Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed9e4c1c-bbbc-452d-96ed-5e68aca94622.roa
File:                     ed9e4c1c-bbbc-452d-96ed-5e68aca94622.roa (raw, json)
Hash identifier:          f82MY8ka+2dxtgUq4K0MBJf00RIMZi1xH+ecF8wXO3M=
Subject key identifier:   51:DA:1C:08:19:11:1F:CB:4B:1A:8B:9F:11:29:CD:E3:18:40:03:EC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       101747D52495DBBF511D958A5731C6E3C31F0ADF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed9e4c1c-bbbc-452d-96ed-5e68aca94622.roa
Signing time:             Thu 25 Sep 2025 19:18:17 +0000
ROA not before:           Thu 25 Sep 2025 19:18:17 +0000
ROA not after:            Thu 30 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.168.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:17:47:d5:24:95:db:bf:51:1d:95:8a:57:31:c6:e3:c3:1f:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 25 19:18:17 2025 GMT
            Not After : Oct 30 23:59:59 2025 GMT
        Subject: serialNumber=360c4e3ba3d48cb4886c83309c6eb799b4239d8a853146ef6a92a7eb41c3e846, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:79:01:fa:b9:42:44:a1:04:b6:ce:8d:b2:
                    5c:15:06:35:bd:2b:79:65:d7:37:ee:98:47:f6:7a:
                    dd:16:29:73:00:55:63:20:1f:a6:fb:d8:75:83:9b:
                    f1:6c:a4:b6:fc:b3:ac:75:85:51:3e:bd:70:93:e1:
                    ac:ee:4a:69:41:18:26:af:e8:1b:b2:50:13:3e:82:
                    ec:cd:df:01:2e:ba:b2:df:06:5e:b2:ce:6c:a1:c1:
                    ab:6b:2a:32:fd:06:f5:4f:ef:bc:6f:2b:8b:3c:c9:
                    51:28:49:5b:ae:d0:55:d1:9d:3a:48:4a:10:d9:ce:
                    ea:eb:30:84:a1:26:24:4e:76:80:0b:ae:d2:6c:24:
                    6f:5e:25:c1:78:b4:41:21:54:13:e5:68:25:8d:9f:
                    e6:ab:82:6d:fc:79:69:8a:78:b6:d0:05:ad:88:5a:
                    b7:c5:77:41:c7:56:18:b9:87:97:15:da:a8:71:11:
                    00:95:49:1f:fb:6b:31:ab:c0:24:02:59:37:c9:c2:
                    6a:60:52:fd:52:00:48:1e:4d:00:aa:6d:d5:7c:65:
                    42:bc:12:60:04:27:24:ae:4d:01:48:f3:b4:34:93:
                    cd:1a:d8:ea:3b:09:c3:77:fd:1c:b1:ea:78:e9:3a:
                    a2:21:e9:41:c4:a3:6d:6f:81:c8:42:99:f2:81:95:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:1C:08:19:11:1F:CB:4B:1A:8B:9F:11:29:CD:E3:18:40:03:EC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed9e4c1c-bbbc-452d-96ed-5e68aca94622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.168.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:18:29:07:86:72:05:3c:12:09:01:53:8d:0d:e0:72:24:1c:
         58:48:48:0d:8e:9f:0b:11:7f:f7:02:4d:76:18:46:17:70:22:
         ab:20:b4:d1:a2:75:3c:cd:82:ad:29:a8:f0:f4:ca:90:9b:dc:
         a4:21:b4:b8:94:ab:c8:6c:0e:14:c3:b6:3d:73:a7:b4:51:c3:
         15:fc:25:eb:b4:f4:c5:cc:91:28:30:ce:4a:e4:f6:e1:3b:b2:
         dd:67:3d:d1:af:9c:2e:b3:66:16:0f:b9:88:4a:63:fa:88:af:
         06:19:2a:d8:1e:46:35:9b:bc:10:b1:92:ae:5b:20:c7:f5:df:
         49:33:eb:ea:bc:ae:10:ae:5b:7f:44:41:c8:41:a9:73:55:87:
         a4:50:17:04:43:6c:a5:33:9d:b7:96:ac:0c:98:b5:f6:86:f2:
         9c:02:cf:76:ea:1a:8d:7e:cd:95:48:41:ef:f7:74:d7:0e:ea:
         32:c2:75:96:24:62:c7:cb:b4:5b:27:1f:41:82:0e:56:99:e4:
         a1:71:e3:41:db:ea:0c:92:7d:82:55:22:df:a3:c0:c0:4a:74:
         18:7b:d4:b5:36:e1:67:24:49:36:db:32:71:c6:c4:ae:a7:10:
         7c:0f:48:2c:4e:a9:35:b6:43:da:84:16:9b:77:26:c7:00:55:
         d6:6e:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:36 2025 by rpki-client