Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7ac554-2d17-41e2-a08c-8ed1fc7d57d7.roa
File:                     cc7ac554-2d17-41e2-a08c-8ed1fc7d57d7.roa (raw, json)
Hash identifier:          gvyh6PgxRDHx8kWTFIBTv0Mn8QQv4AmjqMhyiS8bbIY=
Subject key identifier:   06:81:F0:91:9E:46:7C:3A:F7:C6:65:B9:33:0B:F6:19:DE:E1:F8:6B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E6F99F01BC478D12508784D8E02365774D0FBDC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7ac554-2d17-41e2-a08c-8ed1fc7d57d7.roa
Signing time:             Thu 25 Sep 2025 19:42:23 +0000
ROA not before:           Thu 25 Sep 2025 19:42:23 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.169.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6f:99:f0:1b:c4:78:d1:25:08:78:4d:8e:02:36:57:74:d0:fb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 19:42:23 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=87e48ff7eefd74e9ac23eba21ffd7c2cf79fceddd80119d4226b6773d19c8f7b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:a2:7e:94:d2:a4:0d:d6:83:5f:18:5b:56:
                    7d:1f:f8:ae:1c:de:3c:c8:75:0c:32:19:45:75:b9:
                    8c:03:6c:c8:d2:5c:ff:ae:5d:4d:bf:ee:aa:27:c7:
                    c1:ea:96:1d:59:a7:16:2d:50:39:3c:b4:c7:41:df:
                    c5:d0:8d:70:9a:59:46:26:8d:e6:5c:56:c8:64:76:
                    7f:f2:c4:ad:ad:18:53:58:b3:be:f4:56:62:15:ad:
                    8c:b9:8f:21:51:87:d6:d5:ba:68:d3:f2:dc:5b:7c:
                    5b:12:20:ea:92:cf:ed:ec:e2:4a:fa:54:c6:28:23:
                    b0:ac:0c:49:e1:25:a8:45:39:2b:48:87:67:64:f8:
                    3e:ff:c0:cb:d1:48:3f:2f:a7:bf:10:91:0e:ab:63:
                    99:dc:9e:23:73:74:69:66:fb:6e:fc:90:b8:f9:a9:
                    1a:54:6d:58:74:c2:f6:b2:aa:7d:eb:3b:0a:35:f1:
                    68:2d:cb:ee:40:29:23:4f:a1:a2:88:10:6c:c0:b3:
                    b3:69:b1:1f:25:e4:6f:4e:55:9e:cd:0c:b0:36:f5:
                    af:f3:a3:04:07:e2:1d:49:ed:71:59:9f:7d:fd:ae:
                    14:86:59:d0:87:56:48:86:d8:e6:92:c7:ab:79:b3:
                    d7:7e:93:86:0f:7b:0e:ec:65:f7:50:1a:af:78:0f:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:F0:91:9E:46:7C:3A:F7:C6:65:B9:33:0B:F6:19:DE:E1:F8:6B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc7ac554-2d17-41e2-a08c-8ed1fc7d57d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.169.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:db:41:38:86:86:06:0a:24:2c:2d:56:02:6a:19:70:79:b7:
         34:ba:2c:a4:44:78:a3:e6:55:db:57:dd:69:69:b8:a1:f1:41:
         a4:a9:28:55:f9:63:e3:ed:f5:60:38:e9:c1:a0:3e:5a:9f:db:
         da:bc:c3:7c:54:b6:44:52:08:cd:ce:45:54:63:4a:17:bd:d0:
         ff:66:42:81:0d:8b:71:c0:13:b0:1f:71:b5:0a:68:1f:dc:a4:
         9a:f2:c8:f9:ac:ad:9e:5e:09:1c:d4:cb:2e:36:65:19:7c:4f:
         5d:86:1e:4c:1e:41:c5:69:53:62:10:5b:1f:5b:6e:1d:5e:a4:
         09:d9:f6:58:80:ba:d2:b5:62:76:4d:ec:e1:89:79:e9:43:c0:
         d7:16:a4:52:fd:30:0a:a4:23:e1:32:6f:cf:f4:72:bd:8d:3b:
         d7:23:b7:48:47:43:20:37:92:31:2d:d1:dc:e9:a4:85:41:35:
         ff:32:b1:3d:9f:95:79:45:89:58:85:bf:70:2a:7d:ed:33:7a:
         d0:61:82:51:53:f6:12:90:01:0d:eb:c7:f4:b7:a6:63:83:cf:
         dc:7d:38:f6:67:df:24:c0:3f:6b:6f:ea:8d:f8:b9:ff:dd:36:
         e4:98:d0:5c:cb:30:8e:e8:57:8f:60:28:bf:50:e2:2e:7f:43:
         4d:03:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:30:09 2025 by rpki-client