Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
File:                     393be035-f403-42bb-8667-f8b643af501c.roa (raw, json)
Hash identifier:          0AfXnSSo0i7C3wPdnj/2q4sJCFwX17ZBHpShp5Qeu8s=
Subject key identifier:   15:47:AF:81:FE:A5:20:90:61:F3:ED:F2:5E:F5:C3:C1:F8:AC:3F:C4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       738A289E308007200B29C14EF8E10DA1AD98864D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
Signing time:             Mon 03 Aug 2026 03:31:13 +0000
ROA not before:           Mon 03 Aug 2026 03:31:13 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.226.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:28:9e:30:80:07:20:0b:29:c1:4e:f8:e1:0d:a1:ad:98:86:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:31:13 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=a427b2c6470fa96a60fbcfba6417f333ca13377c525939ca11853d90bb23d22e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:13:cf:d0:d1:72:c6:c1:be:3a:35:88:f0:
                    ed:08:41:ab:30:f8:05:6d:87:48:6a:57:98:47:9a:
                    39:c9:24:aa:db:de:d5:99:80:c7:d7:bb:b7:b3:cd:
                    20:ad:39:ab:8e:95:cc:b5:bd:98:7d:73:60:f8:69:
                    9f:18:ca:cb:21:71:19:cc:c1:4e:5f:b4:06:8f:28:
                    fc:23:bc:8d:37:bf:01:1f:f1:44:a7:30:9c:5d:a8:
                    10:56:05:72:53:d0:f4:f5:3a:04:aa:fe:a7:96:11:
                    90:d5:ab:05:ae:d3:08:6c:8e:f0:24:92:60:88:a9:
                    b5:d3:07:c1:fd:e7:be:22:d3:6e:9b:58:36:e4:1a:
                    fc:63:63:dd:a6:6d:56:cb:e4:a4:65:63:99:91:34:
                    de:82:32:bd:5b:ae:5b:60:53:5d:f7:cb:89:07:b7:
                    eb:15:15:c6:e6:bc:d4:64:a3:64:4d:3c:d1:3c:0f:
                    1a:f5:6e:3d:22:a1:d4:b5:4a:04:77:7a:a2:93:ca:
                    6e:1c:65:c0:5e:dc:7b:5d:a8:92:3d:8d:26:6a:87:
                    5a:83:b5:4f:d0:b9:ff:fe:f0:14:23:00:90:b0:b0:
                    3a:28:10:00:1b:ff:db:de:e1:d4:ad:cb:74:f9:a4:
                    80:cf:9c:b9:4f:c2:77:2a:06:21:88:a7:04:3e:e2:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:47:AF:81:FE:A5:20:90:61:F3:ED:F2:5E:F5:C3:C1:F8:AC:3F:C4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:1d:d8:42:36:b4:2a:12:9c:13:af:70:4b:a9:79:3f:4f:
         5a:0b:f3:5f:fc:24:ad:19:27:40:f9:46:a7:16:8a:4b:46:ed:
         ff:57:24:68:a8:48:36:0b:d5:bf:14:a2:74:e0:b1:71:06:0c:
         1d:d0:5a:26:b1:9a:09:76:09:9b:e6:a2:0e:93:1a:2f:34:d1:
         c9:ea:c2:16:8e:02:65:22:32:bd:7e:16:73:ef:2d:c8:fe:b2:
         9b:21:bf:0c:20:c4:c2:f6:2f:ab:e8:15:18:f3:73:a0:df:e1:
         28:93:a4:ad:a6:15:93:96:a6:00:05:ad:bd:70:85:a9:a1:04:
         ec:12:6d:00:40:d2:91:66:52:bb:d3:9a:67:b7:cb:74:84:b1:
         bd:bc:a4:ff:24:e1:9e:11:f0:e6:f9:06:8f:1f:5f:e2:61:88:
         eb:4a:93:03:6b:2f:c0:ff:73:55:4a:e5:4d:a0:b3:e2:e8:78:
         d0:0e:d2:9b:34:d9:f1:1b:0f:5a:9c:2b:78:df:72:9b:e9:82:
         66:b8:65:c6:86:46:ab:50:ea:47:ef:13:e5:3b:fc:0f:bb:df:
         17:f0:eb:ea:bf:9d:91:4b:f4:88:b1:d0:76:8a:9a:f2:14:b4:
         dd:e9:55:61:ad:87:b6:2d:8b:60:12:bb:43:2f:a3:8a:53:40:
         a2:9e:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:03:30 2026 by rpki-client