Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e18c6f9-05f2-4afa-9a01-d12386e48c4d.roa
File:                     0e18c6f9-05f2-4afa-9a01-d12386e48c4d.roa (raw, json)
Hash identifier:          G/XCsYPpqIKtx2hUI/c4rzkx+bsik51tlwR4qv/VCms=
Subject key identifier:   1C:BF:59:24:EA:9D:9D:00:F3:F6:B5:3B:CD:1E:04:EE:B9:B6:8D:42
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       07F061E83DA214B3D70F3F202661777EB7E9EEB3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e18c6f9-05f2-4afa-9a01-d12386e48c4d.roa
Signing time:             Mon 20 Oct 2025 06:44:00 +0000
ROA not before:           Mon 20 Oct 2025 06:44:00 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:61:e8:3d:a2:14:b3:d7:0f:3f:20:26:61:77:7e:b7:e9:ee:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 20 06:44:00 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5208c2ab0f1396dfbdc3780c9b5011b5b92fe5c11f3899ecb86473aa20dab7a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:08:39:8c:7f:cb:02:26:41:f2:35:40:03:
                    c1:79:33:f1:fd:be:1e:a6:3a:44:9d:5e:b2:d2:66:
                    1b:67:fb:53:77:46:ca:b6:82:db:89:40:65:6f:60:
                    76:12:c9:86:3e:71:15:e9:6f:ff:cc:54:9b:bd:c0:
                    17:e5:54:3c:0a:8b:eb:8f:30:0c:ab:ac:f6:c1:a8:
                    08:83:c7:1a:bf:1b:82:70:b6:64:7f:73:c0:d6:0e:
                    29:40:20:c1:d6:c6:0f:be:74:0b:7d:07:05:e2:63:
                    af:89:7c:16:77:8d:a7:12:01:2a:f5:de:f3:ea:2f:
                    8b:46:be:88:36:f2:d3:03:3d:f0:cc:8a:45:52:f4:
                    12:71:95:03:d6:d5:2c:ed:b9:47:3b:5a:91:28:52:
                    ad:ef:7e:c4:6b:24:b2:db:0f:76:c8:12:2a:44:f8:
                    dd:5c:68:0f:b6:1a:7f:1a:f3:80:e8:54:9a:2f:c0:
                    ff:7d:f8:32:9f:29:9b:d4:00:70:0f:dc:99:f3:5e:
                    1c:3d:7b:47:24:2a:42:07:3d:40:1a:a2:36:6d:9e:
                    0e:ab:20:2d:0d:89:0d:a0:c5:99:b3:fa:db:97:ff:
                    18:17:e5:dd:a4:07:76:0e:12:a0:0b:fe:2a:c1:a7:
                    92:f5:11:6c:23:5a:e1:aa:92:e2:ed:8b:89:fa:98:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BF:59:24:EA:9D:9D:00:F3:F6:B5:3B:CD:1E:04:EE:B9:B6:8D:42
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e18c6f9-05f2-4afa-9a01-d12386e48c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:2a:e4:6b:4c:29:27:06:95:b1:4d:a5:be:c1:f3:d5:7f:
         f4:bb:00:46:20:72:3f:17:3e:5e:fc:69:69:c4:1b:53:77:e2:
         3b:a6:7a:ac:91:ef:d2:f2:41:22:9b:22:6f:39:17:8e:9b:7d:
         12:f6:4b:75:52:b9:7a:d3:4e:bf:d1:49:27:40:8a:30:25:04:
         c8:56:98:4f:a6:73:07:b0:0d:cf:42:0d:6b:95:ef:b5:7d:68:
         f9:09:bf:22:c2:45:76:5a:c0:47:b7:04:b6:cd:0a:0d:f6:fd:
         85:b8:04:41:04:82:7a:18:67:89:b2:0a:56:40:53:b7:24:41:
         3b:27:ce:3f:67:f2:4d:51:b9:15:6a:c2:80:50:32:b6:86:22:
         f7:65:44:b1:e8:6e:f1:e6:72:22:52:b0:64:21:d3:8e:29:da:
         b4:d9:c9:ac:38:e6:fb:93:aa:d9:84:03:43:f5:2d:9d:db:a2:
         74:60:70:4c:79:26:ad:ab:2b:fa:d0:50:31:fd:95:9c:fe:af:
         07:d5:cf:aa:3f:6d:8b:56:50:6f:a1:35:66:4f:60:cb:4e:e8:
         15:d2:25:24:a4:bf:95:49:88:41:9f:a7:60:e9:84:05:dd:67:
         28:36:0f:61:71:f1:75:50:74:e3:4f:fc:ee:bc:16:2b:ea:39:
         30:56:76:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB/Bh6D2iFLPXDz8gJmF3frfp7rMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMDY0NDAwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjA4YzJhYjBmMTM5NmRmYmRjMzc4MGM5YjUwMTFiNWI5
MmZlNWMxMWYzODk5ZWNiODY0NzNhYTIwZGFiN2E3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8Bgg5jH/LAiZB8jVAA8F5M/H9vh6mOkSdXrLSZhtn+1N3
Rsq2gtuJQGVvYHYSyYY+cRXpb//MVJu9wBflVDwKi+uPMAyrrPbBqAiDxxq/G4Jw
tmR/c8DWDilAIMHWxg++dAt9BwXiY6+JfBZ3jacSASr13vPqL4tGvog28tMDPfDM
ikVS9BJxlQPW1SztuUc7WpEoUq3vfsRrJLLbD3bIEipE+N1caA+2Gn8a84DoVJov
wP99+DKfKZvUAHAP3JnzXhw9e0ckKkIHPUAaojZtng6rIC0NiQ2gxZmz+tuX/xgX
5d2kB3YOEqAL/irBp5L1EWwjWuGqkuLti4n6mJ4/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHL9ZJOqdnQDz9rU7zR4E7rm2jUIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzBlMThjNmY5LTA1ZjItNGFmYS05YTAxLWQxMjM4NmU0OGM0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADolowDQYJKoZIhvcNAQELBQADggEBAHL2KuRrTCknBpWxTaW+wfPVf/S7
AEYgcj8XPl78aWnEG1N34jumeqyR79LyQSKbIm85F46bfRL2S3VSuXrTTr/RSSdA
ijAlBMhWmE+mcwewDc9CDWuV77V9aPkJvyLCRXZawEe3BLbNCg32/YW4BEEEgnoY
Z4myClZAU7ckQTsnzj9n8k1RuRVqwoBQMraGIvdlRLHobvHmciJSsGQh044p2rTZ
yaw45vuTqtmEA0P1LZ3bonRgcEx5Jq2rK/rQUDH9lZz+rwfVz6o/bYtWUG+hNWZP
YMtO6BXSJSSkv5VJiEGfp2DphAXdZyg2D2Fx8XVQdONP/O68FivqOTBWdsY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:48:21 2025 by rpki-client