Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0b1d86-0f5f-40e1-ae8f-fbfba7490da6.roa
File:                     fc0b1d86-0f5f-40e1-ae8f-fbfba7490da6.roa (raw, json)
Hash identifier:          H3onzxYxfKt5rz6H/y3XhJ+s/ZBWPLHrxrS/RSAhGUU=
Subject key identifier:   56:90:29:34:69:2A:11:C8:1F:00:B5:66:6C:3E:FB:71:69:7B:77:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       31C5D201137726C418573FFE20F0E4A9538A565A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0b1d86-0f5f-40e1-ae8f-fbfba7490da6.roa
Signing time:             Fri 26 Sep 2025 00:03:08 +0000
ROA not before:           Fri 26 Sep 2025 00:03:08 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.162.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:d2:01:13:77:26:c4:18:57:3f:fe:20:f0:e4:a9:53:8a:56:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 00:03:08 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=248ba1cd68483e5b73217210effa97382fc37eb26e6ec8d512dd4d07ba13bebc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:62:77:64:10:f9:2c:9c:b6:a7:d7:1d:5a:
                    05:c4:83:55:02:11:d0:e9:d1:9c:af:fa:08:23:c7:
                    5d:e6:43:99:0b:c0:f5:55:9c:7a:28:c7:cb:e2:f9:
                    1e:c0:36:24:6b:dc:ab:41:a8:21:02:43:35:3f:5e:
                    29:71:5e:71:ed:b1:47:90:07:d0:50:76:93:f4:ef:
                    aa:ec:25:59:c8:86:b9:6a:f3:c3:8f:37:ac:35:b1:
                    3d:8c:43:15:56:69:de:14:49:9d:4c:99:5a:34:cd:
                    ff:45:26:0b:90:7d:c6:4a:6b:f9:0b:d3:06:24:18:
                    e4:4b:a6:c4:08:c2:21:95:f4:33:51:55:f8:fd:cb:
                    29:ef:ae:0d:a9:91:08:69:40:9a:27:95:4c:9d:11:
                    c6:03:f8:3a:5b:0f:f0:ba:87:02:b9:78:1b:2f:de:
                    a5:d2:2d:e4:b3:47:5b:59:6a:f2:0c:5d:d8:0a:fe:
                    7b:4d:5c:d4:e8:6b:53:24:11:16:4c:54:49:a0:c9:
                    a5:b8:d9:e4:52:ac:7c:5e:49:1b:2d:ed:9b:70:a2:
                    93:77:68:6f:89:92:dd:fa:f6:0a:3b:a3:cb:56:32:
                    f2:96:ef:c2:60:fa:c9:1e:12:3f:2d:96:33:78:e4:
                    d8:02:60:1e:bc:80:17:8c:29:19:c3:a9:2b:67:e2:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:90:29:34:69:2A:11:C8:1F:00:B5:66:6C:3E:FB:71:69:7B:77:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0b1d86-0f5f-40e1-ae8f-fbfba7490da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.162.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:22:ab:1a:08:6d:db:a2:57:41:d7:4f:8b:ce:a9:0f:5a:
         56:aa:a7:2c:05:89:6c:1f:ac:ad:ed:5c:df:10:aa:c8:b7:63:
         fa:9b:f2:a0:48:9e:97:c5:ab:aa:1c:7c:85:bb:98:40:35:fa:
         63:92:7d:6a:4c:07:53:81:7a:2a:8b:de:f7:1a:31:8b:c2:a4:
         60:ee:67:7a:08:bb:b5:ed:6a:f0:04:f5:fc:e9:3b:ef:d7:bb:
         3d:fc:11:96:f8:69:8f:e3:b2:be:eb:e2:be:90:51:28:e5:75:
         6e:6a:87:70:0f:ee:72:0b:9a:bb:9f:db:27:c9:a1:77:30:d3:
         b1:db:50:99:15:af:ec:7a:55:65:0a:28:75:e7:29:05:53:89:
         12:87:2e:a0:46:67:8a:5a:99:a9:3a:ae:e5:01:0f:20:d8:0b:
         a8:b6:e0:8f:da:39:d7:a9:c3:1b:04:9b:07:df:31:0d:97:ca:
         19:80:1b:be:51:e6:c0:29:0f:1f:a1:9d:e7:ee:92:cf:f5:ad:
         e5:a7:c6:94:34:4e:a3:27:95:88:13:a0:8c:33:c8:3f:d4:e0:
         94:83:6a:cb:64:a0:11:d3:30:71:65:dc:d9:f3:e3:21:c3:c4:
         de:57:4b:01:62:ce:32:47:77:22:53:f2:57:70:9e:e9:bc:81:
         68:b9:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:59:49 2025 by rpki-client