Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9de664f3-807f-4782-af7c-ebd8f4263175.roa
File:                     9de664f3-807f-4782-af7c-ebd8f4263175.roa (raw, json)
Hash identifier:          HrtYuW1EBuhtzx4BxXLTEQWZq7H3opQp7tLiqCtQL0c=
Subject key identifier:   53:A8:F1:BC:0D:B2:96:9F:B2:D5:C3:3A:76:0A:6D:87:E0:A0:E7:82
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0B1BEEA1F47819921326B6782D92ABB47C094339
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9de664f3-807f-4782-af7c-ebd8f4263175.roa
Signing time:             Fri 26 Sep 2025 01:02:02 +0000
ROA not before:           Fri 26 Sep 2025 01:02:02 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1b:ee:a1:f4:78:19:92:13:26:b6:78:2d:92:ab:b4:7c:09:43:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:02:02 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=ff223cd1c68024788e8a36cf909982d6b02703614538e3263a99896f6c361501, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:6e:51:8b:0e:64:e3:c0:c2:30:43:2e:ed:
                    af:6a:c2:7d:43:7c:3a:e3:00:9c:35:57:49:5c:ae:
                    2a:b9:d5:b1:cc:40:b1:7d:ed:b6:07:17:bc:16:cd:
                    39:72:42:e2:4a:b3:03:a1:b1:76:94:32:e6:50:9d:
                    f4:b1:5b:7a:c8:6b:89:10:91:16:aa:01:b1:94:6a:
                    2a:c1:fc:06:89:60:7f:48:ed:a6:38:31:53:19:59:
                    bf:71:0c:1e:55:24:f2:6e:8b:f8:d9:db:f7:1c:0d:
                    05:aa:9d:e7:f8:1b:cb:fd:7d:48:03:a7:49:b0:12:
                    2a:93:16:cf:4e:68:0d:55:49:bd:af:9a:47:de:46:
                    b8:51:2f:35:7b:9f:08:ec:31:57:15:c8:16:da:1c:
                    43:d9:33:93:87:6d:07:95:7d:f4:f8:c4:41:be:e7:
                    c6:a8:95:d1:2e:ba:f0:0f:30:86:ab:67:8f:6a:23:
                    68:68:81:4c:60:46:b3:57:e1:2d:af:85:aa:21:1c:
                    9d:26:e5:31:62:c6:35:46:8e:fe:c9:dd:02:39:3d:
                    e6:c2:11:a0:dd:15:59:79:b3:4a:b5:76:72:e4:2a:
                    99:44:9c:1a:c5:d1:6f:65:45:41:d5:1d:7b:26:8b:
                    bf:aa:ef:95:6b:a4:d5:bf:89:68:09:0c:ee:42:c8:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:F1:BC:0D:B2:96:9F:B2:D5:C3:3A:76:0A:6D:87:E0:A0:E7:82
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9de664f3-807f-4782-af7c-ebd8f4263175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:7e:b3:32:a2:f6:89:91:50:87:8c:09:59:a5:de:ef:38:
         e1:b5:24:ca:4f:39:15:ae:d6:73:d5:f2:b4:74:14:5a:cc:81:
         20:11:76:2d:2f:9b:cf:6d:b2:ee:06:34:54:2f:5d:95:d4:5e:
         c9:01:1c:9a:2b:83:cf:c5:6a:c7:48:3f:02:b9:d7:10:fe:e2:
         64:f0:0b:bd:e2:30:d1:1c:c7:5c:b3:ee:bd:ac:2b:35:cd:d4:
         87:2d:fc:ad:f1:fa:df:50:41:65:34:89:9e:c4:e5:d2:f8:6e:
         8f:fd:4a:34:b5:7c:7e:ed:27:fc:7e:8c:a1:0d:af:05:ab:50:
         18:48:db:09:eb:60:51:a6:a4:0e:cc:01:e0:6a:16:4f:c1:5d:
         bf:19:1e:03:26:32:9d:06:5b:52:a5:28:42:6c:83:1a:c4:4d:
         8e:ba:10:e9:8c:62:d2:c1:4f:d9:db:28:d5:b6:84:5b:83:d1:
         9c:64:70:39:06:6c:9d:12:17:54:54:01:c8:4d:07:d1:ca:7d:
         59:86:18:39:16:b2:0c:0f:5e:5a:f7:30:7c:45:f4:9e:14:33:
         3a:a4:b2:b1:94:66:5d:9a:8e:29:5c:02:fa:2a:79:db:d4:9e:
         88:5b:80:02:26:57:7e:5c:76:b2:19:c9:91:f5:f5:48:e1:0b:
         1f:c9:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:48:21 2025 by rpki-client