Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c388ef-d5ce-46a0-844f-a622c70eb28b.roa
File:                     57c388ef-d5ce-46a0-844f-a622c70eb28b.roa (raw, json)
Hash identifier:          s74daDl52ohwrJYtqlG6duAnvBjuCrYpD6SCUkm3rzQ=
Subject key identifier:   11:8F:4E:4B:00:A8:80:9C:E4:65:75:26:4E:FD:EA:A4:85:95:EE:FB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       334BDCF377BFD945D7FEF683B0DEBE12F8E5FF45
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c388ef-d5ce-46a0-844f-a622c70eb28b.roa
Signing time:             Tue 04 Nov 2025 01:20:10 +0000
ROA not before:           Tue 04 Nov 2025 01:20:10 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.83.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4b:dc:f3:77:bf:d9:45:d7:fe:f6:83:b0:de:be:12:f8:e5:ff:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 01:20:10 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=57caa24281eeff13fc0513ea43a1249b460eeffebea61da6782b956d98275e1e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:b4:02:80:20:18:3b:ee:f6:12:43:5c:34:
                    6f:e2:7f:33:48:d4:9c:ac:02:06:7b:ab:fe:80:ad:
                    3d:de:da:d7:b6:92:20:ad:88:f0:ca:7a:85:e5:d2:
                    3a:e5:c4:59:80:b6:24:70:9f:b5:96:0c:b3:27:00:
                    d0:1d:fa:c5:f3:15:4f:25:3b:47:35:ad:02:52:02:
                    65:e3:fe:a3:76:2e:fa:38:e2:1c:58:31:07:13:f8:
                    d1:8d:2e:81:97:c9:68:a3:9a:93:d0:b8:bf:fd:2d:
                    00:55:ca:92:4c:d7:05:b5:29:b9:62:78:d3:f2:9e:
                    25:80:47:8f:bf:80:75:fa:56:40:b5:dd:90:0a:80:
                    c8:38:14:c3:31:56:b9:d6:32:2b:13:8a:70:29:5b:
                    1e:de:a8:91:59:37:ed:5a:bd:a3:04:77:e6:01:8a:
                    e3:a4:88:5c:96:b7:4a:72:f0:4f:9e:2a:10:5e:fb:
                    9d:68:e4:f7:17:45:af:9a:bd:10:b7:6e:b6:b3:ac:
                    b2:16:3c:93:c2:45:41:d2:54:93:d5:99:3b:33:01:
                    f2:81:8a:31:f1:c9:f4:53:a9:d7:5c:5e:1e:03:db:
                    c8:2e:63:65:b9:92:a7:e9:e9:b2:b5:a7:80:02:f6:
                    b5:ef:47:aa:14:73:2e:9b:05:8a:e5:ee:ad:87:65:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:4E:4B:00:A8:80:9C:E4:65:75:26:4E:FD:EA:A4:85:95:EE:FB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57c388ef-d5ce-46a0-844f-a622c70eb28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.83.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:c7:df:37:d9:9a:68:60:68:08:36:ba:2f:24:c0:82:e4:
         cc:3a:83:eb:0e:a8:01:3f:dd:bc:c6:8b:0a:c3:91:a1:1d:fd:
         a3:9b:de:21:5e:fe:aa:22:b8:11:26:f8:17:76:f8:ef:d5:03:
         9c:4d:6e:31:30:f1:f3:79:f1:cc:95:d2:77:86:fb:dc:d2:3f:
         43:65:d6:ed:58:38:df:5c:91:73:ae:31:58:2e:c1:d9:83:c4:
         ba:21:b4:36:49:ec:1e:4f:89:96:2e:96:eb:15:5b:5e:25:73:
         67:a6:25:9f:2b:47:c0:3e:ba:92:31:36:d3:d2:87:5d:7b:01:
         d3:12:0d:7c:8b:5b:3d:34:8e:cc:18:97:6d:43:29:3b:c4:f7:
         49:fb:24:e3:f1:fb:6f:b0:e0:da:d3:a7:e0:06:f6:5c:d4:87:
         88:19:eb:fe:de:2e:59:ad:fc:da:b7:50:0c:f2:26:89:18:4d:
         2f:ff:66:bd:09:1c:21:1d:6d:8e:94:86:71:6f:27:bc:38:0e:
         94:99:f0:a7:3f:7f:9e:55:26:f5:27:1a:38:32:3c:53:42:d8:
         43:23:41:5b:89:ef:c0:b8:32:d2:7c:8e:31:05:42:48:6e:7f:
         27:a3:1b:cc:7f:53:b1:01:6e:3d:66:26:07:36:3a:38:0e:64:
         5e:cd:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:15 2025 by rpki-client