Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8faf-5855-41e8-b2a2-b8e035dc6748.roa
File:                     ed3e8faf-5855-41e8-b2a2-b8e035dc6748.roa (raw, json)
Hash identifier:          H/OOCaLmU4skMb1TIXwmgQVOH6Bl6fdvdIlofDq882Q=
Subject key identifier:   FA:EA:26:71:9D:C9:FF:AA:A8:87:9A:C8:5D:AE:81:00:F2:AC:E3:72
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5568D0FE428DEB3DC77AE2771ACB6297865983C3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8faf-5855-41e8-b2a2-b8e035dc6748.roa
Signing time:             Thu 25 Sep 2025 17:14:55 +0000
ROA not before:           Thu 25 Sep 2025 17:14:55 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:68:d0:fe:42:8d:eb:3d:c7:7a:e2:77:1a:cb:62:97:86:59:83:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 17:14:55 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=e3eb1af60a5d0a0444d8bff91bd27b32464178970223a93469206f39f140c309, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:77:d7:e0:4b:17:bc:ac:2d:ac:13:83:12:
                    ed:08:e1:2a:81:66:8b:6a:6c:e6:06:5a:9c:c8:18:
                    bd:eb:9d:c4:ab:3f:06:63:14:95:77:14:f3:7a:dc:
                    11:81:5a:fd:a7:79:c9:17:fb:b4:d5:97:27:e7:90:
                    f9:f6:39:99:b6:c8:52:c0:cf:c0:ed:5b:f9:39:0e:
                    07:46:44:1e:ff:26:61:7b:16:e0:67:6f:c0:f6:89:
                    37:ff:3f:1a:17:8b:f8:4c:aa:1b:43:3c:11:48:06:
                    b2:b6:99:36:c8:a2:9c:07:8b:52:27:45:d1:cb:fa:
                    7e:9e:2d:5a:9b:02:57:d9:ea:69:24:e4:41:43:de:
                    7f:3d:74:2b:a4:35:d2:c0:f0:f3:02:95:e3:58:17:
                    ee:38:6d:07:db:37:a9:85:a2:c3:03:6b:92:d8:8a:
                    51:63:61:53:58:7c:a3:de:78:06:72:82:35:97:60:
                    b7:f3:18:b2:cc:1a:4e:fc:99:f0:76:70:07:98:7d:
                    68:9e:59:9e:1a:f2:c1:60:d4:0a:c6:9a:21:13:25:
                    62:a0:54:2b:e2:b1:84:bb:2a:96:54:6f:1a:8a:01:
                    42:2a:38:e3:25:16:d3:9a:a2:ad:cf:bb:60:fe:4e:
                    9e:55:de:0a:b5:18:25:76:1b:f9:03:fe:94:bd:50:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EA:26:71:9D:C9:FF:AA:A8:87:9A:C8:5D:AE:81:00:F2:AC:E3:72
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8faf-5855-41e8-b2a2-b8e035dc6748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:28:3b:ed:66:78:12:f4:1e:42:c2:20:00:05:27:62:59:
         58:b2:9c:06:18:92:88:e1:ce:21:1a:81:7e:a3:aa:f5:c3:08:
         5a:66:33:59:e2:56:59:bc:d0:fe:c5:84:c7:92:91:91:94:3c:
         ee:ce:ab:6f:f9:79:85:0e:60:70:f7:5a:c3:28:68:a1:de:cf:
         0e:47:08:16:24:03:c9:71:36:7b:c9:99:a7:5f:8f:fd:13:3f:
         9c:85:ce:a1:30:b7:b5:bf:83:1a:9e:fa:1f:e0:51:0f:60:8b:
         a4:5d:0f:be:ae:d4:8c:c9:12:87:09:10:29:a1:3e:4e:3f:c5:
         ad:28:6c:20:9d:26:b5:14:89:57:bf:da:a3:73:76:c7:a4:b8:
         87:67:63:dc:27:a6:26:a5:bb:0e:2d:c3:12:ed:79:d6:41:19:
         71:f8:5d:86:97:a9:b1:6d:a5:b0:d9:7a:3f:dd:0f:f5:c2:d6:
         bd:27:1a:a9:eb:a9:a6:5b:fd:c1:c0:06:05:8c:4e:ad:9e:89:
         35:0f:3c:0e:8f:2d:ff:52:73:92:36:0e:a4:e4:c3:eb:14:3d:
         2d:58:ba:43:44:a6:1f:ca:5d:06:10:b4:06:3f:79:61:c2:e6:
         33:c1:ce:c4:64:61:80:e3:bd:55:17:fb:fa:69:73:24:fe:75:
         ed:17:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:08:45 2025 by rpki-client