Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d77566-f204-42b4-b2e2-f7a8e8157582.roa
File:                     05d77566-f204-42b4-b2e2-f7a8e8157582.roa (raw, json)
Hash identifier:          gUhcUyDHZlTcEw4f/5V/rX2TDjR72zRvLIz5bqdwTRs=
Subject key identifier:   26:9E:7A:A9:EF:5E:E6:13:6E:3B:7F:B5:71:50:47:6A:F1:56:CD:A3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       45DAA70B9033D14960AD478B38C17AE0170082A9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d77566-f204-42b4-b2e2-f7a8e8157582.roa
Signing time:             Thu 15 Oct 2026 02:41:19 +0000
ROA not before:           Thu 15 Oct 2026 02:41:19 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        3.132.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:da:a7:0b:90:33:d1:49:60:ad:47:8b:38:c1:7a:e0:17:00:82:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 02:41:19 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=c4f6580b6918f7d75e9d0fd0f1a44c0a85c7daf3a9933d378729127b6ca22c3f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:0c:8c:63:a6:7b:a7:e8:2a:2a:47:1c:aa:
                    93:a3:03:2f:fd:2e:22:8b:e7:af:8e:78:6e:7e:7f:
                    7b:fe:be:1c:ae:e7:c0:95:4c:39:13:cc:26:91:7e:
                    8e:52:4a:69:f8:5d:00:22:c5:75:c4:6a:d6:66:6b:
                    2b:47:e3:a1:7e:5f:69:f8:51:58:69:22:83:e6:5a:
                    b6:84:64:a1:6d:f3:77:56:fe:da:3a:57:20:de:e4:
                    44:d7:64:dd:a9:e4:04:66:09:bd:ce:31:c9:95:51:
                    a2:07:da:e2:de:04:84:ed:a3:6b:89:f0:c0:8d:98:
                    9c:27:c6:c3:49:b2:19:ac:89:2e:27:21:bb:2d:1b:
                    79:55:0e:b4:29:99:a1:09:18:8e:87:71:1d:b9:33:
                    ac:37:2b:3f:11:18:06:c0:6e:95:55:c9:07:68:1b:
                    fc:94:c1:32:0a:0d:c0:6e:ca:eb:c4:19:ef:68:a4:
                    b9:7a:68:4c:8c:03:57:61:24:4b:b7:ec:7e:3d:66:
                    ac:e2:a3:61:8c:05:44:03:72:ea:23:47:ac:04:a2:
                    47:a3:a5:56:f4:a6:a9:b7:f9:4f:14:78:80:b4:30:
                    60:9a:8d:64:e1:87:62:99:54:80:5a:90:e2:57:5a:
                    33:7d:a9:48:90:37:fd:e0:7d:6e:52:81:72:22:de:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9E:7A:A9:EF:5E:E6:13:6E:3B:7F:B5:71:50:47:6A:F1:56:CD:A3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05d77566-f204-42b4-b2e2-f7a8e8157582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         51:96:fb:7a:6c:6f:99:98:fd:39:fd:fa:f8:6a:6c:6d:0e:83:
         e6:59:0e:a8:7d:b9:20:72:4a:60:89:a3:c1:f0:58:1a:1b:02:
         4f:12:dc:5f:32:f3:6d:77:e6:35:58:9e:ad:b5:9f:37:17:f8:
         f7:c1:10:70:86:32:79:50:bd:20:f3:05:0b:03:d1:d7:21:f5:
         fb:2f:5f:f7:e4:05:fc:96:90:5e:da:ab:06:f3:70:1e:59:17:
         ae:8c:c4:0b:d0:cf:70:1f:7c:1c:3c:f3:0a:77:1b:d2:a0:c8:
         3d:3d:32:90:18:3d:09:2c:c5:d3:5d:9f:5b:a1:66:3c:11:82:
         fa:ea:3f:0f:b5:17:b1:b0:4a:76:0d:e3:ff:a0:31:1d:35:1c:
         63:7b:04:08:7b:27:34:21:df:4b:73:1c:7f:a8:78:f5:1e:a2:
         d4:54:b4:ce:85:7f:d5:3d:24:e7:c4:62:bd:9d:23:18:f7:a4:
         e7:91:b8:9c:4b:d9:c3:74:40:5e:89:d1:c8:db:39:21:5a:ad:
         87:b1:f3:a9:dd:d7:c2:78:76:31:13:5c:3e:30:75:00:ec:3c:
         47:d5:49:a6:c9:50:13:c9:2f:62:c3:d6:91:cb:3e:49:34:fc:
         c5:4b:10:eb:7b:5f:db:9f:d1:df:a2:d8:59:1b:c8:d8:17:6c:
         89:df:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:40 2026 by rpki-client