Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3fe3d5a-e523-42bb-a1ff-cc03cb6f8587.roa
File:                     f3fe3d5a-e523-42bb-a1ff-cc03cb6f8587.roa (raw, json)
Hash identifier:          UkoNCBFTwUKEbrlKlQpCfMblsS+EsE4RMmrFa3PcJ8s=
Subject key identifier:   CC:46:04:A3:00:60:09:D2:41:23:F2:AA:75:4E:F8:88:E8:2A:60:FF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22B78DDDFADC4EA65CE9C4B81024EE58331798C8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3fe3d5a-e523-42bb-a1ff-cc03cb6f8587.roa
Signing time:             Fri 26 Sep 2025 00:07:11 +0000
ROA not before:           Fri 26 Sep 2025 00:07:11 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b7:8d:dd:fa:dc:4e:a6:5c:e9:c4:b8:10:24:ee:58:33:17:98:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:07:11 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=54cb5517fe10d72fb7e7445331171fc3e1b094c35033520e82c85d354427150c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:ae:82:79:22:fc:43:7a:8c:29:ec:a9:6f:
                    cd:c5:2e:36:bf:1d:54:3b:d3:6a:36:d7:dd:ae:85:
                    a0:2f:01:e0:e1:36:fe:09:18:b1:ca:92:c0:3d:35:
                    42:a5:2c:ba:5e:f4:e9:0f:a7:50:53:72:a3:be:f0:
                    ee:1f:c2:b9:d9:80:3e:35:ff:34:90:43:6b:d9:61:
                    61:59:93:ac:d1:5b:ea:70:ed:bf:d0:46:88:a7:73:
                    38:5b:13:09:bd:e6:41:99:67:86:2c:0b:4a:58:1a:
                    96:2e:87:f5:0f:44:f3:3c:7b:b6:74:6f:ff:73:93:
                    9e:a0:e9:fc:b0:89:84:58:c9:da:44:c4:cc:a0:fb:
                    a5:18:d9:f3:fa:01:3e:c0:29:16:81:3e:41:bc:28:
                    b4:fb:6b:63:cb:41:5e:43:b3:9d:1f:68:68:b1:c9:
                    1c:d5:94:ae:c2:2c:69:2f:a0:cd:a9:59:40:f0:9f:
                    2a:f8:f8:33:06:eb:93:45:90:b8:8c:24:31:f7:81:
                    2f:c0:74:9d:f2:4d:07:74:0e:01:fe:b3:b2:e2:bc:
                    72:fb:6c:7f:7c:ea:30:15:71:ab:27:4c:01:19:b3:
                    a2:92:f0:9b:0a:1f:6f:17:86:70:09:11:65:59:f4:
                    e2:9b:ff:c0:47:6a:e9:9c:a2:6a:60:3b:ef:15:7d:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:04:A3:00:60:09:D2:41:23:F2:AA:75:4E:F8:88:E8:2A:60:FF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3fe3d5a-e523-42bb-a1ff-cc03cb6f8587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:b2:e4:66:fc:ca:dd:8f:0d:03:a6:4b:54:b0:c6:1d:e7:
         d2:dd:6d:aa:ae:0d:20:b6:59:4a:1e:66:82:85:9c:cb:d1:9b:
         b3:1f:c3:9d:41:11:70:bb:35:fa:76:a2:70:55:f5:87:ab:8e:
         8f:e1:a9:35:ff:38:7a:12:4c:3d:59:c6:cd:dc:06:2f:a8:80:
         7f:7e:c2:34:46:66:cd:b9:e0:1a:26:41:7e:f2:55:82:5c:90:
         b4:67:23:8e:49:16:13:c4:2c:23:e0:c7:e1:72:5a:e8:c0:ac:
         1a:1f:ee:f2:91:18:89:21:c4:09:62:34:44:f5:8f:85:5f:a6:
         c3:e0:b6:98:2f:d2:9b:d6:2c:65:7a:d0:cc:e7:a4:c5:55:95:
         6a:66:8a:66:87:3f:6d:7e:e5:7e:3e:e6:c6:7e:b7:88:f3:af:
         6e:b6:7d:3c:ad:29:ee:a4:ce:a6:ce:c7:55:59:9d:8a:0b:6c:
         76:0c:82:d7:08:dd:1f:3f:d5:df:ff:6e:ca:6d:07:75:53:a2:
         b4:58:08:ac:5a:1e:9d:46:6c:7a:c2:11:06:b5:c7:9b:84:65:
         f2:09:dc:d7:63:62:f7:91:1f:ed:2c:64:70:a7:c7:f8:91:7e:
         ac:4d:2a:7d:99:5f:80:b3:30:a5:12:b0:a5:d2:db:f3:1a:0d:
         19:e1:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:30 2025 by rpki-client