Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2c26e71-f219-4be9-8ed2-5c9c983aa7fd.roa
File:                     c2c26e71-f219-4be9-8ed2-5c9c983aa7fd.roa (raw, json)
Hash identifier:          3gBiPYZFPKR2cPJ7NzZMibnfy9tLj+ICtLq/v777IIk=
Subject key identifier:   39:D9:66:73:D1:66:B1:9C:51:EF:E7:61:3D:6E:19:6B:F8:95:43:8E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       783394F1423C6D34BD327B2FFB7062BBDA1914AB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2c26e71-f219-4be9-8ed2-5c9c983aa7fd.roa
Signing time:             Thu 25 Sep 2025 21:09:24 +0000
ROA not before:           Thu 25 Sep 2025 21:09:24 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.175.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:33:94:f1:42:3c:6d:34:bd:32:7b:2f:fb:70:62:bb:da:19:14:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 21:09:24 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=367edd2cf17c5af3ea42c5be39d73ebe8d62dab34bb87eb442da07d86d23170c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:2f:2d:cf:dc:a6:87:9e:92:77:dc:98:9e:
                    fb:53:10:35:7f:c0:8c:eb:49:52:ec:a3:ac:a0:46:
                    fc:f2:15:0a:5e:d9:54:5d:f4:90:69:3c:90:c5:4a:
                    b0:51:1a:48:8c:fe:88:5d:03:c2:da:20:ec:26:7b:
                    32:e3:b6:72:7c:dc:fb:11:ee:40:e9:05:71:17:1d:
                    a0:0e:10:a2:68:50:09:30:bb:82:99:b8:05:6b:72:
                    7f:72:ac:75:af:57:a0:9b:15:8c:86:70:35:3f:6d:
                    e1:73:1d:8b:01:0a:ff:9d:69:ac:09:30:1c:18:b5:
                    6d:19:ef:9e:90:34:7d:26:a3:00:18:8d:0c:0e:25:
                    c7:e9:1b:0e:67:3c:ef:01:e6:ae:8f:bf:57:e4:76:
                    99:dc:bd:73:20:c5:7b:34:3e:e6:7e:82:73:3c:bb:
                    fd:d4:41:7d:76:44:ef:59:8c:89:53:0c:a2:e1:b5:
                    10:ea:fb:1d:45:fd:63:ea:04:0f:76:82:b9:88:7f:
                    b0:c7:1c:12:ef:89:09:23:5d:a3:4d:91:54:a8:3a:
                    6b:b7:96:db:f6:d7:56:2e:ea:e8:ba:64:3e:3f:c6:
                    b8:47:0e:a9:61:83:c8:b9:f5:19:b6:b0:fa:b8:ba:
                    9b:34:51:f3:3a:9f:e7:b7:87:a3:6e:e3:d5:87:09:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:66:73:D1:66:B1:9C:51:EF:E7:61:3D:6E:19:6B:F8:95:43:8E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2c26e71-f219-4be9-8ed2-5c9c983aa7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.175.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:e8:ab:fa:45:69:69:46:38:77:17:50:29:7c:bc:31:9a:
         3e:bd:a7:d3:2b:bf:64:3a:e1:36:21:f0:75:28:c8:2f:38:2b:
         a7:40:c5:35:07:52:4f:49:86:b7:8c:8a:23:ad:af:ad:11:6b:
         2e:dc:8c:e7:92:dc:70:3f:a3:84:71:dd:a8:9f:43:40:22:b9:
         68:66:3a:2d:45:3b:b4:60:ab:ac:b3:26:01:c7:75:2a:63:73:
         ae:d6:5e:e0:60:47:1c:b8:7c:ea:7c:b6:70:15:98:07:92:0a:
         d9:e4:d3:58:47:c2:e1:93:5d:09:6c:6f:81:56:2d:fe:38:21:
         d6:58:c4:ed:71:97:aa:42:75:d8:ef:d1:83:72:73:c0:d4:b3:
         ce:cb:78:dc:28:9b:23:b2:07:6e:81:6d:87:1b:dd:8a:72:9a:
         69:13:51:a2:5e:be:a0:df:55:e9:ea:13:de:e3:67:44:63:62:
         37:e6:f6:db:da:0b:13:b3:7a:e2:88:8b:4f:02:05:21:ac:8c:
         69:9b:f5:09:6d:9b:9a:90:a0:3b:5e:e1:cb:20:c3:4e:f2:7d:
         c9:23:e0:3b:2b:b4:b1:5c:ac:6a:f7:bd:4f:d9:7d:b5:f4:21:
         de:dd:86:66:b2:3c:e5:ac:87:57:35:a4:fd:59:56:55:b4:2b:
         ee:56:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:59:15 2025 by rpki-client