Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0eed22e-ccdf-4fb8-970f-ed606862b3e0.roa
File:                     e0eed22e-ccdf-4fb8-970f-ed606862b3e0.roa (raw, json)
Hash identifier:          W4RjLdAkKeKeZ0mTdmmLMupNVW8zj+0E1tzLpTagrxQ=
Subject key identifier:   5B:3E:A8:4C:E6:D5:C5:C6:DC:8B:46:F6:52:81:61:E1:AE:91:67:A7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       137FC7E8CCBFA7C61AD22BD47177E7C24BE853ED
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0eed22e-ccdf-4fb8-970f-ed606862b3e0.roa
Signing time:             Thu 25 Sep 2025 18:45:30 +0000
ROA not before:           Thu 25 Sep 2025 18:45:30 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.166.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7f:c7:e8:cc:bf:a7:c6:1a:d2:2b:d4:71:77:e7:c2:4b:e8:53:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 18:45:30 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=efb7ed2f134e5a26a85fce382dac50c517ea440fa331a21954b03892e06b95bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:8e:eb:21:94:06:ce:95:bc:d5:98:5f:25:
                    c3:cf:93:15:03:15:3d:fa:2f:42:93:45:ac:96:a2:
                    a5:ff:36:9e:84:06:be:4f:0a:e4:d8:3c:28:70:b7:
                    2c:9d:8e:aa:66:38:6b:d6:c5:12:e1:5b:58:18:f4:
                    f2:4d:83:81:dd:66:b2:fd:00:31:51:eb:8a:62:8e:
                    5d:2d:57:99:ca:64:ef:20:4c:f4:dd:4e:2d:25:4e:
                    b0:04:f1:73:e6:f3:df:9b:4c:bf:2f:02:51:66:d0:
                    db:f2:d8:50:4d:b3:55:df:4e:e9:5e:a0:df:5a:2d:
                    c7:85:99:f6:12:df:19:4d:3c:2a:3f:74:e2:f4:5f:
                    9a:4f:94:d6:e5:39:ed:f5:0f:97:a9:e0:27:72:a5:
                    a7:d0:c8:c9:94:09:42:3d:88:ae:79:6c:6b:7e:96:
                    52:38:b2:1e:6c:9c:0d:e1:de:b6:00:fa:04:1e:fd:
                    8a:e2:ff:c6:49:16:d9:ba:bc:23:be:2b:16:b0:de:
                    2b:a0:6d:1c:dd:9b:b3:37:5a:e8:21:26:30:be:2d:
                    c5:eb:68:fe:7a:6c:05:c3:9b:fd:54:5f:88:64:8f:
                    e9:29:af:ec:f2:b8:82:01:81:0e:ba:3a:ca:28:9f:
                    82:68:2b:5d:ce:c1:50:79:05:c3:65:ef:0d:14:aa:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:A8:4C:E6:D5:C5:C6:DC:8B:46:F6:52:81:61:E1:AE:91:67:A7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0eed22e-ccdf-4fb8-970f-ed606862b3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.166.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:3b:e2:35:7a:a6:d5:b1:8e:07:d5:e2:3e:64:8c:f4:b3:
         73:77:ef:4a:24:25:14:47:f6:d1:19:a2:e6:36:dd:33:4c:ea:
         c9:d2:b3:29:ba:33:57:1e:3c:ac:8a:ca:f9:16:3e:16:2f:58:
         4d:87:a2:2a:5a:b9:d9:9f:76:0b:18:05:b8:1a:83:af:8c:7b:
         53:3c:4c:98:db:61:27:7b:8f:a2:2c:e6:48:f1:7b:76:1f:b5:
         bd:e3:d9:47:11:45:5e:d9:2b:ba:09:bb:fa:e4:44:52:64:9a:
         95:40:e5:bc:40:18:86:8c:f3:05:c5:4f:1f:0d:32:7f:17:cb:
         52:d0:69:73:54:2d:af:d5:e9:eb:75:0f:fc:ac:2f:d1:64:70:
         5b:e2:69:4a:74:c3:20:22:30:34:27:3a:8d:14:4a:f6:2e:59:
         07:3a:66:82:57:9d:49:31:35:9e:b0:00:31:2a:8d:19:4b:f8:
         94:4d:02:f9:dc:59:bf:17:7f:51:fa:2c:44:45:ba:fc:1e:c6:
         96:58:82:da:5e:d4:f3:a8:c5:61:20:32:ea:ea:41:1d:54:7d:
         f6:d5:09:90:07:19:43:8a:57:62:41:73:d1:21:d0:a4:7d:f3:
         c2:79:ce:51:44:a5:9d:c6:95:48:b1:93:06:d9:57:03:ce:dd:
         be:bb:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:48:31 2025 by rpki-client