Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/433c220e-9fa7-4ee4-94a2-6bca9635183b.roa
File:                     433c220e-9fa7-4ee4-94a2-6bca9635183b.roa (raw, json)
Hash identifier:          YeD00o2jzHrWebhrYByVZTdqd2ubQjO/wfT34rot8DA=
Subject key identifier:   0A:2D:9B:19:6A:80:42:A3:EA:6C:AA:F4:6E:2C:F7:14:CF:62:3F:98
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       292B227CEC1D1B9A8B32BFA5629590A10BA4AE19
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/433c220e-9fa7-4ee4-94a2-6bca9635183b.roa
Signing time:             Thu 15 Oct 2026 01:07:47 +0000
ROA not before:           Thu 15 Oct 2026 01:07:47 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:22:7c:ec:1d:1b:9a:8b:32:bf:a5:62:95:90:a1:0b:a4:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 01:07:47 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=dfc9c9ed8e7228f3c49c7a8096d4ac796f05be3379b2a97a777093362bbf682a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:7f:ab:ed:2e:0e:60:52:da:ea:86:b3:64:
                    67:97:08:d0:0d:9c:73:cd:a1:a2:d9:a0:7f:90:1d:
                    d4:95:fd:3c:d4:6c:cc:79:70:f1:c0:d1:53:00:d1:
                    3f:83:a3:3a:bb:0c:72:cd:4f:9f:62:3a:6f:ff:0e:
                    ba:95:ee:1c:7d:15:15:03:c6:db:e4:6a:c1:c5:b2:
                    d8:f9:e6:56:5d:a9:35:b8:4e:66:52:b6:cd:69:87:
                    6d:87:cb:2e:db:9b:df:35:4d:46:12:42:b5:3b:58:
                    3e:ed:4f:ac:5b:5d:f9:ec:cc:59:1e:7b:ef:b2:3e:
                    39:1e:bf:b8:ad:3c:b3:5e:5a:a4:6d:5d:fe:b8:f2:
                    78:66:76:38:13:63:5a:be:be:88:63:08:04:f0:7e:
                    bf:27:76:0f:3c:70:e9:db:fe:4b:c6:3a:6e:f3:3b:
                    e1:29:11:f5:bc:f3:86:a6:05:14:c0:3a:15:38:49:
                    96:95:8c:a6:a4:c7:55:c5:33:95:f6:96:c6:12:25:
                    f3:fe:75:55:09:b0:4a:69:eb:c8:7c:40:66:32:f4:
                    d0:54:a0:75:0a:44:57:7c:04:96:00:16:b9:9b:e2:
                    34:96:b3:b7:66:cc:97:62:b9:e6:9d:49:c9:00:0c:
                    29:67:90:bb:af:99:ca:d3:65:f3:91:ee:96:95:e0:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2D:9B:19:6A:80:42:A3:EA:6C:AA:F4:6E:2C:F7:14:CF:62:3F:98
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/433c220e-9fa7-4ee4-94a2-6bca9635183b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:44:09:8c:1b:5e:47:ab:fe:35:84:2d:48:83:61:21:b4:
         a1:ee:72:d3:22:c1:33:20:96:e7:b9:f9:8d:e7:4e:85:7c:cb:
         68:f3:f5:94:cd:13:f7:44:02:06:01:96:e0:1f:a9:f4:9e:e9:
         2a:a4:f0:cd:8e:9d:09:03:5b:1b:7a:8c:af:7d:ab:95:24:18:
         5b:11:8b:03:91:d5:a5:e1:67:f8:24:1f:a4:fb:8f:84:f9:62:
         f8:ea:02:f4:20:5a:b4:d2:25:2a:92:d9:f3:49:eb:cf:f5:b5:
         50:79:74:e7:36:8a:1d:f9:ab:1b:5c:13:ae:5f:cc:44:5f:06:
         0c:43:d0:dd:bc:8b:08:f7:76:32:23:0d:77:9c:d4:e9:f4:8b:
         4d:d9:9c:f0:71:8f:ba:a5:8e:b1:78:68:e6:12:e6:86:f6:4d:
         e5:5f:ed:03:bf:16:07:6c:06:ba:c0:2e:1e:ea:17:8f:06:10:
         f3:2a:d9:f4:54:77:1c:9d:bf:54:3f:43:76:bc:08:d4:cc:1e:
         19:b3:29:f2:a3:b6:65:6b:32:bf:52:bc:71:ca:71:7f:4d:6d:
         e5:e5:5a:37:f8:83:24:ed:3e:59:1f:c5:36:9b:37:fe:4c:b9:
         15:b3:ce:4f:86:92:ca:cd:6b:70:8d:bf:90:8e:ee:49:16:d7:
         7a:ab:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:17 2026 by rpki-client