Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2d5756-f8c0-454d-ba99-ed2f89837f1d.roa
File:                     ab2d5756-f8c0-454d-ba99-ed2f89837f1d.roa (raw, json)
Hash identifier:          P/PsausxpSzzbOZG3f2ynlMgeNtymhuqPblRiC3ut8s=
Subject key identifier:   43:BA:E4:D9:F2:60:66:6B:DA:90:DF:F9:2E:01:7E:5B:66:47:22:A5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5FB6C66956380EB5A405139FA81FB7659FB8B7B6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2d5756-f8c0-454d-ba99-ed2f89837f1d.roa
Signing time:             Tue 19 Aug 2025 15:01:00 +0000
ROA not before:           Tue 19 Aug 2025 15:01:00 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.130.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b6:c6:69:56:38:0e:b5:a4:05:13:9f:a8:1f:b7:65:9f:b8:b7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug 19 15:01:00 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=4328dad630d35fd055052669adc235ddb8dcf4a35e49e95c5633f138e35bcf26, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:f7:65:7c:16:cd:f5:1b:8c:6b:c2:2a:59:
                    f9:a9:b4:b7:ff:fa:20:08:89:52:56:75:5a:25:af:
                    00:47:c6:5f:65:b9:3b:53:b7:b0:88:47:3a:13:65:
                    6d:63:0b:f7:f6:11:55:31:2e:e3:72:41:7b:91:1d:
                    d3:19:b1:08:a2:d1:d8:3e:14:bf:da:9f:28:20:cd:
                    66:18:ce:39:60:35:57:0f:c1:fd:ad:c4:bd:a8:bb:
                    75:b6:29:81:b4:28:54:14:0f:8e:6c:b2:ea:d9:7d:
                    85:0c:aa:0a:21:28:3c:fd:22:94:44:08:17:a8:6b:
                    32:5e:8a:7b:e5:07:70:af:74:58:64:80:ba:62:0b:
                    60:e6:96:6a:f4:ff:f4:a9:fd:8c:a0:0a:92:1a:03:
                    38:a1:97:28:5c:e3:14:63:ed:08:1a:2d:93:2f:18:
                    f0:78:52:09:58:11:7c:45:95:ab:e4:fb:e6:91:80:
                    8b:84:07:14:41:ae:bf:e8:0b:09:d6:81:bd:6e:7d:
                    5f:88:ea:a4:79:56:21:e2:c4:33:e1:63:a8:34:a4:
                    b8:28:02:35:75:93:00:eb:64:45:9b:cd:89:08:a3:
                    44:b0:ec:5a:47:ab:de:26:44:98:86:9a:83:38:86:
                    8d:c4:15:39:af:18:fa:77:25:8b:20:fd:af:d8:dc:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:E4:D9:F2:60:66:6B:DA:90:DF:F9:2E:01:7E:5B:66:47:22:A5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab2d5756-f8c0-454d-ba99-ed2f89837f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:be:30:73:d2:b2:7b:f1:52:78:ae:5b:b8:10:ea:9d:a7:
         60:b9:0a:c5:47:39:de:a2:48:2f:ca:11:ad:06:ff:c4:0f:59:
         43:86:68:fc:94:4d:c2:ba:51:93:8f:7b:35:02:47:71:6c:1f:
         12:be:b7:ca:77:4a:38:ec:36:1c:e3:ce:fa:2c:47:62:a9:73:
         97:d2:72:8d:ad:26:9c:89:48:83:f8:0d:cb:7e:82:60:52:59:
         3b:00:9f:78:0e:32:e7:35:02:13:39:10:82:b6:1f:d5:57:3d:
         09:24:3b:07:35:b5:e3:ea:26:da:1c:60:58:4f:b5:72:7d:56:
         fb:95:c2:1c:e9:f2:81:c0:67:fd:bb:5f:ad:a7:92:81:32:dd:
         1d:47:08:e9:e3:62:c5:67:3a:46:b6:d7:2e:dd:60:24:5c:60:
         ce:18:45:3e:cc:19:00:35:b5:10:38:56:f2:12:3a:7c:ae:d9:
         9c:c4:cc:ec:3e:99:05:1f:9d:2b:2e:75:63:ba:24:2a:65:95:
         5b:14:e2:f0:18:72:0a:9c:9e:bf:4f:2c:68:21:42:c6:74:c2:
         94:81:ec:10:51:4a:89:fe:11:3d:73:0d:93:35:87:8e:27:72:
         b1:ca:29:19:25:20:30:0e:5e:63:46:1f:6d:87:e4:4e:69:00:
         f7:c5:92:38
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUX7bGaVY4DrWkBROfqB+3ZZ+4t7YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTAwWhcNMjUwOTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzI4ZGFkNjMwZDM1ZmQwNTUwNTI2NjlhZGMyMzVkZGI4
ZGNmNGEzNWU0OWU5NWM1NjMzZjEzOGUzNWJjZjI2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQrfdlfBbN9RuMa8IqWfmptLf/+iAIiVJWdVolrwBHxl9l
uTtTt7CIRzoTZW1jC/f2EVUxLuNyQXuRHdMZsQii0dg+FL/anyggzWYYzjlgNVcP
wf2txL2ou3W2KYG0KFQUD45ssurZfYUMqgohKDz9IpRECBeoazJeinvlB3CvdFhk
gLpiC2Dmlmr0//Sp/YygCpIaAzihlyhc4xRj7QgaLZMvGPB4UglYEXxFlavk++aR
gIuEBxRBrr/oCwnWgb1ufV+I6qR5ViHixDPhY6g0pLgoAjV1kwDrZEWbzYkIo0Sw
7FpHq94mRJiGmoM4ho3EFTmvGPp3JYsg/a/Y3OkrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQ7rk2fJgZmvakN/5LgF+W2ZHIqUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2FiMmQ1NzU2LWY4YzAtNDU0ZC1iYTk5LWVkMmY4OTgzN2YxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwADgjANBgkqhkiG9w0BAQsFAAOCAQEAIEy+MHPSsnvxUniuW7gQ6p2nYLkK
xUc53qJIL8oRrQb/xA9ZQ4Zo/JRNwrpRk497NQJHcWwfEr63yndKOOw2HOPO+ixH
Yqlzl9Jyja0mnIlIg/gNy36CYFJZOwCfeA4y5zUCEzkQgrYf1Vc9CSQ7BzW14+om
2hxgWE+1cn1W+5XCHOnygcBn/btfraeSgTLdHUcI6eNixWc6RrbXLt1gJFxgzhhF
PswZADW1EDhW8hI6fK7ZnMTM7D6ZBR+dKy51Y7okKmWVWxTi8BhyCpyev08saCFC
xnTClIHsEFFKif4RPXMNkzWHjidyscopGSUgMA5eY0YfbYfkTmkA98WSOA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:03 2025 by rpki-client