Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e6e8c-0c14-4da9-b2bb-f79247f37363.roa
File:                     268e6e8c-0c14-4da9-b2bb-f79247f37363.roa (raw, json)
Hash identifier:          pork818+63CddA/rpDX7YzANvyBoahvDMahMB7+vy9s=
Subject key identifier:   14:7F:BA:C5:16:B0:1C:5E:26:8B:36:6C:5C:4A:9A:83:2C:8A:69:91
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2C592204D67E99AA562170D86F184DF433B2D42C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e6e8c-0c14-4da9-b2bb-f79247f37363.roa
Signing time:             Fri 07 Aug 2026 03:31:10 +0000
ROA not before:           Fri 07 Aug 2026 03:31:10 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.200.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:59:22:04:d6:7e:99:aa:56:21:70:d8:6f:18:4d:f4:33:b2:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 03:31:10 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=bafb558162c0d6e36f044bde1dddb7d2c2d805dce92fe431015abc8eda25c95b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:8d:fd:ef:d1:14:41:38:ce:13:96:ba:6c:
                    98:a0:78:bb:d7:36:2d:e9:b9:fd:2e:4e:d3:84:53:
                    cf:96:9c:0a:55:73:c8:44:88:f8:ae:4b:1d:be:2e:
                    fa:8c:c4:75:b1:47:ad:16:b5:1c:f0:91:69:14:ca:
                    97:5a:23:dd:7d:95:50:cf:83:db:dd:16:04:97:84:
                    d2:62:d3:2d:9e:f7:ad:2a:69:c9:f2:8f:b5:17:16:
                    8a:f0:50:eb:82:81:4c:e9:40:66:bc:05:ef:86:8a:
                    18:56:02:47:90:3d:a9:81:b2:33:e6:b0:50:c0:d3:
                    21:04:86:8b:c7:b2:5a:83:9e:d9:ec:ee:7d:99:76:
                    b5:18:38:89:58:f2:5a:98:88:12:28:b6:f9:82:31:
                    a6:43:03:63:4f:9c:02:4f:fa:47:da:cd:a4:70:e3:
                    50:9f:5a:a7:f5:51:a8:03:44:1a:49:75:58:a9:9b:
                    cd:98:35:63:f3:53:23:7d:9f:f0:11:cc:b4:1a:a9:
                    02:f7:bd:1b:ec:1f:ce:21:bc:d1:7b:f7:ae:33:3a:
                    97:f7:fa:85:01:0a:1c:51:d6:1a:00:c7:3f:b6:d1:
                    36:6d:ee:71:e6:09:83:a1:ee:85:f3:d6:4f:73:3a:
                    f5:82:e0:1e:dc:58:24:2e:c8:e8:3b:6c:15:16:b1:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:BA:C5:16:B0:1C:5E:26:8B:36:6C:5C:4A:9A:83:2C:8A:69:91
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/268e6e8c-0c14-4da9-b2bb-f79247f37363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:a9:fe:20:7d:d3:60:ea:68:7b:88:c2:08:b5:b0:4c:0f:
         e0:87:17:3b:91:6c:bf:ce:4d:da:da:58:3d:37:7c:cf:f6:f0:
         d8:09:92:e4:df:02:82:8c:06:8f:10:ed:6d:59:a5:c2:fc:d9:
         d4:d1:b7:5d:e7:87:7a:76:2a:17:57:f7:13:86:c8:9c:36:5e:
         d7:7b:e3:7f:a8:8f:e6:3e:14:28:7c:fa:77:af:95:d0:d4:da:
         84:d4:22:7f:74:68:21:77:d0:7c:cd:84:c7:57:e2:40:73:dd:
         e3:60:a7:7b:07:2a:bb:63:2d:fc:a1:c6:95:ba:56:e2:e2:90:
         cf:5b:58:57:33:92:30:43:b3:85:6f:d8:de:40:e3:ae:8f:2b:
         37:c3:31:fc:eb:8d:56:de:a4:14:77:79:ed:4a:19:fb:48:8b:
         e1:96:ac:26:dc:26:11:38:86:04:5c:ea:9e:f4:1b:ca:8d:96:
         4f:5e:be:81:3d:bc:c6:ca:b5:34:05:7c:b1:29:f0:66:c5:79:
         ef:c6:aa:7b:2d:80:23:2f:09:35:4e:11:b4:8a:a5:16:1d:5f:
         48:7f:8f:bd:88:9f:6d:45:10:2a:24:50:22:48:18:1c:cb:50:
         69:19:35:00:06:9e:1f:94:d3:23:9a:e4:96:33:a4:32:1d:76:
         88:b7:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:39:37 2026 by rpki-client