Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3e0bdad-2cf6-45dc-b8ad-29ab2c49e0ae.roa
File:                     b3e0bdad-2cf6-45dc-b8ad-29ab2c49e0ae.roa (raw, json)
Hash identifier:          9Bq3duvn2NMKFn1ZcfmBYGDIHvQCyiMM8nhZiNTUSZA=
Subject key identifier:   ED:76:E9:7B:24:FF:F9:72:71:F5:88:91:35:69:EF:44:59:D2:D3:1C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       25B5C9C3D78D864391AC37E9071A210D278C1CFD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3e0bdad-2cf6-45dc-b8ad-29ab2c49e0ae.roa
Signing time:             Fri 26 Sep 2025 01:52:01 +0000
ROA not before:           Fri 26 Sep 2025 01:52:01 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.167.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:c9:c3:d7:8d:86:43:91:ac:37:e9:07:1a:21:0d:27:8c:1c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 01:52:01 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=d78c5332cdd659f551df9f32ed55eace97cf685fbcf31413bae7c39adf9430c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:18:03:16:90:e8:61:9e:ea:b5:fa:72:bd:
                    cb:ec:b8:6b:eb:cc:e8:6d:5d:1e:75:be:c8:ff:b9:
                    55:b8:2b:af:3b:4a:46:01:cd:a9:ad:d9:53:ec:2d:
                    fa:91:bd:91:16:8b:dc:bb:a0:ba:2c:7f:83:fc:94:
                    b2:8c:bd:67:d8:d1:d9:c7:7c:94:87:4a:a8:6c:a8:
                    e2:1d:19:10:b7:03:26:c9:a9:8f:a9:d3:72:09:34:
                    ba:fa:b9:36:3f:35:3c:1c:b5:78:78:77:09:10:d6:
                    3a:d5:02:a9:01:4f:16:a9:05:5a:f0:d9:76:f4:8f:
                    a7:5e:ea:59:25:a8:3c:6e:f8:5c:ff:ff:91:71:c2:
                    b7:3f:3f:27:6c:86:5e:31:5a:10:e8:31:30:ce:ed:
                    03:c5:93:8a:e7:ea:87:15:27:b3:a6:0b:cb:9f:fb:
                    29:21:13:f8:54:2a:82:5f:f1:65:83:84:46:8a:57:
                    a4:ea:dc:96:cd:69:9b:fe:a8:18:ef:49:3a:84:1a:
                    5c:b3:4f:39:87:86:a5:bf:23:89:99:42:f7:b7:15:
                    96:82:14:d6:0b:2d:c2:b3:e3:ac:ce:8b:43:20:e7:
                    fb:51:7e:39:21:21:c6:a8:2f:02:4b:a6:52:7a:c1:
                    08:0d:e7:df:fb:6e:55:e4:19:09:7a:75:ed:40:a4:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:76:E9:7B:24:FF:F9:72:71:F5:88:91:35:69:EF:44:59:D2:D3:1C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3e0bdad-2cf6-45dc-b8ad-29ab2c49e0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.167.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:a1:4e:81:9e:78:c3:9e:94:1c:de:c4:d6:2e:08:92:6b:
         7c:a8:35:2c:58:12:39:9f:b1:da:6b:be:93:06:56:5f:a8:19:
         b3:62:ac:7f:5b:70:9c:40:9e:80:4d:db:c6:18:5e:ad:85:7e:
         d6:3b:e7:a6:17:11:32:15:aa:b3:77:e9:68:e7:40:a7:1e:12:
         64:d2:10:9b:af:c8:85:48:4d:35:25:f0:4f:78:54:1e:62:a4:
         8c:e1:31:50:54:55:88:66:59:b6:54:b6:ae:5a:1b:04:03:73:
         da:07:79:dc:b5:69:1e:81:e3:8f:93:a3:58:ae:06:77:34:8e:
         13:53:8a:0a:bc:72:ab:39:0b:d5:38:d8:6d:4b:9f:67:21:61:
         19:1b:6a:a8:2b:4c:c1:b0:99:aa:08:3b:c8:92:dc:fa:6c:0f:
         47:df:87:6f:1d:88:b7:af:c0:d3:6c:b6:04:db:66:45:5d:90:
         ba:6c:27:26:ee:e1:32:8e:f4:e1:fc:ac:b1:ac:32:36:95:a8:
         af:04:57:36:ea:8f:fa:06:65:6e:0a:b8:21:2c:31:50:8c:ea:
         ac:3d:c1:d5:b6:f2:55:fb:71:10:cd:bf:dd:4d:98:a8:b5:ea:
         15:41:72:a7:a8:ed:69:be:66:df:7a:fe:e6:cd:22:7a:3c:1e:
         e4:c3:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:56:35 2025 by rpki-client