Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6aee2b1-d180-4eb8-b164-6bb80cc834df.roa
File:                     a6aee2b1-d180-4eb8-b164-6bb80cc834df.roa (raw, json)
Hash identifier:          Dcof1WT9Lq/1rdxiI48/AJTBwc8LEI1wNjGklcGrI9Q=
Subject key identifier:   EA:75:4D:B8:78:68:60:0D:A7:59:51:FF:6C:0C:D6:CC:6E:EC:B1:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       47B03731867EB77F1282F21E6E4E40D4C459AAB4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6aee2b1-d180-4eb8-b164-6bb80cc834df.roa
Signing time:             Tue 21 Oct 2025 10:40:09 +0000
ROA not before:           Tue 21 Oct 2025 10:40:09 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.167.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:37:31:86:7e:b7:7f:12:82:f2:1e:6e:4e:40:d4:c4:59:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 10:40:09 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=9c22a259283549e20dcca24dc00c83c10544eb19f11d8c14cc9f1d91d5e25bc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:40:b9:e5:0f:da:c3:05:c3:25:44:6a:3c:
                    0b:b3:51:b3:8c:e9:82:20:6c:e7:6b:aa:3e:16:be:
                    cf:cf:e2:fc:ea:96:0f:51:46:bc:5e:d1:b5:6f:51:
                    82:8a:60:e6:c9:4d:6f:d8:50:24:84:15:04:b0:57:
                    a4:83:3d:3f:fd:48:f1:3a:e6:1b:dd:58:6f:8e:23:
                    7d:fd:7d:ba:03:2d:2a:01:c3:08:bb:5f:7e:50:c0:
                    9a:5b:01:59:02:44:61:5c:b9:a6:b1:df:24:bc:3f:
                    a5:e4:17:5c:93:40:6d:e6:b0:58:17:33:20:95:47:
                    c9:4d:21:e5:a0:15:ff:4a:32:b1:72:ea:8f:32:08:
                    9a:85:8c:1a:6d:78:c3:89:02:09:c8:3b:27:aa:e5:
                    ba:c7:53:5a:36:e6:c3:50:14:38:cf:bd:8b:2f:5e:
                    79:3d:01:f0:00:4c:b9:e3:5e:bc:0b:ab:7e:19:a2:
                    fa:d0:d2:00:2e:18:cc:97:7d:a5:88:11:d9:0f:85:
                    e9:8c:e2:54:21:28:7f:91:1f:49:af:f9:f2:15:89:
                    76:1e:04:e5:60:49:31:37:c5:47:fa:f3:1d:a9:2b:
                    25:13:21:21:10:73:92:2e:d1:29:8f:4e:26:cd:6e:
                    19:d1:9e:b3:83:82:5a:b0:98:74:80:1c:0a:fd:ac:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:4D:B8:78:68:60:0D:A7:59:51:FF:6C:0C:D6:CC:6E:EC:B1:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6aee2b1-d180-4eb8-b164-6bb80cc834df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.167.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:6b:a1:f5:d4:50:c5:22:2b:01:56:47:22:ce:45:06:af:
         2d:d0:46:9d:a6:0a:6a:93:17:90:30:9e:69:ee:58:79:1d:1f:
         62:fc:01:7a:55:d6:c7:ae:b9:a8:8a:e0:e7:7d:04:c1:93:2a:
         d9:9d:a2:1b:4a:5d:dd:01:e0:a0:21:5a:6d:86:f0:63:8a:4a:
         93:ea:cd:95:a8:80:83:56:ce:85:14:f7:d0:62:f4:ec:56:7d:
         ca:dc:54:8c:c5:69:12:9b:5f:94:e2:57:70:ac:08:d3:85:4d:
         20:1e:2c:5e:9c:43:b9:82:89:73:fc:52:f2:6c:a5:56:4a:6e:
         24:af:88:d8:6f:c5:85:e8:45:63:68:e3:47:bf:b9:45:6d:1f:
         2c:47:d9:3c:8d:21:eb:37:66:52:e3:63:a5:0a:4a:ba:c5:e5:
         78:d6:39:cb:6a:3a:0f:7a:0d:ec:01:b2:3c:01:76:a7:29:42:
         81:a4:3c:ae:5f:8a:8a:84:61:c2:02:8e:17:8c:1d:21:2d:06:
         75:9a:c4:ae:8b:d6:bc:e3:e1:04:5c:bf:40:e8:57:70:23:09:
         98:3b:03:45:c5:4a:ec:fd:cd:05:9d:17:0d:b2:d0:8d:76:6e:
         24:7e:78:d8:6d:80:a8:9d:3e:27:85:64:38:f9:27:33:5d:db:
         53:ee:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:05:54 2025 by rpki-client