Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c937730f-4554-4254-ae8d-94236d362ab8.roa
File:                     c937730f-4554-4254-ae8d-94236d362ab8.roa (raw, json)
Hash identifier:          9TC5JHX9M1eXArdTYkQSNZyE7MZgLunYMrbztUfIhtw=
Subject key identifier:   8A:95:D9:20:EC:75:86:88:16:3E:8B:93:3F:89:70:7E:ED:96:6F:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A1905D1AECC53EDF2C079640997CC2CBED09C95
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c937730f-4554-4254-ae8d-94236d362ab8.roa
Signing time:             Thu 25 Sep 2025 23:37:15 +0000
ROA not before:           Thu 25 Sep 2025 23:37:15 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:19:05:d1:ae:cc:53:ed:f2:c0:79:64:09:97:cc:2c:be:d0:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 23:37:15 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=2c63d8cbd2a834d839012fbef1e01d59050c8fcf04874dad72130d3287be0afb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d3:c6:96:ae:9b:9e:20:ba:6e:76:b8:b9:61:
                    5a:2e:91:34:07:69:cc:72:20:fe:20:54:e4:3d:32:
                    bc:f2:ee:b5:81:1d:db:2a:8f:a5:60:84:dd:3d:06:
                    65:e2:6b:95:3c:67:45:9b:89:4e:fd:d6:d8:89:81:
                    a6:25:2e:10:4c:d2:f7:50:28:88:78:52:26:d9:49:
                    67:55:f4:8b:2e:20:b7:26:c4:28:28:a0:e1:df:5f:
                    8a:68:af:fb:88:bc:c5:6c:6e:d1:46:3e:8b:8f:fc:
                    a2:95:ed:63:e8:51:f6:3f:ee:6a:e4:a8:69:21:ec:
                    1d:9a:75:34:f0:78:1a:b5:87:2a:5b:45:76:2e:d8:
                    29:19:17:7e:9c:44:69:e1:49:fb:7d:87:ff:46:ea:
                    2d:fd:77:6c:a1:71:06:50:a4:87:36:86:40:e2:6a:
                    aa:b6:56:8a:31:33:6b:01:f2:7e:d0:b6:a4:8c:7e:
                    01:ee:d0:d5:bc:f4:97:db:57:7d:7f:6e:00:24:5d:
                    05:d7:10:c6:c4:29:07:27:09:9b:e9:2c:d1:b6:66:
                    20:d3:48:5c:3f:9d:cc:cc:59:81:4f:f6:63:39:8e:
                    9d:80:1e:f8:78:b4:f1:02:c2:59:ae:bd:6d:c7:48:
                    fa:a1:c9:26:84:b9:45:ad:74:45:ba:f1:4e:98:8a:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:D9:20:EC:75:86:88:16:3E:8B:93:3F:89:70:7E:ED:96:6F:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c937730f-4554-4254-ae8d-94236d362ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:64:af:dc:24:df:13:a1:0d:5a:44:de:a3:11:02:27:fe:53:
         46:f9:d3:ed:35:dd:a9:ff:d8:29:0b:a1:62:e6:4f:bb:d9:f1:
         94:97:76:d1:c3:2b:0c:c0:76:f0:d7:7b:e1:b3:65:bf:bb:e8:
         3b:fa:65:2c:42:7e:b8:f4:7a:ff:c1:23:b6:b1:00:e1:c4:4b:
         d2:32:36:a8:2c:0d:92:ed:53:de:17:30:fd:fb:58:84:f8:20:
         01:cd:3a:18:65:ea:fb:58:81:06:f3:f8:41:4d:22:b2:e9:ae:
         27:7c:e6:64:a5:04:a1:ec:62:9c:55:47:80:73:a8:50:5b:4d:
         ff:3c:99:18:d0:38:21:67:01:41:7d:51:ab:e9:93:6a:75:09:
         73:c8:f5:ac:78:2a:88:64:d0:23:a4:ff:0e:66:04:0a:7a:a1:
         47:7c:ff:0c:25:a0:57:f1:6d:9c:dd:77:e2:99:0f:6f:58:db:
         36:37:84:17:6b:d9:a8:39:89:29:af:fb:67:8d:64:42:25:ae:
         3b:06:e6:a9:8a:0c:46:48:1b:d0:fa:9d:19:63:f1:c9:a1:6a:
         c3:65:ab:da:65:3f:af:ee:69:e1:6e:d0:f4:c4:4e:2d:1d:26:
         cb:15:05:e0:49:00:3e:68:af:14:a9:15:80:2e:12:de:a0:b5:
         c6:4d:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:41:54 2025 by rpki-client