Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa
File:                     881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa (raw, json)
Hash identifier:          RRKEmLH/TVnIpteU3x5mSFBjFiSqDr9bX01rdRwlVQ4=
Subject key identifier:   FF:43:19:94:1F:84:26:58:6C:04:0F:E3:8A:6A:58:AD:52:23:09:2A
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       3C2710D2ABAF1A6FA8E29C1519BC67472B05BDB7
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa
Signing time:             Fri 07 Aug 2026 00:50:07 +0000
ROA not before:           Fri 07 Aug 2026 00:50:07 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:10:d2:ab:af:1a:6f:a8:e2:9c:15:19:bc:67:47:2b:05:bd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Aug  7 00:50:07 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=7551fe47bcda884ae8d0ee30871d7d2d1f566e2430c776cbdaa9205500d3e854, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:06:de:46:7d:e2:12:40:cf:b2:15:bb:73:
                    82:40:b0:88:72:06:f6:ed:ac:f6:16:33:12:ff:88:
                    14:df:85:b4:d1:4c:51:da:f8:a8:fe:c7:d5:29:eb:
                    ca:19:22:c0:7b:71:f7:d3:79:7a:5f:cd:6e:c6:4c:
                    b4:37:87:b7:24:e6:f3:2c:73:59:84:d6:f6:a4:2d:
                    83:20:d8:fb:7c:a3:b0:85:8b:c7:38:dd:6e:e2:cb:
                    dd:68:d7:98:b2:c0:7a:4e:2e:51:fd:cd:8f:94:90:
                    37:61:c4:32:49:d3:b4:50:05:a4:f3:2f:c0:c6:46:
                    c9:b0:15:33:e0:ea:e1:f2:dd:da:52:ce:bd:13:08:
                    46:e7:4e:60:5f:e6:ee:ae:96:ed:b2:cc:53:ad:6c:
                    83:12:c7:a1:78:0a:27:26:57:a2:54:ad:59:3f:e3:
                    f9:08:f9:f3:ad:be:da:6d:05:8f:bd:9e:3d:05:20:
                    a7:52:7c:4b:cd:20:d6:dc:0b:59:74:e1:76:97:6b:
                    0b:a1:e7:dd:84:8c:e3:48:35:df:04:82:a7:86:23:
                    0a:f9:59:78:6d:0a:79:3e:4b:26:77:b2:b7:43:52:
                    97:80:13:2b:09:42:25:1f:f6:3a:5d:90:3e:0a:06:
                    d7:b6:00:78:55:05:45:00:ed:fe:4e:29:54:45:1d:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:19:94:1F:84:26:58:6C:04:0F:E3:8A:6A:58:AD:52:23:09:2A
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:55:b0:59:4f:b4:6b:84:b7:8d:7a:9c:66:4f:e9:a7:e4:b7:
         4a:89:91:38:1f:de:57:2e:d4:64:ac:1a:55:a1:15:c4:3b:f1:
         dd:26:d2:ae:77:2d:3d:5d:fa:fd:67:fe:86:e4:6e:dd:be:dc:
         d6:5a:5d:cc:3e:7e:35:78:35:45:0b:37:b5:0e:ef:3c:98:12:
         ce:f3:ab:84:6e:e0:9b:c4:bd:13:6e:65:84:e5:43:58:21:c3:
         d3:aa:47:c0:2a:13:e8:b3:1d:6b:45:95:9a:c6:7a:84:83:d3:
         69:cd:84:bc:4e:82:d2:d4:f2:8e:57:bf:88:08:f8:b0:02:60:
         9e:af:81:81:e1:15:7a:33:ba:67:88:ba:41:bf:54:83:e7:9f:
         6b:ae:d6:83:80:70:64:ad:29:7d:1a:76:d0:26:22:b3:18:d3:
         50:13:97:ed:bc:9e:30:71:b1:57:35:73:e6:11:ac:90:61:dc:
         ee:20:b6:5f:b7:1c:ff:de:a8:0a:9f:e0:99:03:15:66:03:e3:
         82:ac:79:8e:20:09:80:60:37:f6:61:14:86:12:92:e8:98:9a:
         ca:03:23:c5:b8:63:6d:87:9a:5a:99:62:9a:c8:a1:69:de:da:
         c4:cb:36:7f:6b:3f:fd:c6:78:9e:f0:aa:15:0d:4f:71:e5:02:
         26:ae:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:03:51 2026 by rpki-client