Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46e5694f-b908-4d2d-84f9-6cf9fbe8bf05.roa
File:                     46e5694f-b908-4d2d-84f9-6cf9fbe8bf05.roa (raw, json)
Hash identifier:          ogWN/dY6V2t3xIub4FPHrm+wOtxwaM2iDZJ5ARzSTYM=
Subject key identifier:   C5:85:C1:F1:52:9D:9D:A8:90:E0:73:8A:5D:05:38:E8:23:49:C8:85
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7C18C8B02792377594565781FEC0C746A6490252
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46e5694f-b908-4d2d-84f9-6cf9fbe8bf05.roa
Signing time:             Fri 31 Oct 2025 01:20:15 +0000
ROA not before:           Fri 31 Oct 2025 01:20:15 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.2.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:c8:b0:27:92:37:75:94:56:57:81:fe:c0:c7:46:a6:49:02:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 31 01:20:15 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9dd69465b7e287ff97a05c138685e69e894119465d357586497a118d68ce40e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:0c:23:e5:52:b6:74:5b:e7:56:10:15:b0:
                    30:8e:cd:b9:41:cf:12:99:c4:69:8f:b2:ef:b9:aa:
                    42:f3:2c:e1:7c:c4:f7:6a:9f:ce:f9:6c:35:a4:32:
                    bb:55:18:35:79:a8:5e:60:4a:24:e1:20:5a:a0:a2:
                    dc:3f:75:18:05:a6:cd:b0:06:3c:69:5a:ce:66:3f:
                    9e:a9:40:c7:1b:cf:13:17:c3:98:92:63:94:4e:74:
                    26:de:77:93:d8:76:66:31:8c:5f:37:5c:7f:5d:7c:
                    c3:05:75:28:72:2c:fd:79:d7:f9:33:4f:1d:01:c1:
                    a4:e6:6e:25:ee:97:23:48:92:3d:e9:26:48:f9:a4:
                    6c:61:54:20:9e:8f:65:b9:e3:5b:63:f8:2b:42:c3:
                    ef:9f:a7:d0:7b:09:dd:d7:40:fd:49:b2:d4:02:32:
                    d9:f4:d4:60:9b:be:1d:ce:22:06:5b:8a:02:e6:d4:
                    33:d0:71:55:f2:ab:c3:c5:bd:42:66:0e:31:5f:8a:
                    6e:9b:3a:57:ad:3b:f3:28:9b:c0:54:38:1f:01:88:
                    d6:15:55:f8:0d:3f:94:3f:bb:77:d4:ce:79:d1:98:
                    46:82:65:0b:2b:df:65:1f:3c:b7:7a:1f:ea:81:fe:
                    f6:70:57:e6:a6:c7:e5:ca:ed:7b:2a:cc:28:c4:18:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:85:C1:F1:52:9D:9D:A8:90:E0:73:8A:5D:05:38:E8:23:49:C8:85
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46e5694f-b908-4d2d-84f9-6cf9fbe8bf05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:2d:c7:d3:34:c9:89:95:d3:8b:08:a4:22:6a:77:b8:8b:
         92:59:6a:61:2a:81:0f:63:1f:bd:1a:fd:86:3d:e1:50:1e:ad:
         ad:ba:51:a8:35:c4:44:ec:6b:e3:a7:d5:a8:96:08:18:9c:e5:
         cb:05:41:78:7f:fc:9b:a7:ba:e1:a3:5c:1d:d1:47:7a:c6:bc:
         cc:fe:21:0f:cc:14:12:d3:74:3f:ae:c5:e9:c4:06:c2:c9:df:
         19:da:1b:31:d1:a1:51:aa:b2:cf:5b:eb:99:e2:1d:76:1a:bd:
         2b:0a:87:38:d8:33:91:48:62:31:8b:47:87:cf:f6:2d:eb:4b:
         70:f5:9d:ff:b1:0f:2e:af:ba:eb:ba:79:e9:21:a3:ff:88:95:
         79:33:a1:a8:c5:6f:8c:92:49:06:b9:f3:32:ea:5a:92:2c:2f:
         66:b0:3e:75:70:6a:26:0d:53:40:40:bf:17:0f:9b:59:c8:95:
         0f:e5:05:d5:5f:cf:a6:c0:70:fc:87:5a:df:b9:a1:d3:71:7a:
         95:c4:67:40:c0:5c:18:1c:9c:12:01:4b:b9:14:11:68:6b:27:
         3d:1b:10:5f:1a:2e:47:72:f3:f1:bf:62:a5:70:37:d6:e5:a7:
         50:c2:da:db:52:36:b1:f8:5b:2d:ae:ff:5e:51:3f:0a:a6:eb:
         3a:02:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:42:31 2025 by rpki-client