Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0be2443-42b3-4e0e-aceb-0c7308aa63f4.roa
File:                     b0be2443-42b3-4e0e-aceb-0c7308aa63f4.roa (raw, json)
Hash identifier:          ohRbVOzjKxH08oCLMWLADLMx9PROiAH0ycqASr9rv68=
Subject key identifier:   DF:D1:7B:35:F0:67:F9:3C:CF:FD:5F:C6:10:9E:4D:D8:4C:5A:21:17
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DEF8A337496BC32A171AA64A4B7A735B457F6FC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0be2443-42b3-4e0e-aceb-0c7308aa63f4.roa
Signing time:             Fri 26 Sep 2025 00:12:56 +0000
ROA not before:           Fri 26 Sep 2025 00:12:56 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.164.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ef:8a:33:74:96:bc:32:a1:71:aa:64:a4:b7:a7:35:b4:57:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:12:56 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=47567f7778f210719598b673c4c12ba872c62e125d3c5550c0fe5fce1fb91af8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:68:a8:e4:06:91:55:53:4a:a3:80:44:06:
                    25:51:bb:f7:4a:fb:30:3b:7a:d0:1b:a1:93:94:5b:
                    db:65:d2:89:60:fb:d6:28:4f:e8:df:bb:b9:5a:45:
                    f4:4b:78:c5:f0:05:0d:29:96:60:11:03:8a:4d:d2:
                    39:1e:80:e2:bc:06:4e:74:74:45:9d:2e:d9:b1:1e:
                    f8:d7:3c:be:00:25:09:99:e9:34:3d:67:e7:81:2c:
                    bb:4b:73:06:2f:d4:80:2f:7f:8e:70:5b:cd:6e:7d:
                    60:05:e4:31:5d:14:cd:37:87:40:bd:e1:19:48:80:
                    6e:12:c0:28:fd:79:77:5c:62:80:ea:ab:3f:bc:9f:
                    34:45:e9:e9:a7:aa:ef:6a:d1:d6:14:64:01:17:ff:
                    d6:69:00:34:55:f4:f8:5c:de:78:13:ce:e8:66:54:
                    ad:f5:28:0c:62:a0:9c:e7:37:57:89:cb:1d:be:62:
                    69:26:5c:74:76:83:ae:35:58:66:cc:dd:e0:7b:8d:
                    77:92:2d:1a:dd:62:c7:d5:c9:00:16:bd:37:9a:41:
                    91:03:4e:2f:c6:6e:ce:c7:ce:87:2d:4c:ec:80:eb:
                    71:9e:f5:ae:0b:43:43:fd:42:14:fa:5e:62:05:6c:
                    1c:a1:8f:27:ae:c5:14:47:81:a4:f8:f0:65:fe:c9:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:7B:35:F0:67:F9:3C:CF:FD:5F:C6:10:9E:4D:D8:4C:5A:21:17
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0be2443-42b3-4e0e-aceb-0c7308aa63f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.164.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:ee:69:f1:85:47:68:f1:d7:7b:97:27:c2:12:04:90:88:
         50:d4:69:73:f6:a0:d8:b8:31:cd:1b:07:11:d8:c0:dd:e5:96:
         9c:2f:d4:f5:6d:22:29:53:af:fa:8d:56:6b:e4:41:27:f7:55:
         f5:a8:20:a2:9c:4e:8a:de:89:d1:40:f5:ea:ec:3d:11:11:5c:
         7c:5c:d2:56:38:ba:4e:01:c1:a6:11:90:94:e4:9f:39:75:42:
         60:8b:63:f5:5e:75:5c:a7:f3:1c:3f:7b:ab:20:76:f6:80:9b:
         a0:ef:40:1b:fb:c3:88:23:77:1d:1d:71:4c:71:f1:08:7a:18:
         c7:9f:2c:47:97:a2:ab:a3:63:4d:9f:22:a4:53:c8:5d:e0:6b:
         e3:79:40:6c:73:1a:cc:dc:c6:37:22:b8:48:09:be:43:c9:16:
         99:e3:78:af:af:57:0d:f4:dd:fd:89:f0:e7:92:8c:b0:b5:3c:
         68:b5:53:9e:14:63:d7:e4:95:3c:d7:6a:d1:c0:bb:b0:f5:41:
         70:f8:33:99:62:a2:49:1a:6f:c7:be:3e:9f:9c:ba:22:bf:24:
         07:d5:28:d9:db:60:59:b3:c0:00:17:8d:d7:a9:74:60:88:6c:
         cb:55:c4:e4:fc:1b:d6:3d:ff:f0:68:67:06:c5:88:f2:bd:2e:
         b8:c6:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 21:56:53 2025 by rpki-client