Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa
File:                     37fd8900-a007-4426-b74b-1c213c31c48b.roa (raw, json)
Hash identifier:          1l1pveOl6LSoimr4vbhlxuo27tSZsjLogT3B2q6ooqc=
Subject key identifier:   9D:C2:FE:C5:DA:F1:F4:63:7E:37:BA:DB:B0:E8:1A:C3:37:D8:21:3C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7ED9C60C37C9645C3609F6B6BAD034C22FE2D1F9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa
Signing time:             Sat 28 Feb 2026 03:21:08 +0000
ROA not before:           Sat 28 Feb 2026 03:21:08 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d9:c6:0c:37:c9:64:5c:36:09:f6:b6:ba:d0:34:c2:2f:e2:d1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 03:21:08 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=04df48e5ab7a5a06266dbb4800bf2834e06ffcaf588d7ab0b95fd2d02f38c6a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:60:ad:76:dc:c7:c7:c6:e1:43:5f:6d:f6:
                    d8:11:b8:21:73:13:71:1d:41:ff:52:2f:19:a4:44:
                    3d:bc:ac:d4:ba:3f:7d:34:0e:32:c0:f9:95:87:72:
                    ae:68:d3:48:15:c1:d4:7d:3a:9c:19:f5:04:36:b6:
                    95:41:6c:2a:9f:e1:da:44:ef:53:b1:d0:82:85:54:
                    d9:e2:2f:9d:5e:c4:19:90:9e:2e:2f:05:47:98:2f:
                    b5:a0:08:20:63:04:98:82:e5:c7:d4:eb:17:e9:59:
                    81:5d:ca:8a:26:ef:61:b4:7b:55:8e:2d:fe:27:a1:
                    e0:b9:6a:32:65:49:31:26:be:eb:9c:98:18:97:97:
                    89:e7:d7:7e:c3:29:6e:ec:96:c6:d4:46:26:61:06:
                    0d:6c:b3:66:0b:a4:c6:7d:6d:af:f7:ac:fa:90:65:
                    86:0b:f1:d9:36:73:ce:3d:90:42:56:08:7e:c5:f8:
                    8a:8a:73:81:c7:50:a3:05:38:aa:26:94:fe:12:ff:
                    f3:02:1b:1e:74:3f:27:93:24:e2:91:83:33:2e:12:
                    d6:5b:a8:95:2c:f4:99:8d:4a:4f:8b:03:44:76:11:
                    f0:55:72:c3:c3:7b:40:d5:62:66:e1:8a:28:6b:8b:
                    93:34:30:6e:60:c6:95:27:63:3a:76:fb:83:25:ea:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:FE:C5:DA:F1:F4:63:7E:37:BA:DB:B0:E8:1A:C3:37:D8:21:3C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37fd8900-a007-4426-b74b-1c213c31c48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:bf:0f:a1:1f:34:2c:dc:56:52:31:2c:30:1e:30:c4:e2:
         89:62:e1:39:68:16:3e:25:54:40:45:1e:20:cc:a7:f3:99:2c:
         72:cc:e8:b8:bc:70:15:83:c6:94:72:84:4a:09:29:c4:0c:a5:
         eb:9b:b1:9c:b2:75:bf:4e:2b:9c:33:97:8b:98:bd:bc:29:8b:
         51:cf:47:dd:73:3e:a2:3d:f9:a1:b3:a5:ee:e4:a2:dc:93:fb:
         ef:8a:b2:ee:87:7d:89:4c:d8:d6:cb:ea:bc:a4:d0:ab:25:aa:
         cd:03:f4:16:e4:35:e4:6c:06:3a:0c:33:10:76:35:70:1b:85:
         76:89:b4:9e:d2:8a:be:e5:9b:92:b8:38:02:04:c0:e9:1e:da:
         cf:82:e3:ce:b4:99:9b:10:a1:9b:a6:ac:1c:11:27:3d:71:71:
         d4:bd:8e:48:ce:c6:88:77:4e:3e:49:16:64:10:c3:b8:b3:97:
         ba:32:fe:2f:21:fc:4f:a1:f8:c3:78:f4:70:d3:a7:87:e3:d8:
         17:99:76:39:fb:4f:2d:58:c4:d9:31:96:e4:be:d1:84:13:50:
         cc:2d:ec:98:03:1a:02:86:0f:79:db:59:13:aa:48:bf:59:f8:
         9b:1e:5a:80:32:2e:74:bd:8b:c1:92:19:0c:94:ce:3d:b4:ec:
         cc:cf:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:25 2026 by rpki-client