2
EE5FcmdF0qUNLsAnGUJd7/4HJGOrRCZzdzCsp0uMPqFRhhiH1qFQIML9+/L/O7zs
FM7ty3BtFtCVJF35ddQPm2kDvtra9mUsykf5qXf0oj2U8KiJzx5bqeCS3VBMNRd/
5ZHLVYqN48jk2rilbzsjxQQwACW9INL7LA+nRQfADKQj2/F4mllOX2g3ex8o0uhj
eaBcFLfvdIeFZcHa4TZWn7j14WGLI9fRoF56TxLNwf2fj2InbcuEzrUloek=
-----END CERTIFICATE-----
Generated at Fri Oct 17 22:05:19 2025 by rpki-client